Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0zPYZe3QLnK6lAirxr9RG6FDhec.roa
File: 0zPYZe3QLnK6lAirxr9RG6FDhec.roa (raw, json)
Hash identifier: +l1yA8QGftMAIIZSIU0iEwYhjs/GjTmS57wwgSAxx7s=
Subject key identifier: D3:33:D8:65:ED:D0:2E:72:BA:94:08:AB:C6:BF:51:1B:A1:43:85:E7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018446A7506AE097603814F4C352B09C467B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0zPYZe3QLnK6lAirxr9RG6FDhec.roa
Signing time: Sat 05 Nov 2022 07:18:01 +0000
ROA not before: Sat 05 Nov 2022 07:18:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
88.216.196.0/24 maxlen: 24
84.32.91.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.37.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:a7:50:6a:e0:97:60:38:14:f4:c3:52:b0:9c:46:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 5 07:18:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d333d865edd02e72ba9408abc6bf511ba14385e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:7c:5f:0f:78:70:d9:49:b2:99:75:9f:a8:
d4:1b:e7:a1:2c:63:60:8d:ba:34:a3:5b:42:1e:e3:
20:2b:5e:ad:e9:65:30:79:95:18:be:ea:e4:1b:32:
eb:73:05:09:92:a5:98:dd:74:d4:ed:b5:af:45:8e:
9f:2e:74:91:38:61:1d:e7:19:80:26:1f:1e:af:3d:
99:8b:c6:52:7d:b5:8e:01:bb:3a:bb:b2:fd:61:4e:
93:c1:90:e5:fa:bd:fc:22:83:ea:b2:da:d1:a1:fe:
e6:23:06:40:08:c2:b3:dc:2f:97:3f:1a:c7:35:d2:
5b:76:51:ae:c5:1f:1d:dc:aa:75:d7:48:87:9d:c2:
dc:59:f2:84:86:59:64:79:7a:2c:b2:f1:14:05:f5:
13:39:37:da:4a:96:87:1d:8f:89:3d:af:31:24:e6:
63:2c:1a:46:c1:dd:73:bb:23:75:b2:97:3d:ee:a3:
b3:0a:27:3a:f9:bb:f0:88:c4:b9:09:1a:a4:47:7f:
8c:fa:75:53:85:ec:bb:c9:54:37:58:d4:a3:a4:ad:
a3:eb:d2:23:23:88:bd:99:42:93:48:c2:14:27:2a:
f8:78:f0:cb:ce:89:4d:c3:d2:a9:bb:5c:eb:ff:05:
d6:63:57:5d:e8:e1:11:ab:eb:06:a8:03:1e:d4:5e:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:D8:65:ED:D0:2E:72:BA:94:08:AB:C6:BF:51:1B:A1:43:85:E7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0zPYZe3QLnK6lAirxr9RG6FDhec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.57.0/24
84.32.67.0/24
84.32.85.0/24
84.32.91.0/24
84.32.241.0/24
88.216.37.0-88.216.39.255
88.216.100.0/23
88.216.130.0/24
88.216.187.0/24
88.216.196.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a8:50:68:80:9d:ce:aa:d8:fb:3c:56:8e:a9:cb:73:5f:dc:
c5:c8:43:cc:79:2f:33:26:35:32:0a:9d:92:08:b2:e9:6f:e7:
b8:6a:0d:cf:05:4a:bc:39:f5:18:09:df:42:08:59:85:03:eb:
13:96:95:66:9a:44:d6:59:5f:94:a1:30:91:89:ea:59:87:6e:
3f:ef:76:d0:03:7b:96:e4:e5:87:d8:e5:81:eb:41:e9:96:79:
7d:c8:93:8b:73:00:45:e7:74:ad:9f:79:be:94:48:ff:16:87:
31:35:af:ab:a5:4f:88:3d:9e:c1:7f:22:bc:21:84:b0:16:92:
06:83:24:ae:f4:cd:6f:29:19:3c:77:a9:ab:ad:e0:4e:68:cd:
f8:c1:6e:e7:2a:d6:26:29:f4:2d:9a:8f:bc:cd:ef:16:b4:3e:
cf:71:09:96:73:ab:c0:fc:49:f4:6f:f8:01:09:41:26:ef:f7:
fe:f6:72:23:ee:f9:95:7f:29:53:b2:98:b7:1c:ba:e1:12:8c:
fa:9b:3e:45:7b:e2:0b:1a:9d:9e:8c:df:02:33:c8:98:b5:28:
51:20:7b:a4:50:f3:0a:20:1b:6c:9d:0e:b0:d2:79:d5:8d:a2:
11:59:a6:46:9a:f3:5e:0a:8b:6e:5a:47:70:b3:f5:ff:3c:d0:
1f:ce:b9:39
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYRGp1Bq4JdgOBT0w1KwnEZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTA1MDcxODAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzMzZDg2NWVkZDAyZTcyYmE5NDA4YWJjNmJmNTExYmExNDM4NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRp8Xw94cNlJspl1n6jUG+ehLGNg
jbo0o1tCHuMgK16t6WUweZUYvurkGzLrcwUJkqWY3XTU7bWvRY6fLnSROGEd5xmA
Jh8erz2Zi8ZSfbWOAbs6u7L9YU6TwZDl+r38IoPqstrRof7mIwZACMKz3C+XPxrH
NdJbdlGuxR8d3Kp110iHncLcWfKEhllkeXossvEUBfUTOTfaSpaHHY+JPa8xJOZj
LBpGwd1zuyN1spc97qOzCic6+bvwiMS5CRqkR3+M+nVThey7yVQ3WNSjpK2j69Ij
I4i9mUKTSMIUJyr4ePDLzolNw9Kpu1zr/wXWY1dd6OERq+sGqAMe1F6L8wIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFNMz2GXt0C5yupQIq8a/URuhQ4XnMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvMHpQWVplM1FMbks2bEFpcnhyOVJHNkZEaGVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAVCAnAwQA
VCA5AwQAVCBDAwQAVCBVAwQAVCBbAwQAVCDxMAwDBABY2CUDBANY2CADBAFY2GQD
BABY2IIDBABY2LsDBABY2MQwDQYJKoZIhvcNAQELBQADggEBAAmoUGiAnc6q2Ps8
Vo6py3Nf3MXIQ8x5LzMmNTIKnZIIsulv57hqDc8FSrw59RgJ30IIWYUD6xOWlWaa
RNZZX5ShMJGJ6lmHbj/vdtADe5bk5YfY5YHrQemWeX3Ik4tzAEXndK2feb6USP8W
hzE1r6ulT4g9nsF/IrwhhLAWkgaDJK70zW8pGTx3qaut4E5ozfjBbucq1iYp9C2a
j7zN7xa0Ps9xCZZzq8D8SfRv+AEJQSbv9/72ciPu+ZV/KVOymLccuuESjPqbPkV7
4gsanZ6M3wIzyJi1KFEge6RQ8wogG2ydDrDSedWNohFZpkaa814Ki25aR3Cz9f88
0B/OuTk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org