Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0KJUv1kgHKCvlff6HQ3ub63ZfJA.roa
File: 0KJUv1kgHKCvlff6HQ3ub63ZfJA.roa (raw, json)
Hash identifier: bdPpx3HHwbVaKLRlt0q9OBp8M+KnW4LAOVjMJI/7wkg=
Subject key identifier: D0:A2:54:BF:59:20:1C:A0:AF:95:F7:FA:1D:0D:EE:6F:AD:D9:7C:90
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 011FE25F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0KJUv1kgHKCvlff6HQ3ub63ZfJA.roa
Signing time: Thu 19 May 2022 08:43:17 +0000
ROA not before: Thu 19 May 2022 08:43:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18866783 (0x11fe25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 19 08:43:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0a254bf59201ca0af95f7fa1d0dee6fadd97c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:e8:f3:23:5d:8d:42:37:fb:6c:4f:31:ee:
c8:ea:e3:46:3f:e3:3a:5c:e4:75:25:ae:2e:44:24:
96:9f:c3:fe:cf:1f:b0:94:8b:7a:5b:80:d2:91:27:
ae:fb:55:8b:be:20:0d:c7:d5:8f:be:e7:5a:83:88:
2d:f8:45:9b:e3:99:01:07:de:c9:e7:3c:86:74:32:
e4:c8:f7:00:43:12:09:a4:c4:a2:c1:e9:ae:69:1e:
5a:b6:99:e7:ec:68:f1:13:52:44:44:ef:05:89:4c:
6c:5f:9a:1d:b9:13:b0:2f:ee:97:6c:5b:7d:05:4e:
60:bf:c2:70:5b:04:94:8f:31:d9:2b:f5:aa:b9:f5:
7a:df:a5:8e:44:0e:30:89:e3:63:97:d8:6d:43:fb:
c9:93:ea:28:d9:36:7f:87:10:5c:7f:88:55:1e:92:
a9:04:e7:d4:bd:e4:62:e9:5e:a7:1b:d7:e9:56:56:
56:c9:e0:26:90:00:ef:93:ba:0e:ef:01:e2:74:df:
13:bc:db:79:08:c2:44:6e:0b:3c:3e:54:30:dc:bc:
5c:5f:30:76:e9:fd:9e:6f:8f:29:4e:bd:d2:a1:d0:
31:9b:e9:ed:39:75:2b:54:3c:f6:ce:f0:95:64:2d:
1f:4a:b9:2b:0a:9e:fa:5b:e5:4b:86:a9:5e:06:2d:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:54:BF:59:20:1C:A0:AF:95:F7:FA:1D:0D:EE:6F:AD:D9:7C:90
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0KJUv1kgHKCvlff6HQ3ub63ZfJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.42.0/24
88.216.98.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:cb:91:80:72:c0:66:59:b1:4a:ac:1d:f7:19:cd:a7:57:ab:
00:9c:0d:be:2d:0e:7b:c6:ed:d7:9e:72:02:b5:d5:5b:a8:0e:
de:e7:4e:1c:57:3b:6e:ca:ed:b6:d4:e3:8b:f3:dd:5d:a2:02:
35:4e:83:e7:bb:d6:52:65:b2:c8:b6:14:7f:6e:4d:fa:3c:0b:
c4:eb:48:f3:c9:7f:ec:41:b9:d9:c9:5c:5e:e9:58:09:b1:82:
17:c2:52:e8:6d:c6:60:cf:f6:1a:67:db:24:13:cd:d2:62:f6:
49:0c:e9:45:c7:27:3d:9a:92:7b:df:e1:e0:d2:46:6b:09:af:
8b:c4:c7:a1:56:db:58:7d:cc:f4:77:db:71:c5:d6:0c:ba:ff:
20:c8:0a:97:0d:de:a9:2a:f1:d9:8c:cf:da:68:f8:cd:78:a2:
64:81:cc:e0:d8:21:14:82:ec:c4:0a:58:ad:f8:9b:f8:ad:61:
e8:52:af:f7:6e:62:9b:21:c2:76:c5:56:59:a1:4b:19:cc:9c:
65:3c:68:be:10:24:cb:75:94:f1:e2:b4:cc:03:6e:b0:10:e1:
be:ba:27:d8:07:e1:eb:f6:c3:7b:93:71:21:92:a5:13:00:b9:
a2:47:9f:ba:c8:1c:2d:91:54:ec:69:77:b4:74:98:c2:c1:bf:
56:8b:cb:43
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAR/iXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZmJkNDVmY2UzNTZlMmE2NWYxZTRkMWRhZjc4MTRiNmQ2YmRhM2M1MB4XDTIyMDUx
OTA4NDMxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDBhMjU0YmY1OTIw
MWNhMGFmOTVmN2ZhMWQwZGVlNmZhZGQ5N2M5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKl/6PMjXY1CN/tsTzHuyOrjRj/jOlzkdSWuLkQklp/D/s8f
sJSLeluA0pEnrvtVi74gDcfVj77nWoOILfhFm+OZAQfeyec8hnQy5Mj3AEMSCaTE
osHprmkeWraZ5+xo8RNSRETvBYlMbF+aHbkTsC/ul2xbfQVOYL/CcFsElI8x2Sv1
qrn1et+ljkQOMInjY5fYbUP7yZPqKNk2f4cQXH+IVR6SqQTn1L3kYulepxvX6VZW
VsngJpAA75O6Du8B4nTfE7zbeQjCRG4LPD5UMNy8XF8wdun9nm+PKU690qHQMZvp
7Tl1K1Q89s7wlWQtH0q5Kwqe+lvlS4apXgYtyb8CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTQolS/WSAcoK+V9/odDe5vrdl8kDAfBgNVHSMEGDAWgBRPvUX841bipl8e
TR2veBS21r2jxTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Q3MUZfT05XNHFaZkhrMGRyM2dVdHRhOW84VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvMzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFjMy8x
LzBLSlV2MWtnSEtDdmxmZjZIUTN1YjYzWmZKQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
Mzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFjMy8xL1Q3MUZfT05XNHFa
ZkhrMGRyM2dVdHRhOW84VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFjYKgMEAFjYYgMEAFjYujANBgkq
hkiG9w0BAQsFAAOCAQEAHsuRgHLAZlmxSqwd9xnNp1erAJwNvi0Oe8bt155yArXV
W6gO3udOHFc7bsrtttTji/PdXaICNU6D57vWUmWyyLYUf25N+jwLxOtI88l/7EG5
2clcXulYCbGCF8JS6G3GYM/2GmfbJBPN0mL2SQzpRccnPZqSe9/h4NJGawmvi8TH
oVbbWH3M9HfbccXWDLr/IMgKlw3eqSrx2YzP2mj4zXiiZIHM4NghFILsxApYrfib
+K1h6FKv925imyHCdsVWWaFLGcycZTxovhAky3WU8eK0zANusBDhvron2Afh6/bD
e5NxIZKlEwC5okefusgcLZFU7Gl3tHSYwsG/VovLQw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:26 2023 by rpki-client on console-ams.rpki-client.org