Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4cbEPxebpxO_17uXBkncHXK2xOs.roa
File: 4cbEPxebpxO_17uXBkncHXK2xOs.roa (raw, json)
Hash identifier: SYzbhtfB+U6O8zyK1yaZ39aEcwVGyY95/D6MEFvAnAU=
Subject key identifier: E1:C6:C4:3F:17:9B:A7:13:BF:D7:BB:97:06:49:DC:1D:72:B6:C4:EB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183A2D84546419C5C8EE7E15CFC16FBD350
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4cbEPxebpxO_17uXBkncHXK2xOs.roa
Signing time: Tue 04 Oct 2022 11:53:45 +0000
ROA not before: Tue 04 Oct 2022 11:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.90.0/23 maxlen: 24
84.32.88.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/23 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.134.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.16.0/23 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:d8:45:46:41:9c:5c:8e:e7:e1:5c:fc:16:fb:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 4 11:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1c6c43f179ba713bfd7bb970649dc1d72b6c4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:f2:e0:0c:72:2f:b2:b8:2b:04:a0:eb:c2:
c8:1c:10:e0:84:cc:59:a4:c9:ff:d5:03:b6:59:a9:
27:60:db:36:63:b0:cd:6b:d6:53:27:38:62:56:74:
8c:70:b1:c6:df:0b:92:bd:d2:95:08:eb:71:37:9e:
5e:f8:f2:2f:bc:6e:1f:e4:ce:fe:ed:91:54:cb:1f:
54:2e:73:72:ff:d8:d2:c1:09:ca:92:2b:c8:95:a9:
de:26:81:82:c3:f4:bc:ca:17:b5:c4:1f:89:9c:85:
49:f1:59:8c:20:3b:da:8a:9e:a7:34:46:17:50:a2:
88:4e:f6:f4:0b:40:53:ee:aa:80:d9:93:90:dc:a8:
ec:1b:45:6c:b9:61:7f:d1:6c:0c:17:5c:e8:af:02:
27:35:6f:29:7c:63:61:bd:b7:c7:b6:e5:be:34:25:
1a:99:8a:e4:dc:25:91:e9:cd:30:cb:2b:68:d3:d9:
49:28:c2:38:a7:9d:f5:2b:0d:29:33:3f:fd:b3:5a:
79:a3:75:e6:59:77:f2:9c:66:7d:f3:f0:1e:c3:38:
95:0f:78:07:a8:1e:b0:fd:1d:29:aa:87:3a:fd:41:
87:60:d4:d2:84:db:e0:4a:dc:8c:6f:7d:71:fd:47:
b4:6a:c8:f3:c8:e7:f8:9c:60:13:b8:48:93:d9:ed:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C6:C4:3F:17:9B:A7:13:BF:D7:BB:97:06:49:DC:1D:72:B6:C4:EB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4cbEPxebpxO_17uXBkncHXK2xOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
84.32.88.0/22
88.216.16.0/23
88.216.33.0/24
88.216.44.0/23
88.216.92.0/22
88.216.128.0/24
88.216.131.0-88.216.134.255
88.216.224.0/22
88.216.232.0/22
Signature Algorithm: sha256WithRSAEncryption
13:40:9c:0d:e4:d6:44:46:00:3c:a8:9a:bc:87:bc:0a:3f:3e:
2a:f0:24:46:5a:80:3b:67:a1:d4:e8:ef:a2:05:27:40:8a:ab:
2c:cd:7e:2b:14:16:70:f1:82:93:3f:f0:6a:7c:ed:4c:54:a1:
20:61:23:e4:ab:62:17:23:ba:16:1e:48:ab:ce:08:bb:e3:ae:
fd:bc:f3:23:03:a1:f6:5c:36:68:bc:0c:bf:2c:d6:c3:d9:30:
09:fa:5c:25:2c:88:0e:76:32:ce:e5:67:15:6b:39:b3:96:4a:
7b:95:77:96:2e:7c:3d:1d:c5:e1:ab:b2:e7:23:41:c1:3c:7e:
76:81:73:58:f9:19:da:69:fd:23:c3:fd:dc:4f:32:9c:cc:13:
b4:8b:af:e2:d8:f8:12:ac:82:2c:a1:59:29:20:61:bd:0d:5f:
7c:39:ac:1e:df:35:f7:0d:42:0c:8f:dc:92:18:52:eb:ea:bc:
57:4f:1b:25:07:fe:c1:bc:9d:0d:fc:fa:db:48:e9:38:76:25:
6a:fe:dc:73:4a:18:68:68:f2:61:7f:31:ce:6e:08:c7:50:3a:
ae:88:99:61:84:00:88:75:ff:f3:70:3f:b0:e9:d5:2f:64:d7:
50:e6:32:31:02:f6:1d:95:45:7c:66:58:fc:ba:f9:41:18:05:
d8:d9:55:8b
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYOi2EVGQZxcjufhXPwW+9NQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMDA0MTE1MzQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWM2YzQzZjE3OWJhNzEzYmZkN2JiOTcwNjQ5ZGMxZDcyYjZjNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TPy4AxyL7K4KwSg68LIHBDghMxZ
pMn/1QO2WaknYNs2Y7DNa9ZTJzhiVnSMcLHG3wuSvdKVCOtxN55e+PIvvG4f5M7+
7ZFUyx9ULnNy/9jSwQnKkivIlaneJoGCw/S8yhe1xB+JnIVJ8VmMIDvaip6nNEYX
UKKITvb0C0BT7qqA2ZOQ3KjsG0VsuWF/0WwMF1zorwInNW8pfGNhvbfHtuW+NCUa
mYrk3CWR6c0wyyto09lJKMI4p531Kw0pMz/9s1p5o3XmWXfynGZ98/AewziVD3gH
qB6w/R0pqoc6/UGHYNTShNvgStyMb31x/Ue0asjzyOf4nGATuEiT2e1ZgwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFOHGxD8Xm6cTv9e7lwZJ3B1ytsTrMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvNGNiRVB4ZWJweE9fMTd1WEJrbmNIWEsyeE9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQDVCAYAwQC
VCBYAwQBWNgQAwQAWNghAwQBWNgsAwQCWNhcAwQAWNiAMAwDBABY2IMDBABY2IYD
BAJY2OADBAJY2OgwDQYJKoZIhvcNAQELBQADggEBABNAnA3k1kRGADyomryHvAo/
PirwJEZagDtnodTo76IFJ0CKqyzNfisUFnDxgpM/8Gp87UxUoSBhI+SrYhcjuhYe
SKvOCLvjrv288yMDofZcNmi8DL8s1sPZMAn6XCUsiA52Ms7lZxVrObOWSnuVd5Yu
fD0dxeGrsucjQcE8fnaBc1j5Gdpp/SPD/dxPMpzME7SLr+LY+BKsgiyhWSkgYb0N
X3w5rB7fNfcNQgyP3JIYUuvqvFdPGyUH/sG8nQ38+ttI6Th2JWr+3HNKGGho8mF/
Mc5uCMdQOq6ImWGEAIh1//NwP7Dp1S9k11DmMjEC9h2VRXxmWPy6+UEYBdjZVYs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org