Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3bmrYqghlIrRZmMeC1WGX5F4LlI.roa
File: 3bmrYqghlIrRZmMeC1WGX5F4LlI.roa (raw, json)
Hash identifier: +xF68zs68lganCopzglWXb34e4zXO8+o5lcwHwr4ASo=
Subject key identifier: DD:B9:AB:62:A8:21:94:8A:D1:66:63:1E:0B:55:86:5F:91:78:2E:52
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184ADE5D6CD96D46DD95C63DD9A51EAB58B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3bmrYqghlIrRZmMeC1WGX5F4LlI.roa
Signing time: Fri 25 Nov 2022 08:27:11 +0000
ROA not before: Fri 25 Nov 2022 08:27:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16276
IP address blocks: 88.216.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:e5:d6:cd:96:d4:6d:d9:5c:63:dd:9a:51:ea:b5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 25 08:27:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddb9ab62a821948ad166631e0b55865f91782e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:6a:af:4d:07:9b:e8:e2:cf:f6:81:7a:31:
35:2c:02:22:b4:70:61:8d:46:4a:94:0c:6e:80:16:
2f:76:bc:7b:e4:f8:b4:9d:d3:24:7e:10:c8:9d:a4:
99:9e:e0:8e:8c:73:e7:91:d2:c4:69:54:6f:af:c7:
ee:4e:60:dd:e3:d7:30:1e:b5:38:f4:ad:a7:45:b4:
81:69:f4:36:fa:74:44:f4:db:36:97:af:04:a9:46:
7d:3d:14:87:4b:6e:1f:6d:d3:30:e0:05:c9:23:b2:
2b:96:16:bf:08:23:db:40:60:dd:ad:1b:82:36:00:
b5:b3:5c:8d:cc:35:77:7c:1b:86:3d:47:3f:9d:fc:
b0:f1:7f:f4:04:c5:26:67:2e:66:76:d1:7b:92:96:
98:64:6f:83:0a:8c:8e:24:7a:f3:b6:bb:cb:c6:65:
99:04:3d:e6:d9:96:63:71:a9:d3:82:66:d4:64:b5:
e8:f8:0c:6b:06:bc:69:4a:2d:ec:31:51:81:cf:43:
48:51:20:e8:b6:64:c2:a4:62:46:4c:29:b9:6f:b3:
67:15:8f:94:e0:e3:33:63:d6:56:af:bd:8f:3d:bf:
fd:f5:6f:64:0e:af:d1:5d:72:c0:d5:d0:40:4a:b2:
1f:bc:05:db:e7:4f:6e:3c:bf:4d:0c:30:08:34:9a:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B9:AB:62:A8:21:94:8A:D1:66:63:1E:0B:55:86:5F:91:78:2E:52
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3bmrYqghlIrRZmMeC1WGX5F4LlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.2.0/24
Signature Algorithm: sha256WithRSAEncryption
63:45:01:a9:36:85:4e:1e:8c:7d:d5:84:6d:89:1a:8d:a3:9c:
47:41:91:2d:6a:29:3f:80:6b:be:19:d4:9f:9e:ee:a2:b5:a9:
8b:ac:53:b9:fe:2e:a0:bf:1f:0e:06:6d:5e:81:39:0e:af:88:
47:68:e8:04:2e:c2:ec:42:78:1f:30:32:e1:16:95:a2:fa:17:
52:e0:ee:0e:68:44:65:64:4f:cd:b6:94:8b:73:e3:4a:d4:d6:
96:1b:72:ef:f4:e2:1d:5f:fc:f0:a1:8a:2e:af:d9:84:13:19:
3f:8c:d0:79:96:fa:c0:03:c4:08:a9:61:25:b2:7a:92:b8:03:
ba:f5:12:5a:b8:20:ff:75:53:56:f1:04:16:48:ef:06:40:c5:
bc:3b:ff:e5:28:5c:e4:11:4a:17:fe:06:26:92:a4:60:47:63:
ad:10:cb:f2:f6:62:5a:ac:60:88:0a:89:e5:40:97:6e:e9:22:
74:8b:9d:03:1b:e6:c0:dd:a2:e4:ac:e0:88:90:ea:c8:67:7f:
4b:b3:2e:b8:23:43:63:1f:f3:d2:e8:99:a9:68:ab:df:8a:03:
af:c7:d4:bd:2d:21:50:95:92:72:5f:82:20:bd:9e:4d:bc:23:
6e:0e:81:3a:eb:3b:1a:56:a2:45:64:3a:68:11:de:9b:74:36:
f3:0f:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:26 2023 by rpki-client on console-ams.rpki-client.org