Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3rWpWM-2avBAIpT0o6gRwe-fyvY.roa
File: 3rWpWM-2avBAIpT0o6gRwe-fyvY.roa (raw, json)
Hash identifier: iKZJ1zYINVy66dNLjPb9avY+q3mblALI3MMACI/HCGQ=
Subject key identifier: DE:B5:A9:58:CF:B6:6A:F0:40:22:94:F4:A3:A8:11:C1:EF:9F:CA:F6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184BCE2CDA42A1A28317B9D6E40A9424D36
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3rWpWM-2avBAIpT0o6gRwe-fyvY.roa
Signing time: Mon 28 Nov 2022 06:18:11 +0000
ROA not before: Mon 28 Nov 2022 06:18:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 88.216.180.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bc:e2:cd:a4:2a:1a:28:31:7b:9d:6e:40:a9:42:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 28 06:18:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=deb5a958cfb66af0402294f4a3a811c1ef9fcaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3a:6d:5d:d0:64:4b:3e:ab:87:ae:16:fd:cc:
f2:36:63:d5:f9:e7:e6:a6:2c:ce:b8:b4:d4:7a:ea:
5d:2c:a2:e5:48:39:0f:36:97:82:94:1d:66:ca:09:
b2:55:ce:52:fb:c9:21:a2:62:cd:79:3d:73:00:1e:
05:12:39:51:b7:92:05:36:e8:a2:d3:6b:1e:a8:20:
e8:83:82:1f:ca:e8:ff:f1:30:d5:40:b9:61:5f:c5:
b9:39:55:f6:55:f4:d3:03:9b:e2:4b:07:87:bb:3f:
d7:f6:ed:12:6f:2b:95:20:d6:bf:39:8a:27:13:10:
b8:e2:33:ef:64:97:66:0a:a7:12:f4:bd:1b:d1:71:
e9:5f:9b:a9:e9:39:81:f1:15:b4:39:24:fc:6c:7f:
32:c3:59:44:b8:a2:03:47:cb:50:8b:60:05:13:11:
2c:df:16:4a:4a:52:5a:0d:bc:6e:fe:02:7f:69:e6:
c0:b8:ee:ee:92:ca:8c:66:b5:50:ca:db:7d:ac:22:
cf:d8:4c:f0:1c:c6:69:65:1f:69:11:94:02:4c:db:
57:a8:4b:81:0d:ab:b8:4d:db:ba:40:61:3c:36:9a:
8e:db:10:f3:41:f1:6f:88:0c:7e:a1:39:07:8d:92:
21:96:09:51:cb:3e:60:c6:3b:c3:7d:4c:f4:53:84:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:A9:58:CF:B6:6A:F0:40:22:94:F4:A3:A8:11:C1:EF:9F:CA:F6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3rWpWM-2avBAIpT0o6gRwe-fyvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.95.0/24
84.32.228.0/24
88.216.34.0/24
88.216.36.0/24
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fb:56:02:1d:2d:1a:c0:cb:8d:4b:2f:43:33:22:41:7a:35:
78:96:0e:db:5c:a3:d0:11:e8:08:75:58:94:f4:f4:b0:44:0c:
2a:06:a6:3a:f4:8b:6a:16:68:83:f7:47:9a:02:45:90:63:37:
0c:29:5d:2f:5d:de:60:44:52:3a:cf:1c:83:19:41:ea:77:a0:
c9:db:2d:f2:da:71:a9:54:51:87:51:08:98:74:a8:7d:82:e6:
c9:06:5a:a0:3d:27:82:36:bb:3b:b2:d6:b1:28:c6:d5:04:f6:
b3:e3:c2:f4:ed:35:6e:88:a1:f3:96:9a:04:9d:1e:a0:01:e9:
e3:bf:a0:65:75:92:e7:89:3b:d5:30:76:f7:71:ea:a7:30:e2:
dd:b3:b6:53:d2:2b:71:ed:e4:cf:da:d6:a7:8d:54:b7:f4:4c:
49:8b:14:f2:0c:97:0c:01:aa:ad:d3:a8:84:89:b2:cb:1a:98:
9a:d8:c8:15:f3:c7:e9:91:32:76:43:6c:69:ac:cb:6a:05:55:
e0:b1:bb:97:c7:8a:06:9c:59:e2:15:14:2d:d3:cd:e8:d7:de:
9f:58:14:33:79:a2:e3:20:f1:71:31:35:d3:ed:59:da:de:32:
69:99:63:e4:c6:f8:52:d3:41:dd:3d:3a:7d:cc:4e:9c:d9:24:
a2:d4:d5:02
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYS84s2kKhooMXudbkCpQk02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTI4MDYxODExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWI1YTk1OGNmYjY2YWYwNDAyMjk0ZjRhM2E4MTFjMWVmOWZjYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjptXdBkSz6rh64W/czyNmPV+efm
pizOuLTUeupdLKLlSDkPNpeClB1mygmyVc5S+8khomLNeT1zAB4FEjlRt5IFNuii
02seqCDog4Ifyuj/8TDVQLlhX8W5OVX2VfTTA5viSweHuz/X9u0SbyuVINa/OYon
ExC44jPvZJdmCqcS9L0b0XHpX5up6TmB8RW0OST8bH8yw1lEuKIDR8tQi2AFExEs
3xZKSlJaDbxu/gJ/aebAuO7uksqMZrVQytt9rCLP2EzwHMZpZR9pEZQCTNtXqEuB
Dau4Tdu6QGE8NpqO2xDzQfFviAx+oTkHjZIhlglRyz5gxjvDfUz0U4Qn7wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFN61qVjPtmrwQCKU9KOoEcHvn8r2MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvM3JXcFdNLTJhdkJBSXBUMG82Z1J3ZS1meXZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVCBfAwQA
VCDkAwQAWNgiAwQAWNgkAwQAWNi0MA0GCSqGSIb3DQEBCwUAA4IBAQB9+1YCHS0a
wMuNSy9DMyJBejV4lg7bXKPQEegIdViU9PSwRAwqBqY69ItqFmiD90eaAkWQYzcM
KV0vXd5gRFI6zxyDGUHqd6DJ2y3y2nGpVFGHUQiYdKh9gubJBlqgPSeCNrs7stax
KMbVBPaz48L07TVuiKHzlpoEnR6gAenjv6BldZLniTvVMHb3ceqnMOLds7ZT0itx
7eTP2tanjVS39ExJixTyDJcMAaqt06iEibLLGpia2MgV88fpkTJ2Q2xprMtqBVXg
sbuXx4oGnFniFRQt083o196fWBQzeaLjIPFxMTXT7Vna3jJpmWPkxvhS00HdPTp9
zE6c2SSi1NUC
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org