Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3EdmhBImHbFsVKR7owNYe-IfQPU.roa
File: 3EdmhBImHbFsVKR7owNYe-IfQPU.roa (raw, json)
Hash identifier: 5eVHUnoQcSP0UZMLoi9oxmxblRTIHwG19gy9BoWp0Jo=
Subject key identifier: DC:47:66:84:12:26:1D:B1:6C:54:A4:7B:A3:03:58:7B:E2:1F:40:F5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018244CCD74BB87DC077EA6036BDCE0A75AD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3EdmhBImHbFsVKR7owNYe-IfQPU.roa
Signing time: Thu 28 Jul 2022 12:34:11 +0000
ROA not before: Thu 28 Jul 2022 12:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 88.216.180.0/22 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:cc:d7:4b:b8:7d:c0:77:ea:60:36:bd:ce:0a:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 28 12:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc47668412261db16c54a47ba303587be21f40f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:b9:fd:97:b3:96:89:92:42:20:3b:40:97:
95:5d:3c:4d:78:5a:c0:bd:39:a3:89:bd:60:72:d5:
15:10:96:d1:df:f2:c9:26:4f:15:3f:55:e6:57:fb:
82:14:3d:6c:45:b4:d3:79:97:f4:2f:82:8e:d4:ca:
56:ff:94:95:bd:d9:55:fb:a8:44:d4:f3:ec:51:53:
4c:58:ec:81:e2:4f:1c:aa:5c:4d:fa:5a:9d:3e:91:
d8:6e:aa:11:ce:8a:0f:e9:20:79:69:6a:51:a2:e0:
4c:5b:88:85:d1:bc:a4:f5:75:5c:76:17:25:79:6d:
70:02:12:75:0d:8b:b7:ea:35:82:d0:6c:3d:b8:41:
22:9e:03:16:c7:45:80:50:9e:62:5d:f1:c7:e7:56:
89:ac:8c:dc:75:24:c0:08:f7:60:e5:5a:2f:f9:65:
e9:e7:7c:b5:c7:23:94:63:ac:d5:19:e3:60:9c:b7:
01:6a:db:51:1c:5d:6d:1a:18:55:b7:ea:46:31:fc:
fa:4a:6b:20:88:af:3a:23:03:59:c6:05:75:99:ef:
11:5e:36:d2:f6:c4:ed:2a:79:46:c7:92:38:bd:0e:
e5:de:78:15:b4:b2:11:a0:e0:49:ed:99:5e:b2:60:
d7:5b:3d:38:40:ad:b6:29:bf:f9:d1:46:04:32:17:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:47:66:84:12:26:1D:B1:6C:54:A4:7B:A3:03:58:7B:E2:1F:40:F5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3EdmhBImHbFsVKR7owNYe-IfQPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.180.0/22
88.216.212.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
32:47:e3:1f:41:82:d2:ae:fe:70:42:3b:e6:1b:db:33:e2:e7:
aa:a7:dd:19:eb:ac:07:77:ec:e1:aa:63:ef:71:07:8b:21:26:
90:3a:d7:fe:98:c5:5b:39:5f:41:42:d2:5d:61:ff:27:9b:f8:
ba:cb:a7:c2:64:b8:fa:ec:06:16:51:74:44:a3:e5:d5:6b:a0:
65:58:4e:fc:70:7b:f3:9e:3e:2e:9c:a3:5d:f7:6e:0b:51:9e:
aa:c7:68:bb:4e:af:7d:b0:9f:5f:31:a3:0f:5e:9f:9f:1c:19:
2d:ee:e0:b7:9e:28:df:60:28:fd:fe:28:87:26:24:3b:a3:83:
1b:b3:55:84:5f:91:7f:b9:87:5c:7e:fa:9f:d0:4f:08:36:bd:
2b:35:e8:bf:41:a4:ec:7c:59:ce:73:65:07:ab:7c:4a:d3:32:
c3:66:3a:14:43:e3:00:00:bb:2b:e2:e0:99:8e:28:c4:08:5f:
10:e4:95:ad:42:fb:9d:9b:d4:b6:a7:27:4e:34:df:65:18:3b:
5c:80:9a:58:41:ab:1e:53:e0:51:57:d3:ca:3d:f1:e3:26:e6:
a8:23:a6:91:e4:07:03:27:0b:ff:db:e8:f5:91:36:4e:f2:ca:
52:9c:38:9a:65:24:1f:ad:d0:20:b9:cd:49:f9:3e:9f:0f:3c:
e7:8e:ec:2b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYJEzNdLuH3Ad+pgNr3OCnWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIwNzI4MTIzNDExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzQ3NjY4NDEyMjYxZGIxNmM1NGE0N2JhMzAzNTg3YmUyMWY0MGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOm5/ZezlomSQiA7QJeVXTxNeFrA
vTmjib1gctUVEJbR3/LJJk8VP1XmV/uCFD1sRbTTeZf0L4KO1MpW/5SVvdlV+6hE
1PPsUVNMWOyB4k8cqlxN+lqdPpHYbqoRzooP6SB5aWpRouBMW4iF0byk9XVcdhcl
eW1wAhJ1DYu36jWC0Gw9uEEingMWx0WAUJ5iXfHH51aJrIzcdSTACPdg5Vov+WXp
53y1xyOUY6zVGeNgnLcBattRHF1tGhhVt+pGMfz6SmsgiK86IwNZxgV1me8RXjbS
9sTtKnlGx5I4vQ7l3ngVtLIRoOBJ7ZlesmDXWz04QK22Kb/50UYEMhcrRwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNxHZoQSJh2xbFSke6MDWHviH0D1MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvM0VkbWhCSW1IYkZzVktSN293TlllLUlmUVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCWNi0AwQC
WNjUMAwDBAJY2OwDBANY2PAwDQYJKoZIhvcNAQELBQADggEBADJH4x9BgtKu/nBC
O+Yb2zPi56qn3RnrrAd37OGqY+9xB4shJpA61/6YxVs5X0FC0l1h/yeb+LrLp8Jk
uPrsBhZRdESj5dVroGVYTvxwe/OePi6co133bgtRnqrHaLtOr32wn18xow9en58c
GS3u4LeeKN9gKP3+KIcmJDujgxuzVYRfkX+5h1x++p/QTwg2vSs16L9BpOx8Wc5z
ZQerfErTMsNmOhRD4wAAuyvi4JmOKMQIXxDkla1C+52b1LanJ04032UYO1yAmlhB
qx5T4FFX08o98eMm5qgjppHkBwMnC//b6PWRNk7yylKcOJplJB+t0CC5zUn5Pp8P
POeO7Cs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:26 2023 by rpki-client on console-ams.rpki-client.org