Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2mfeV22kQdZmfSNiUrnowX7Q0U0.roa
File: 2mfeV22kQdZmfSNiUrnowX7Q0U0.roa (raw, json)
Hash identifier: g2Zj+igXrdokrwOGoPNtWLL22mbLUCqI4rjYZx8dWgw=
Subject key identifier: DA:67:DE:57:6D:A4:41:D6:66:7D:23:62:52:B9:E8:C1:7E:D0:D1:4D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018548A6FD8CABDA784DCCC0CC56764F144D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2mfeV22kQdZmfSNiUrnowX7Q0U0.roa
Signing time: Sun 25 Dec 2022 09:39:41 +0000
ROA not before: Sun 25 Dec 2022 09:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 88.216.199.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:a6:fd:8c:ab:da:78:4d:cc:c0:cc:56:76:4f:14:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 25 09:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da67de576da441d6667d236252b9e8c17ed0d14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:2e:cf:bd:26:dc:fe:41:f3:c3:13:a0:0a:
2e:90:32:db:16:c9:3b:0a:da:9b:5b:7b:58:42:66:
ec:ca:45:ae:dd:17:a9:d8:66:79:eb:55:8f:35:7a:
71:00:92:07:0c:77:70:cb:1d:c6:bc:fa:b8:f0:11:
9f:a6:69:9e:9b:b1:58:84:4a:f1:36:6a:e2:0c:37:
30:99:fa:ba:72:82:1b:78:63:f1:b0:a5:8a:54:7c:
a8:1e:5a:01:af:df:3a:37:84:dd:95:9f:a6:91:1c:
09:4e:86:70:a9:64:5d:fd:00:41:6d:4b:b7:b4:49:
4b:9c:eb:66:53:21:b8:a4:ed:86:16:1e:54:64:c1:
de:b4:37:fe:0e:61:58:07:97:5a:a4:15:0e:51:2b:
7f:87:d8:7e:19:90:70:c0:f5:d0:0b:c7:39:a8:4c:
8e:04:91:2f:d8:b6:ca:e1:29:37:f8:9a:cf:c1:24:
52:4e:19:ce:cf:1e:78:95:da:e8:82:04:6c:76:05:
41:27:28:e7:f3:d7:c3:4a:a1:f4:bf:9b:8e:aa:86:
b1:6b:76:d2:13:36:8f:c3:b1:9d:d0:91:e1:9a:ee:
0a:05:a0:6c:af:2f:55:91:a8:ac:1f:be:9f:4c:21:
39:92:10:5c:15:62:66:a2:50:da:d6:8c:51:1d:1a:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:67:DE:57:6D:A4:41:D6:66:7D:23:62:52:B9:E8:C1:7E:D0:D1:4D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2mfeV22kQdZmfSNiUrnowX7Q0U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.108.0/24
84.32.177.0/24
84.32.218.0/24
84.32.226.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/23
88.216.92.0/24
88.216.134.0/24
88.216.199.0/24
88.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
30:7e:b0:d9:f1:3c:d3:16:45:cc:2d:ec:9b:8f:dd:81:cc:89:
2c:fc:0c:11:d4:1b:1a:a0:92:7d:d1:80:f8:f4:8b:8d:21:92:
48:e3:35:ee:48:89:e0:91:f6:e3:a5:9e:b2:e1:7f:51:ae:fc:
b3:e5:7b:f3:e8:d4:8f:7b:c5:88:d8:90:75:ca:51:1f:42:66:
bf:ce:9c:05:67:74:ee:13:81:de:06:1b:25:3b:b8:66:ba:30:
d2:e5:33:6c:ba:13:e1:0a:22:b4:23:9e:06:b0:84:a2:f5:bb:
c5:c8:9b:41:da:ab:cd:d1:4c:3c:14:8f:6b:64:46:f8:13:74:
18:1f:87:7a:3b:a0:8d:16:f6:ee:f7:4f:4a:df:98:da:8f:81:
d2:ba:89:91:48:3f:76:d8:82:18:3b:ba:36:de:c7:f9:f7:87:
95:b8:5b:be:31:11:74:fe:94:8e:7c:1c:55:ce:9f:bf:10:f2:
4f:58:a9:0b:b8:a9:51:d4:9b:e7:da:50:09:cb:3f:88:86:1e:
df:e1:ff:d0:87:7c:84:f4:89:d8:b4:61:4e:f6:99:8c:c0:71:
6f:f9:90:7c:80:f9:74:76:75:55:e2:11:c2:02:7c:65:63:4d:
3e:3e:e8:94:98:2f:d6:8f:c5:a3:4c:ce:12:8c:f8:51:e6:fc:
c3:af:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:26 2023 by rpki-client on console-ams.rpki-client.org