Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-lpPVL_xUtBoktztCnFVBxHKCFI.roa
File: 1-lpPVL_xUtBoktztCnFVBxHKCFI.roa (raw, json)
Hash identifier: XjsUbYVhI1KccZmjViMLElwDUutzOSAuB7IHcJI4upU=
Subject key identifier: FA:5A:4F:54:BF:F1:52:D0:68:92:DC:ED:0A:71:55:07:11:CA:08:52
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01833FB6ED4F9A8ADF351BA94ED1B3591F1D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-lpPVL_xUtBoktztCnFVBxHKCFI.roa
Signing time: Thu 15 Sep 2022 05:54:56 +0000
ROA not before: Thu 15 Sep 2022 05:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 88.216.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3f:b6:ed:4f:9a:8a:df:35:1b:a9:4e:d1:b3:59:1f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 15 05:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa5a4f54bff152d06892dced0a71550711ca0852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:29:a1:33:78:6a:8e:73:e1:84:54:f5:7c:
ab:d5:1b:e5:24:f1:d3:22:66:79:cf:6e:19:f1:02:
df:3d:51:3a:75:6d:8d:1a:65:b5:13:f0:7d:12:a0:
9a:a6:b4:f4:09:1d:f5:f3:39:90:f1:9a:37:f3:fe:
70:1f:4f:74:15:81:5f:cb:ae:75:f3:f1:30:5b:4b:
d4:a5:a1:b6:09:cc:7f:33:cb:85:ac:aa:86:78:81:
7e:a7:61:63:53:11:dc:7e:60:98:7b:03:62:1a:0d:
f4:f2:2e:af:7c:d7:49:86:68:44:54:fa:d5:5f:4a:
32:23:8a:45:77:a6:64:b6:f5:3f:e0:6b:bb:7f:bc:
91:d6:0f:fd:35:dd:39:67:9c:1b:07:79:f7:ca:14:
03:57:24:e5:e2:c0:a5:6c:0a:91:5a:fe:cc:c1:b7:
66:98:31:be:f2:9f:a3:22:69:4c:57:22:ff:e0:aa:
94:5b:85:22:64:08:fe:9d:fc:3d:dc:d8:9c:1c:8b:
8a:ac:59:a0:16:4d:70:90:5f:42:b3:04:1b:20:b4:
26:62:c7:42:28:11:67:f7:49:11:35:b6:e7:b9:8f:
89:45:77:39:de:3c:84:aa:65:4c:c3:6d:1a:00:e9:
93:64:60:61:b8:54:9f:8f:1f:7c:f6:69:2d:7f:90:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:4F:54:BF:F1:52:D0:68:92:DC:ED:0A:71:55:07:11:CA:08:52
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-lpPVL_xUtBoktztCnFVBxHKCFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9f:80:df:bd:e2:a0:e3:49:8f:c2:b2:1d:cc:26:12:8e:85:
8b:f3:69:38:07:fa:3b:96:18:c5:94:09:34:d5:05:63:86:5e:
d8:e3:09:ed:61:c8:6a:48:78:f2:fa:39:aa:18:62:64:2d:4d:
f6:6a:c9:3d:ed:3c:7c:bb:52:5d:2b:f0:48:c0:db:46:12:ed:
ab:03:18:9b:e9:5c:b7:42:d0:45:e6:3e:75:9b:82:d3:d1:21:
89:4e:28:09:18:b5:27:8a:6f:52:7f:11:5a:14:c2:f4:bb:00:
7f:98:22:d1:bd:88:8f:d8:84:ff:d3:73:68:95:31:5a:41:72:
5e:65:35:a6:4c:ec:7c:ae:5e:e7:14:28:22:61:cc:34:12:54:
89:17:03:91:d5:a6:f4:54:ff:ce:aa:fe:28:47:d5:e9:58:55:
37:28:0d:53:20:dc:40:c1:c7:98:fc:36:85:f8:68:56:4b:a0:
2c:b7:4d:a4:e1:68:99:25:1d:70:8b:ec:ca:0b:2a:63:77:c8:
1b:2d:02:b4:36:57:31:9c:e5:fd:7f:0f:38:c8:21:eb:e6:34:
e0:f0:ef:cd:d9:6d:0c:53:de:f4:e4:b2:09:3f:db:95:89:e6:
54:06:b4:49:09:7f:3c:ad:15:ab:e2:74:bf:36:dd:48:a8:f4:
5e:83:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org