Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0HtrXgEcfPJUeF9y8PAr2dRgVfo.roa
File: 0HtrXgEcfPJUeF9y8PAr2dRgVfo.roa (raw, json)
Hash identifier: V2qEBcasgreeaAd5AvNbMjeci0F59/XEMzYmPfaSPWU=
Subject key identifier: D0:7B:6B:5E:01:1C:7C:F2:54:78:5F:72:F0:F0:2B:D9:D4:60:55:FA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01553680
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0HtrXgEcfPJUeF9y8PAr2dRgVfo.roa
Signing time: Wed 01 Jun 2022 15:43:24 +0000
ROA not before: Wed 01 Jun 2022 15:43:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
84.32.82.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.96.0/24 maxlen: 24
84.32.8.0/22 maxlen: 24
88.216.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22361728 (0x1553680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 1 15:43:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d07b6b5e011c7cf254785f72f0f02bd9d46055fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:66:56:0f:ae:77:e9:94:9c:1c:b3:71:cb:c7:
9b:d1:8c:b5:f0:a8:05:50:71:5b:77:ab:84:b6:28:
2c:86:f2:ea:49:fa:56:b1:ad:51:6e:ac:6c:da:3a:
2c:15:f1:16:f6:57:d5:91:6a:df:ed:b9:8f:78:f9:
af:dd:a8:3d:59:ec:64:d2:ce:4a:1d:53:f0:20:e8:
8a:f8:4b:2d:c6:ee:1b:f2:e7:5b:d3:ce:53:43:8b:
d4:3b:ad:34:7f:9e:25:92:3c:0e:f6:10:b3:95:cb:
72:56:17:57:dd:bd:70:ed:cf:15:25:cd:00:08:1c:
59:51:71:1e:75:6c:b8:10:8b:c0:7c:3c:b9:43:69:
3a:b7:d9:6a:39:42:e6:2c:cd:b0:5a:74:60:2c:7a:
71:31:2c:bf:66:a5:7e:e5:b7:96:05:3f:f4:1c:39:
4a:88:b9:c5:17:2c:bb:1e:5e:2e:76:35:3f:34:9f:
80:8f:f4:ea:8c:6b:06:d4:be:3d:3e:2c:cb:1f:91:
9e:af:11:82:9a:90:73:9f:33:7a:a5:21:26:6d:cf:
23:26:41:d1:ad:db:fd:ff:de:13:ca:e9:59:19:1f:
e7:f8:f8:bf:21:a0:4d:51:9c:95:15:f1:c9:df:a0:
fa:84:75:14:2c:9d:cb:96:91:1f:69:05:bf:43:98:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7B:6B:5E:01:1C:7C:F2:54:78:5F:72:F0:F0:2B:D9:D4:60:55:FA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0HtrXgEcfPJUeF9y8PAr2dRgVfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/22
84.32.82.0/24
88.216.42.0/24
88.216.96.0/24
88.216.98.0/24
88.216.185.0-88.216.186.255
Signature Algorithm: sha256WithRSAEncryption
80:3f:2e:54:18:9f:14:e8:48:20:73:43:d2:a3:6c:5c:fc:20:
38:2a:96:1c:ea:c0:4c:0c:8c:21:f3:b6:6f:76:f8:ae:76:be:
d0:2f:76:ee:66:2a:59:61:79:3b:0b:23:d2:d2:b7:68:63:38:
fa:7d:b0:00:4c:22:11:d5:20:68:a3:24:67:07:3f:ab:33:56:
91:6d:6f:9b:59:92:3d:4a:a9:17:7b:74:b9:4b:83:ad:cb:f8:
19:61:e9:85:ce:02:64:59:74:5a:c8:2c:49:07:36:d2:81:9a:
dc:7d:45:cb:51:a1:b7:79:89:1f:da:4c:94:36:ea:65:04:bf:
40:42:a0:14:d3:a5:07:e6:26:56:64:4d:99:1c:bd:1a:70:a1:
b4:64:26:1c:e9:92:5d:73:2f:4b:50:86:90:52:ac:aa:d5:fc:
e0:f2:8e:23:b5:55:a8:e8:56:1e:b9:e2:42:2c:21:f3:da:86:
13:4a:f6:b9:cc:da:0a:1c:5e:f5:2d:84:f0:02:8e:6f:97:ba:
de:d6:67:23:78:5a:a1:be:44:18:5d:18:a6:46:ec:e5:9a:3b:
cb:d8:fe:41:27:8b:69:38:6e:d4:a6:85:e2:c8:f1:de:74:bc:
03:39:43:2e:3c:9c:e1:64:6d:59:09:1a:34:4f:82:7a:02:30:
9f:dc:84:54
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEAVU2gDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZmJkNDVmY2UzNTZlMmE2NWYxZTRkMWRhZjc4MTRiNmQ2YmRhM2M1MB4XDTIyMDYw
MTE1NDMyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDA3YjZiNWUwMTFj
N2NmMjU0Nzg1ZjcyZjBmMDJiZDlkNDYwNTVmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO5mVg+ud+mUnByzccvHm9GMtfCoBVBxW3erhLYoLIby6kn6
VrGtUW6sbNo6LBXxFvZX1ZFq3+25j3j5r92oPVnsZNLOSh1T8CDoivhLLcbuG/Ln
W9POU0OL1DutNH+eJZI8DvYQs5XLclYXV929cO3PFSXNAAgcWVFxHnVsuBCLwHw8
uUNpOrfZajlC5izNsFp0YCx6cTEsv2alfuW3lgU/9Bw5Soi5xRcsux5eLnY1PzSf
gI/06oxrBtS+PT4syx+Rnq8RgpqQc58zeqUhJm3PIyZB0a3b/f/eE8rpWRkf5/j4
vyGgTVGclRXxyd+g+oR1FCydy5aRH2kFv0OYrjsCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBTQe2teARx88lR4X3Lw8CvZ1GBV+jAfBgNVHSMEGDAWgBRPvUX841bipl8e
TR2veBS21r2jxTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Q3MUZfT05XNHFaZkhrMGRyM2dVdHRhOW84VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvMzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFjMy8x
LzBIdHJYZ0VjZlBKVWVGOXk4UEFyMmRSZ1Zmby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
Mzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFjMy8xL1Q3MUZfT05XNHFa
ZkhrMGRyM2dVdHRhOW84VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAlQgCAMEAFQgUgMEAFjYKgMEAFjY
YAMEAFjYYjAMAwQAWNi5AwQAWNi6MA0GCSqGSIb3DQEBCwUAA4IBAQCAPy5UGJ8U
6Eggc0PSo2xc/CA4KpYc6sBMDIwh87Zvdviudr7QL3buZipZYXk7CyPS0rdoYzj6
fbAATCIR1SBooyRnBz+rM1aRbW+bWZI9SqkXe3S5S4Oty/gZYemFzgJkWXRayCxJ
BzbSgZrcfUXLUaG3eYkf2kyUNuplBL9AQqAU06UH5iZWZE2ZHL0acKG0ZCYc6ZJd
cy9LUIaQUqyq1fzg8o4jtVWo6FYeueJCLCHz2oYTSva5zNoKHF71LYTwAo5vl7re
1mcjeFqhvkQYXRimRuzlmjvL2P5BJ4tpOG7UpoXiyPHedLwDOUMuPJzhZG1ZCRo0
T4J6AjCf3IRU
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:26 2023 by rpki-client on console-ams.rpki-client.org