Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/03Ob5EZtKWjMOSCtyrMMdVWk6EQ.roa
File: 03Ob5EZtKWjMOSCtyrMMdVWk6EQ.roa (raw, json)
Hash identifier: NOmqOtM2MJX3rglOY8wUvXcN4VWRp7FB1Gszh0zs8qY=
Subject key identifier: D3:73:9B:E4:46:6D:29:68:CC:39:20:AD:CA:B3:0C:75:55:A4:E8:44
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018474DDCACD7F9A0EEA0341FEC221B64710
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/03Ob5EZtKWjMOSCtyrMMdVWk6EQ.roa
Signing time: Mon 14 Nov 2022 06:40:03 +0000
ROA not before: Mon 14 Nov 2022 06:40:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 88.216.188.0/22 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.220.0/22 maxlen: 24
84.32.14.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
84.32.34.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
84.32.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:dd:ca:cd:7f:9a:0e:ea:03:41:fe:c2:21:b6:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 14 06:40:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3739be4466d2968cc3920adcab30c7555a4e844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:5a:47:d2:47:26:d0:ee:cb:33:ff:74:6b:
25:45:2a:1d:cf:1e:22:f0:96:bf:27:01:25:61:a3:
ff:d2:21:2d:c5:65:43:f0:c7:9e:33:4f:f7:62:28:
1c:84:7b:8b:24:77:e1:21:90:82:d8:28:c5:7a:e6:
8f:8b:de:69:72:c9:49:ad:97:71:a5:f7:26:34:45:
4a:ae:b2:22:8c:bd:25:ac:28:5a:7b:a2:f2:02:aa:
9b:d1:47:58:8d:ea:6e:88:f3:96:86:90:3e:c3:46:
72:ad:81:89:8b:b1:37:b6:07:64:62:be:7f:19:e6:
60:cb:55:11:b9:51:f8:05:f4:87:8f:9a:fe:89:05:
3d:1b:c8:86:90:71:2d:0a:80:29:a8:55:43:31:61:
50:d1:30:67:62:7c:ce:22:cb:7c:2c:4c:41:4b:e8:
10:7c:34:be:75:29:e7:6f:3e:9c:b1:ee:42:f2:b1:
d8:59:3a:54:4b:ce:06:22:2d:18:c6:21:72:da:25:
01:92:0e:7c:62:bb:67:cb:ac:7f:8a:0a:a8:6d:24:
61:2a:25:4b:3f:da:19:4b:a9:57:f0:a0:19:2f:e0:
03:52:73:14:16:d3:76:07:c1:5f:44:9d:c0:ac:1d:
84:48:93:ca:37:95:6d:11:2a:34:04:8a:1a:f6:f1:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:9B:E4:46:6D:29:68:CC:39:20:AD:CA:B3:0C:75:55:A4:E8:44
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/03Ob5EZtKWjMOSCtyrMMdVWk6EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.40.0/22
84.32.88.0/24
84.32.220.0/22
88.216.40.0/24
88.216.187.0-88.216.191.255
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
46:ac:09:c4:62:8a:58:cf:d5:d4:59:34:83:6c:f2:e5:72:52:
bc:2f:a4:42:f9:5b:b8:78:30:3d:42:fe:e0:32:e5:c8:07:0a:
cb:05:b5:c7:75:1f:63:2a:63:ad:59:03:44:39:95:d6:f0:42:
2d:a2:45:6f:d7:0b:b8:ee:4d:66:b1:ab:c3:1d:0e:02:7b:e2:
61:55:b4:a4:f3:14:b3:21:f6:9a:14:04:e5:b2:bc:69:1f:f3:
1b:df:41:f5:dd:3a:b0:57:3e:15:b6:45:81:da:f0:77:0a:ef:
b6:c5:34:58:3d:54:63:fc:1f:0e:94:4b:d4:01:82:77:5d:66:
97:8d:3d:07:2e:84:eb:fa:30:d5:ec:9a:d2:21:47:0c:a2:00:
24:d9:d3:ae:ad:98:a6:6d:e5:4e:68:1f:7d:12:ea:60:e3:5f:
46:de:f8:dd:8c:a6:61:f7:db:2a:b8:a8:36:42:78:8c:00:b8:
67:41:57:5e:15:08:4e:90:e1:fc:46:65:fc:d0:21:59:f5:8f:
64:b3:0a:76:17:5b:c8:8f:0b:0a:1d:54:fe:8b:8a:52:86:1e:
af:bb:dd:78:bb:68:2f:dc:54:db:24:87:c5:76:58:0d:b7:38:
25:0f:8a:52:66:c9:00:c0:22:18:e5:fc:81:15:03:c4:f7:a7:
80:73:87:a1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYR03crNf5oO6gNB/sIhtkcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTE0MDY0MDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzczOWJlNDQ2NmQyOTY4Y2MzOTIwYWRjYWIzMGM3NTU1YTRlODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6taR9JHJtDuyzP/dGslRSodzx4i
8Ja/JwElYaP/0iEtxWVD8MeeM0/3YigchHuLJHfhIZCC2CjFeuaPi95pcslJrZdx
pfcmNEVKrrIijL0lrChae6LyAqqb0UdYjepuiPOWhpA+w0ZyrYGJi7E3tgdkYr5/
GeZgy1URuVH4BfSHj5r+iQU9G8iGkHEtCoApqFVDMWFQ0TBnYnzOIst8LExBS+gQ
fDS+dSnnbz6cse5C8rHYWTpUS84GIi0YxiFy2iUBkg58Yrtny6x/igqobSRhKiVL
P9oZS6lX8KAZL+ADUnMUFtN2B8FfRJ3ArB2ESJPKN5VtESo0BIoa9vHc+wIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFNNzm+RGbSlozDkgrcqzDHVVpOhEMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvMDNPYjVFWnRLV2pNT1NDdHlyTU1kVldrNkVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAVCAOAwQA
VCAiAwQCVCAoAwQAVCBYAwQCVCDcAwQAWNgoMAwDBABY2LsDBAZY2IADBAJY2Pgw
DQYJKoZIhvcNAQELBQADggEBAEasCcRiiljP1dRZNINs8uVyUrwvpEL5W7h4MD1C
/uAy5cgHCssFtcd1H2MqY61ZA0Q5ldbwQi2iRW/XC7juTWaxq8MdDgJ74mFVtKTz
FLMh9poUBOWyvGkf8xvfQfXdOrBXPhW2RYHa8HcK77bFNFg9VGP8Hw6US9QBgndd
ZpeNPQcuhOv6MNXsmtIhRwyiACTZ066tmKZt5U5oH30S6mDjX0be+N2MpmH32yq4
qDZCeIwAuGdBV14VCE6Q4fxGZfzQIVn1j2SzCnYXW8iPCwodVP6LilKGHq+73Xi7
aC/cVNskh8V2WA23OCUPilJmyQDAIhjl/IEVA8T3p4Bzh6E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:26 2023 by rpki-client on console-ams.rpki-client.org