Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3wKQSBRDEe1FJ94qwSUWMmY9eTU.roa
File: 3wKQSBRDEe1FJ94qwSUWMmY9eTU.roa (raw, json)
Hash identifier: fvuUdA49T1hksEH0LVEZMuLmsZaz/6PBXmMgayzvNds=
Subject key identifier: DF:02:90:48:14:43:11:ED:45:27:DE:2A:C1:25:16:32:66:3D:79:35
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01845B0F0F222C7837367C6B0F14243D47AA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3wKQSBRDEe1FJ94qwSUWMmY9eTU.roa
Signing time: Wed 09 Nov 2022 06:23:44 +0000
ROA not before: Wed 09 Nov 2022 06:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 88.216.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:0f:0f:22:2c:78:37:36:7c:6b:0f:14:24:3d:47:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 9 06:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df029048144311ed4527de2ac1251632663d7935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:99:d0:29:11:5b:e0:47:41:39:4d:58:83:
2f:be:6c:f1:8f:41:bf:99:7e:66:08:dd:df:22:d7:
27:3c:76:bf:a8:db:89:82:79:11:68:1e:4f:a2:a6:
9c:4d:22:13:10:ec:0e:9e:51:9b:4c:f1:31:08:b0:
58:76:5d:9f:c2:e0:ad:d4:75:79:9a:23:d4:e6:8c:
e8:ee:a7:26:62:50:ed:a7:cf:dd:4d:e2:55:d9:63:
82:a0:85:85:ee:c7:fd:25:dd:0a:a2:3e:5d:9a:eb:
be:08:cb:9a:fe:5e:aa:d9:99:c2:8d:64:fb:65:bc:
f6:ec:a1:78:11:50:bf:3f:c0:18:88:57:72:a7:8b:
3c:39:6c:b2:7a:cd:2d:5c:ee:9c:30:e6:04:e6:39:
bb:e0:d7:f0:9c:25:18:53:e8:0c:ec:22:06:79:34:
4c:1c:5f:bd:da:7b:6a:29:49:4e:49:c5:24:1c:e5:
3f:b9:bf:fb:fb:e5:3b:62:a0:c8:e1:d1:30:74:34:
1c:bd:9d:18:7e:f7:5d:b8:13:44:43:53:7c:d2:7f:
2c:2e:2e:47:5d:50:6f:75:e7:d6:9e:16:48:27:28:
3d:de:d7:10:19:9d:6b:51:94:98:1e:22:8b:fd:67:
6e:7c:d8:06:94:f4:22:28:8d:e8:b7:0d:e9:4e:3e:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:90:48:14:43:11:ED:45:27:DE:2A:C1:25:16:32:66:3D:79:35
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3wKQSBRDEe1FJ94qwSUWMmY9eTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:18:f5:2e:71:9c:e9:0d:86:2f:d7:68:7e:42:b9:49:14:e5:
21:c3:2a:9a:61:76:7c:0b:87:be:69:dd:86:f5:37:61:d0:f3:
6d:8a:33:98:09:bc:80:b1:0c:8e:01:ed:ec:df:a7:ce:3c:b7:
96:35:6b:49:0e:13:b2:9e:68:fc:2c:1c:36:55:7a:ac:4b:5a:
61:4e:77:01:7d:f1:3e:53:d9:87:8e:c2:8e:de:ca:22:84:fd:
be:5c:47:28:61:33:9c:1d:3f:fe:3f:2a:d2:de:c8:70:4f:56:
71:0d:f8:09:58:89:a9:c6:cb:a7:80:d6:ee:bb:5f:ec:4e:ea:
8d:da:a6:74:71:c7:2d:b4:ec:c4:64:fa:89:7b:3c:8c:08:67:
15:d4:c7:43:15:87:4d:90:ec:81:f5:40:d4:af:91:5c:d0:4f:
c1:e6:1d:e7:96:58:f7:e9:80:53:1e:41:2c:5f:b0:4f:10:35:
8d:3d:19:c7:5e:d1:f4:d6:bc:c5:bf:3e:17:5b:2d:0a:06:25:
57:3b:13:9c:48:dc:61:96:56:40:66:46:a9:9a:53:08:cc:6f:
a6:ee:3c:67:86:b3:65:f1:e3:62:8e:7d:08:28:ed:34:a3:2e:
c6:0f:9f:20:cb:a5:b0:fa:64:10:ac:63:74:4e:87:5b:4a:c7:
72:74:34:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRbDw8iLHg3NnxrDxQkPUeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTA5MDYyMzQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjAyOTA0ODE0NDMxMWVkNDUyN2RlMmFjMTI1MTYzMjY2M2Q3OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv+Z0CkRW+BHQTlNWIMvvmzxj0G/
mX5mCN3fItcnPHa/qNuJgnkRaB5PoqacTSITEOwOnlGbTPExCLBYdl2fwuCt1HV5
miPU5ozo7qcmYlDtp8/dTeJV2WOCoIWF7sf9Jd0Koj5dmuu+CMua/l6q2ZnCjWT7
Zbz27KF4EVC/P8AYiFdyp4s8OWyyes0tXO6cMOYE5jm74NfwnCUYU+gM7CIGeTRM
HF+92ntqKUlOScUkHOU/ub/7++U7YqDI4dEwdDQcvZ0YfvdduBNEQ1N80n8sLi5H
XVBvdefWnhZIJyg93tcQGZ1rUZSYHiKL/WdufNgGlPQiKI3otw3pTj5c2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN8CkEgUQxHtRSfeKsElFjJmPXk1MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvM3dLUVNCUkRFZTFGSjk0cXdTVVdNbVk5ZVRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNi1MA0G
CSqGSIb3DQEBCwUAA4IBAQBNGPUucZzpDYYv12h+QrlJFOUhwyqaYXZ8C4e+ad2G
9Tdh0PNtijOYCbyAsQyOAe3s36fOPLeWNWtJDhOynmj8LBw2VXqsS1phTncBffE+
U9mHjsKO3soihP2+XEcoYTOcHT/+PyrS3shwT1ZxDfgJWImpxsungNbuu1/sTuqN
2qZ0cccttOzEZPqJezyMCGcV1MdDFYdNkOyB9UDUr5Fc0E/B5h3nllj36YBTHkEs
X7BPEDWNPRnHXtH01rzFvz4XWy0KBiVXOxOcSNxhllZAZkapmlMIzG+m7jxnhrNl
8eNijn0IKO00oy7GD58gy6Ww+mQQrGN0TodbSsdydDQe
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org