Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3s7Waj443u4C6jeCIvyiW8t9HF0.roa
File: 3s7Waj443u4C6jeCIvyiW8t9HF0.roa (raw, json)
Hash identifier: DN71MYIY6boC1kQkJMu6kIqfNOnL/RjatSK1RLraZG4=
Subject key identifier: DE:CE:D6:6A:3E:38:DE:EE:02:EA:37:82:22:FC:A2:5B:CB:7D:1C:5D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0146A530
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3s7Waj443u4C6jeCIvyiW8t9HF0.roa
Signing time: Fri 27 May 2022 11:33:13 +0000
ROA not before: Fri 27 May 2022 11:33:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 88.216.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21407024 (0x146a530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 27 11:33:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=deced66a3e38deee02ea378222fca25bcb7d1c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:62:a6:72:68:a4:b9:f3:f4:65:2a:47:09:
1d:9a:03:db:45:c9:ee:bb:44:85:97:58:b5:83:a8:
47:fc:f9:f8:35:74:1a:aa:6a:1e:56:77:0f:b0:f5:
6f:41:76:68:a8:f1:97:51:fa:4e:fe:54:5b:0b:3e:
8f:a2:7c:90:86:2e:07:44:2a:5f:cb:cd:c5:cc:87:
44:0c:b3:59:96:d2:f8:0d:0e:fe:5d:10:a9:22:22:
29:56:b9:c7:c1:96:8f:ea:4f:b1:63:53:c0:c6:10:
4d:a7:9e:8e:2a:c9:88:3f:5c:6e:ea:0e:cd:b8:ec:
cd:7a:d8:9a:5d:07:be:56:af:20:89:d7:73:8d:15:
85:8d:96:ac:35:b4:59:2a:59:ff:88:b9:67:5c:78:
3e:15:75:de:22:b5:40:0b:51:02:16:2e:ee:05:3a:
12:a2:4c:d1:0a:e3:1e:9f:d3:fe:ee:1b:ef:e3:89:
55:36:9f:b1:3b:05:cf:e0:b8:e7:f7:9e:21:b2:a5:
3a:de:af:f9:aa:fb:ea:39:96:1e:f1:62:7a:cf:b8:
f1:d8:20:b8:00:85:06:93:8d:10:cd:65:c2:8e:18:
94:fb:60:08:9b:b9:a1:84:9b:93:28:53:cf:ef:ff:
a0:a1:1b:9c:4f:ff:c5:81:0c:ac:b0:fb:13:5e:59:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CE:D6:6A:3E:38:DE:EE:02:EA:37:82:22:FC:A2:5B:CB:7D:1C:5D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3s7Waj443u4C6jeCIvyiW8t9HF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.92.0/23
Signature Algorithm: sha256WithRSAEncryption
67:bb:ec:71:cf:0d:e4:cc:0b:26:1f:72:c2:01:32:8f:42:d6:
63:b2:b1:c0:e7:2f:5a:90:bd:32:df:da:9e:60:e7:d4:64:f3:
82:59:06:b5:e6:00:54:04:66:cd:d1:a3:49:c9:c4:a5:54:b3:
e9:ba:66:b5:1d:85:54:19:fe:e2:45:63:65:38:49:9b:fa:f5:
37:98:d0:f7:d4:13:9d:5b:e9:07:a6:42:6e:20:fc:b6:01:b2:
f6:ea:c1:69:0a:b6:aa:f4:d9:2e:ce:16:d9:a8:ac:4f:d5:fc:
76:86:c9:02:2b:05:47:03:9f:b3:0b:2c:af:ce:49:55:0e:2b:
27:5d:44:3b:32:79:6b:7a:2d:dd:d0:26:71:bc:cb:84:b0:73:
ef:d5:a1:9f:6e:66:fa:74:b8:1a:27:85:3c:04:ff:04:6a:05:
91:57:e0:ff:e1:85:dc:4c:85:7e:e9:91:47:16:f9:00:58:6f:
8d:c7:3d:f7:32:48:74:16:a2:e3:ce:a9:c3:73:f0:3d:a2:4a:
c6:1f:19:d1:6f:b1:7a:3a:b7:c1:ec:19:eb:ae:e8:06:7f:a8:
f6:f9:56:b5:07:9e:85:5e:35:8f:d0:ed:11:68:da:de:6e:f6:
d3:9d:ea:00:5f:8b:9f:23:f4:64:6a:7a:6e:8e:37:00:8b:51:
19:83:8c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org