Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/36LxlbuKMPOfvzb_UtwymducIAM.roa
File: 36LxlbuKMPOfvzb_UtwymducIAM.roa (raw, json)
Hash identifier: WnBFFFpVEVORlRrVSd9RZLUyjI6UQONwR5HR++Qghos=
Subject key identifier: DF:A2:F1:95:BB:8A:30:F3:9F:BF:36:FF:52:DC:32:99:DB:9C:20:03
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01852BC71846F9A68378784A38678EF36574
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/36LxlbuKMPOfvzb_UtwymducIAM.roa
Signing time: Mon 19 Dec 2022 19:05:46 +0000
ROA not before: Mon 19 Dec 2022 19:05:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 84.32.64.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:c7:18:46:f9:a6:83:78:78:4a:38:67:8e:f3:65:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 19 19:05:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfa2f195bb8a30f39fbf36ff52dc3299db9c2003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:e0:49:93:78:c4:dc:b2:30:2d:70:7e:8e:
04:8b:13:4c:1d:3b:7c:c7:58:43:2a:ca:4f:13:d1:
41:53:f0:59:3c:23:20:0b:38:3a:b0:a3:ed:db:98:
67:cb:08:7a:8b:11:1a:78:d3:3b:c3:5c:73:4c:bd:
f2:ad:8e:c0:0a:6d:48:06:a4:48:42:01:04:76:a6:
96:0b:63:c5:07:34:02:6e:57:53:81:a8:81:a9:e2:
d7:c7:ba:dd:27:f4:66:e0:d7:d7:a9:61:ce:c0:b0:
7c:ae:47:a7:bd:8c:3e:07:41:9c:e3:92:a8:8a:b8:
ea:a8:f7:76:98:3b:36:ee:a4:98:59:78:08:a4:c3:
aa:14:18:78:01:ae:a9:44:50:c1:a2:a8:98:c0:2a:
2c:a1:d9:91:9c:9d:e3:38:bd:a4:16:01:b4:c4:7e:
be:60:bb:10:7d:c6:60:e6:33:4c:ee:60:b8:40:d2:
57:8b:8c:ae:83:93:2e:46:0f:76:16:99:2a:bf:13:
e5:b5:cf:7f:73:38:7d:3a:f5:26:26:a7:f7:c6:d9:
b4:bb:45:f1:53:a6:4c:da:3a:55:e0:dd:57:98:54:
74:6b:7f:03:6b:5a:53:25:0a:4a:e1:cd:b1:0e:7c:
1a:5a:35:f0:e9:31:ec:ce:c3:a6:b3:40:4d:74:60:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:F1:95:BB:8A:30:F3:9F:BF:36:FF:52:DC:32:99:DB:9C:20:03
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/36LxlbuKMPOfvzb_UtwymducIAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.64.0/24
84.32.70.0/24
88.216.96.0/24
88.216.185.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c4:e6:02:ef:2e:d4:cd:13:ea:a8:f1:ef:aa:d9:77:28:8e:
2e:16:1e:49:88:f4:1b:e1:57:56:1e:72:46:8b:a8:5a:70:de:
ef:3f:86:3d:61:51:a5:6f:31:d7:fc:70:be:d9:89:2e:5e:f9:
30:7d:7c:cb:64:c3:b0:d9:08:5a:5f:2a:a4:5c:51:b2:42:cc:
20:e7:6a:e5:a0:a4:ba:30:df:ad:68:8e:a5:ba:02:6a:6c:47:
52:c6:78:8a:f2:5a:b9:38:37:fa:ae:ba:e9:cd:eb:12:be:03:
c9:18:ca:75:19:d8:f8:bd:d3:d2:db:3f:85:b5:b9:ab:cc:c6:
da:0a:d2:1e:ba:a0:1e:1f:7f:f7:cf:98:6a:43:7c:c1:83:4d:
d0:4d:31:ee:b0:cb:81:b3:08:2c:5f:55:15:4d:fe:45:83:5d:
cd:5d:96:9e:43:19:a2:9e:c5:0d:00:77:7d:7f:68:04:f7:c0:
3e:6e:de:e6:77:18:44:3f:4e:66:83:a7:0e:0b:d0:c5:53:d2:
59:6b:75:64:b2:42:15:bb:ac:34:1b:92:b7:e8:8d:8b:b6:83:
e6:85:62:70:1b:c2:22:9b:5e:98:3c:75:80:84:0f:ec:52:e4:
91:15:4d:b1:1f:86:e3:5a:e5:0c:40:f4:cf:ef:69:cc:1b:d0:
c9:7b:b5:56
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYUrxxhG+aaDeHhKOGeO82V0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMjE5MTkwNTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmEyZjE5NWJiOGEzMGYzOWZiZjM2ZmY1MmRjMzI5OWRiOWMyMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinjgSZN4xNyyMC1wfo4EixNMHTt8
x1hDKspPE9FBU/BZPCMgCzg6sKPt25hnywh6ixEaeNM7w1xzTL3yrY7ACm1IBqRI
QgEEdqaWC2PFBzQCbldTgaiBqeLXx7rdJ/Rm4NfXqWHOwLB8rkenvYw+B0Gc45Ko
irjqqPd2mDs27qSYWXgIpMOqFBh4Aa6pRFDBoqiYwCosodmRnJ3jOL2kFgG0xH6+
YLsQfcZg5jNM7mC4QNJXi4yug5MuRg92FpkqvxPltc9/czh9OvUmJqf3xtm0u0Xx
U6ZM2jpV4N1XmFR0a38Da1pTJQpK4c2xDnwaWjXw6THszsOms0BNdGDUnwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFN+i8ZW7ijDzn782/1LcMpnbnCADMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvMzZMeGxidUtNUE9mdnpiX1V0d3ltZHVjSUFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVCBAAwQA
VCBGAwQAWNhgAwQAWNi5MA0GCSqGSIb3DQEBCwUAA4IBAQAlxOYC7y7UzRPqqPHv
qtl3KI4uFh5JiPQb4VdWHnJGi6hacN7vP4Y9YVGlbzHX/HC+2YkuXvkwfXzLZMOw
2QhaXyqkXFGyQswg52rloKS6MN+taI6lugJqbEdSxniK8lq5ODf6rrrpzesSvgPJ
GMp1Gdj4vdPS2z+FtbmrzMbaCtIeuqAeH3/3z5hqQ3zBg03QTTHusMuBswgsX1UV
Tf5Fg13NXZaeQxminsUNAHd9f2gE98A+bt7mdxhEP05mg6cOC9DFU9JZa3VkskIV
u6w0G5K36I2LtoPmhWJwG8Iim16YPHWAhA/sUuSRFU2xH4bjWuUMQPTP72nMG9DJ
e7VW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org