Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/11P1KhDf952l3S4qnp38lBUucIk.roa
File: 11P1KhDf952l3S4qnp38lBUucIk.roa (raw, json)
Hash identifier: +rkPMVh+MHyvDos76IzhPj5Ga0rWmiYOhOytUla1Ef8=
Subject key identifier: D7:53:F5:2A:10:DF:F7:9D:A5:DD:2E:2A:9E:9D:FC:94:15:2E:70:89
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018451B07777599E9B6467A3717A5ACC6F8C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/11P1KhDf952l3S4qnp38lBUucIk.roa
Signing time: Mon 07 Nov 2022 10:43:50 +0000
ROA not before: Mon 07 Nov 2022 10:43:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.213.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:b0:77:77:59:9e:9b:64:67:a3:71:7a:5a:cc:6f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 7 10:43:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d753f52a10dff79da5dd2e2a9e9dfc94152e7089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:b9:7b:83:ed:57:2e:df:9c:c4:79:b1:a7:
15:f3:3e:7f:63:48:89:1a:07:22:58:f8:50:de:01:
f0:22:77:98:52:aa:96:76:46:25:16:23:7f:5e:9d:
f4:51:c6:ba:75:7f:34:93:d1:95:0d:22:31:fc:75:
e2:af:a1:f6:b0:63:c1:5e:8c:eb:ed:77:d9:e5:94:
f7:2d:34:4a:68:15:43:07:cf:c7:df:f5:5e:86:ad:
68:b5:33:3f:c8:bc:5c:f6:13:e8:be:39:48:dc:25:
f3:51:b0:ca:11:01:58:6f:01:f0:f8:90:e2:ea:f8:
ac:b3:7f:23:04:d7:67:62:80:9c:b8:3a:25:10:22:
36:d4:82:ed:44:cf:6e:87:7c:75:a2:8e:01:66:3c:
0a:01:c9:6f:71:0e:56:6b:99:95:0f:55:dc:85:c8:
7c:78:80:11:40:c2:a6:49:75:9b:a8:21:e0:02:e6:
95:37:c2:85:2a:1f:41:1c:ad:de:0e:1d:92:72:49:
10:f7:c9:1e:a2:f9:06:d2:5a:ba:8c:5a:cf:7b:03:
67:e5:1d:35:31:f0:ca:c2:b5:2d:64:75:56:29:e0:
84:18:40:34:79:2d:8c:51:35:dd:39:6b:d9:a1:56:
33:d8:30:ba:79:af:17:0f:03:26:01:4d:96:c7:9a:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:F5:2A:10:DF:F7:9D:A5:DD:2E:2A:9E:9D:FC:94:15:2E:70:89
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/11P1KhDf952l3S4qnp38lBUucIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
68:58:09:ff:98:31:14:dd:a1:f7:4c:13:9a:b4:8e:97:ee:49:
0a:94:0f:c4:9a:25:e6:2f:08:41:a7:92:9e:f0:f9:03:01:62:
fe:18:48:cb:50:dd:f3:ca:e2:33:49:fa:28:dc:2f:2f:9c:58:
bd:2e:14:64:f4:bc:08:5f:6d:d5:7e:a6:d7:cd:d6:45:69:92:
37:38:f4:52:ec:af:1a:b2:08:e8:3f:23:92:1d:6b:1d:46:f6:
25:d9:47:8e:0c:51:24:fe:de:6f:6b:80:f9:c0:f8:5b:1b:92:
cf:b8:4d:f5:98:77:80:b5:72:d1:94:f2:38:7b:78:e5:11:ad:
38:c9:47:6f:dd:9b:43:7c:76:17:db:a9:88:aa:cf:7f:50:4b:
84:a8:8a:17:1e:fc:20:5c:03:e2:85:39:1f:3d:82:64:4f:b1:
07:8d:eb:d0:f7:93:a1:2c:36:7c:c5:75:72:27:0f:b0:cb:7b:
bd:ef:6b:de:5d:70:76:83:b4:d5:d3:b8:f4:48:7d:33:33:de:
f2:17:47:36:9c:34:3d:e7:17:bb:bd:61:01:a3:5d:e8:42:77:
38:73:1c:54:87:16:d7:2d:71:36:7c:4a:4d:2e:a9:0a:95:a2:
cc:43:a8:56:7c:9b:97:ca:32:a6:4f:01:38:74:51:56:82:20:
9c:98:3a:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRRsHd3WZ6bZGejcXpazG+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTA3MTA0MzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzUzZjUyYTEwZGZmNzlkYTVkZDJlMmE5ZTlkZmM5NDE1MmU3MDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeO5e4PtVy7fnMR5sacV8z5/Y0iJ
GgciWPhQ3gHwIneYUqqWdkYlFiN/Xp30Uca6dX80k9GVDSIx/HXir6H2sGPBXozr
7XfZ5ZT3LTRKaBVDB8/H3/Vehq1otTM/yLxc9hPovjlI3CXzUbDKEQFYbwHw+JDi
6viss38jBNdnYoCcuDolECI21ILtRM9uh3x1oo4BZjwKAclvcQ5Wa5mVD1Xchch8
eIARQMKmSXWbqCHgAuaVN8KFKh9BHK3eDh2SckkQ98keovkG0lq6jFrPewNn5R01
MfDKwrUtZHVWKeCEGEA0eS2MUTXdOWvZoVYz2DC6ea8XDwMmAU2Wx5pyswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNdT9SoQ3/edpd0uKp6d/JQVLnCJMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvMTFQMUtoRGY5NTJsM1M0cW5wMzhsQlV1Y0lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNjVAwQA
WNjXMA0GCSqGSIb3DQEBCwUAA4IBAQBoWAn/mDEU3aH3TBOatI6X7kkKlA/EmiXm
LwhBp5Ke8PkDAWL+GEjLUN3zyuIzSfoo3C8vnFi9LhRk9LwIX23VfqbXzdZFaZI3
OPRS7K8asgjoPyOSHWsdRvYl2UeODFEk/t5va4D5wPhbG5LPuE31mHeAtXLRlPI4
e3jlEa04yUdv3ZtDfHYX26mIqs9/UEuEqIoXHvwgXAPihTkfPYJkT7EHjevQ95Oh
LDZ8xXVyJw+wy3u972veXXB2g7TV07j0SH0zM97yF0c2nDQ95xe7vWEBo13oQnc4
cxxUhxbXLXE2fEpNLqkKlaLMQ6hWfJuXyjKmTwE4dFFWgiCcmDpJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org