Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3jMbQ8RhXUzF3-mWJE8-ngDgSLc.roa
File: 3jMbQ8RhXUzF3-mWJE8-ngDgSLc.roa (raw, json)
Hash identifier: M3RWCJVS5WaJNSaOt/Ht37ClDCrOWM2ICof7P7465gc=
Subject key identifier: DE:33:1B:43:C4:61:5D:4C:C5:DF:E9:96:24:4F:3E:9E:00:E0:48:B7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: B7F331
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3jMbQ8RhXUzF3-mWJE8-ngDgSLc.roa
Signing time: Thu 14 Apr 2022 06:23:07 +0000
ROA not before: Thu 14 Apr 2022 06:23:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.180.0/22 maxlen: 24
84.32.84.0/22 maxlen: 24
88.216.188.0/22 maxlen: 24
88.216.196.0/22 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
84.32.4.0/22 maxlen: 24
84.32.8.0/22 maxlen: 24
84.32.24.0/21 maxlen: 24
84.32.40.0/21 maxlen: 24
88.216.0.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.20.0/22 maxlen: 22
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12055345 (0xb7f331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 14 06:23:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de331b43c4615d4cc5dfe996244f3e9e00e048b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:b0:6b:86:b7:9e:0a:40:5a:88:e0:45:11:
4e:f3:ed:60:9a:bf:38:82:9a:70:dd:4e:65:19:3a:
eb:85:ad:eb:ec:fa:35:7d:dd:d0:ff:32:05:f9:5b:
36:9b:3d:e6:9d:8e:01:51:8b:d5:6c:22:b4:58:55:
5b:1b:3c:55:5b:68:85:e0:bc:54:79:49:99:57:58:
69:dd:9f:33:98:28:da:fc:5f:67:e2:8e:74:42:35:
cc:2e:cb:6c:30:2b:99:bd:8a:89:dc:70:49:c4:b5:
ef:34:e3:96:bf:33:6e:07:59:7a:2b:f3:15:0f:28:
fe:83:be:8a:9e:77:88:e1:b0:3c:3a:8e:11:cc:4b:
e2:0d:00:0e:5c:09:3e:a5:5f:55:9c:c0:34:cf:73:
14:fd:8c:02:2a:21:5f:90:3c:b8:25:03:4e:e4:0a:
2c:ab:41:82:ee:e6:e5:2d:cf:ef:ed:89:1f:98:12:
cc:6b:11:4b:fd:9f:9e:a1:a7:f0:e9:05:28:11:5f:
98:e7:6b:7b:ff:fd:5b:49:30:a5:70:11:3a:40:09:
1c:c1:1d:e9:6f:e1:ee:b4:41:1d:35:65:a5:b3:77:
d3:0e:4b:b1:6b:ee:eb:2f:da:fb:a1:58:3e:13:e6:
2b:6a:3b:93:3b:bd:f6:35:41:09:81:3a:b0:d9:f3:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:1B:43:C4:61:5D:4C:C5:DF:E9:96:24:4F:3E:9E:00:E0:48:B7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3jMbQ8RhXUzF3-mWJE8-ngDgSLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0-84.32.11.255
84.32.24.0/21
84.32.40.0/21
84.32.84.0/22
88.216.0.0/22
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/24
88.216.46.0/23
88.216.180.0/22
88.216.188.0/22
88.216.196.0/22
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
58:1c:57:a9:9c:0f:f2:25:3c:49:15:49:57:a8:5b:3b:af:4e:
9d:cf:8c:d4:de:86:36:c3:fe:f7:cc:12:46:5d:ad:1c:12:f9:
81:34:e9:64:0b:07:59:6d:bc:9d:23:0e:77:25:59:ec:63:4b:
ae:b4:f3:20:a1:09:e5:6a:c3:2b:06:ef:94:9e:65:92:3b:07:
2c:b2:55:f2:46:58:5a:b4:ab:3a:d7:24:70:b5:1c:29:38:af:
c2:10:9c:7c:0e:58:75:3d:d7:49:92:41:09:58:0d:e9:94:84:
27:41:00:57:f0:7f:1b:82:ab:6b:ce:56:9a:77:a1:68:89:67:
9b:7b:6d:f9:20:1d:8f:ce:9a:00:aa:73:55:2c:40:62:44:96:
e3:33:b0:91:a6:4b:8a:17:a7:b3:18:98:3f:ca:2e:3a:3d:aa:
c9:b3:3c:fa:fb:05:06:e8:87:ea:f2:49:7b:88:dd:07:4b:70:
aa:a9:2a:81:57:90:46:32:4a:d3:32:ea:0b:b6:e4:43:e0:e2:
63:39:14:ba:65:ab:01:71:8f:c2:56:55:ef:53:14:d7:b5:e9:
4d:78:a3:37:01:68:a3:21:4f:50:21:98:9b:a1:b3:ed:66:c9:
ea:7d:ba:5e:07:f1:4c:6e:8e:df:d7:c5:94:8e:16:fc:2c:4a:
b0:b3:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org