Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lpDyaxBMYbb_ylzJNgCaG-CaK1I.roa
File: lpDyaxBMYbb_ylzJNgCaG-CaK1I.roa (raw, json)
Hash identifier: wUprb3KgtziT0UNef6FbDSZKuWSF+kbFplvNOdGWtGE=
Subject key identifier: 96:90:F2:6B:10:4C:61:B6:FF:CA:5C:C9:36:00:9A:1B:E0:9A:2B:52
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188E9AC80F4530BD46CEB94B474072C629F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lpDyaxBMYbb_ylzJNgCaG-CaK1I.roa
Signing time: Fri 23 Jun 2023 19:12:56 +0000
ROA not before: Fri 23 Jun 2023 19:12:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e9:ac:80:f4:53:0b:d4:6c:eb:94:b4:74:07:2c:62:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 23 19:12:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9690f26b104c61b6ffca5cc936009a1be09a2b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:cf:65:06:ce:bc:ce:10:18:ad:e1:c4:d7:
e3:a9:01:41:6b:e8:47:b2:62:c9:de:e7:15:c1:91:
5b:88:3f:b6:20:fb:d2:75:7e:06:80:c6:5e:af:aa:
ea:99:01:df:15:fe:57:c9:47:0f:9f:6d:e5:9e:ba:
9b:8e:bb:e0:2f:1e:09:24:37:5f:99:57:80:30:e5:
6e:c1:be:db:b0:0d:f7:5d:4b:6b:3e:0b:f5:44:6b:
53:d0:cb:0e:57:48:7e:2c:aa:33:5f:6d:0e:af:4b:
00:8f:df:89:cf:a0:cf:c4:c3:f7:66:c7:c1:77:f5:
c8:8f:6a:ae:da:19:d4:d5:c3:29:37:18:24:a9:1d:
5b:ef:08:b5:6d:66:4e:b8:95:4a:bd:b6:b8:88:fb:
cb:dc:3c:50:58:94:d7:f9:2c:ed:f1:b7:24:9f:30:
f1:2c:e0:0e:44:20:92:85:63:c8:66:49:fa:3a:3f:
e6:a3:43:5c:f3:f6:90:d8:84:68:db:a3:7f:7e:4a:
77:c2:99:d9:37:a2:2f:2b:4d:bb:ba:15:89:6f:ed:
82:f4:4c:3f:d2:b7:b8:0a:5b:62:9d:a9:e7:c2:19:
e9:05:9e:9c:fe:99:36:fc:44:db:a6:41:27:97:b7:
fc:e2:19:ee:38:82:c4:fd:d4:c8:2f:66:d3:ae:5e:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:F2:6B:10:4C:61:B6:FF:CA:5C:C9:36:00:9A:1B:E0:9A:2B:52
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lpDyaxBMYbb_ylzJNgCaG-CaK1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e8:4c:51:8c:51:a1:41:53:60:c6:20:5e:b2:24:bc:b6:3b:
ef:29:24:21:5a:e7:a8:68:4d:57:75:c4:3b:88:6a:b2:40:28:
c6:e7:79:22:c4:4c:15:34:81:c5:72:83:03:72:41:77:65:63:
7c:b1:3e:b3:e4:e5:bc:fa:f9:b9:d1:19:06:fe:f9:2c:6e:ba:
e8:7d:38:3e:e5:ce:56:5d:a6:55:c5:3f:ff:33:c8:1e:84:22:
a2:e7:86:eb:8c:aa:84:7b:1e:c1:d7:54:89:62:fc:71:66:83:
e7:06:37:7a:85:fd:30:e0:ba:54:3e:7e:e0:fb:a1:74:bc:ed:
dc:cd:63:8b:bd:d5:6d:df:03:27:0e:aa:62:9f:75:f7:b3:b7:
e5:4e:8d:91:6f:cf:9a:f8:71:4e:a4:f9:a3:5d:e3:05:de:83:
dc:e6:58:69:f5:7c:6d:8a:20:2b:c0:65:96:fc:9d:83:36:45:
51:b8:77:f1:ff:e9:33:28:38:45:4c:ca:f1:3e:a0:7a:ca:09:
d6:ee:c4:d5:1f:9b:21:0d:1b:52:f1:20:f9:71:05:35:59:17:
54:0a:e5:0e:2c:90:57:0c:93:7e:e2:26:e7:d6:d9:ac:e0:33:
29:d8:33:a6:a1:94:f7:51:6f:7d:60:fa:dc:07:a1:53:c7:98:
fb:1b:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:19:31 2025 by rpki-client