Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5_p14eqWnnZ4_fqkaYLQz2Vq0gU.roa
File: 5_p14eqWnnZ4_fqkaYLQz2Vq0gU.roa (raw, json)
Hash identifier: xzZ1jUb5950rGfrMc6NSPfzHVN5zIot8qmkgLbUhUwQ=
Subject key identifier: E7:FA:75:E1:EA:96:9E:76:78:FD:FA:A4:69:82:D0:CF:65:6A:D2:05
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184E3B6082FA93B8E5C93DC8693ED476DE2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5_p14eqWnnZ4_fqkaYLQz2Vq0gU.roa
Signing time: Mon 05 Dec 2022 19:14:28 +0000
ROA not before: Mon 05 Dec 2022 19:14:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.79.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
88.216.132.0/23 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.232.0/21 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:b6:08:2f:a9:3b:8e:5c:93:dc:86:93:ed:47:6d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 5 19:14:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7fa75e1ea969e7678fdfaa46982d0cf656ad205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:34:e3:cc:62:c9:77:70:3d:aa:27:71:24:
6f:00:6a:fc:bf:18:02:10:61:95:25:ca:54:f4:f4:
61:a9:16:8e:14:02:2e:fa:f3:4a:ff:1c:56:70:98:
e5:16:66:3d:0f:df:86:b8:fa:bb:58:e3:05:d6:31:
38:a9:ba:cf:3a:e3:92:86:d1:a3:e7:27:cd:cb:b8:
9f:40:fc:c5:d7:40:04:bb:87:78:46:27:4e:d1:80:
ce:77:b7:a6:26:3e:98:3a:6f:b5:5d:5e:a6:6d:c7:
2b:74:fc:c5:52:c7:41:de:71:dc:a8:28:5d:8c:03:
01:df:9a:32:c7:80:ad:06:6e:dd:9b:98:e1:74:49:
41:d0:ae:f7:fe:06:0e:40:35:52:69:b8:a1:43:76:
d2:99:c6:f7:c8:0d:e5:b1:6a:7f:55:24:fe:57:96:
63:39:99:d0:a3:61:bc:d2:5c:f8:af:e1:71:ff:3e:
2a:fc:fd:f9:f2:af:a4:cd:df:96:eb:78:36:c5:46:
1a:a6:b2:02:c8:6d:d8:c8:50:5f:2d:74:2f:b0:6b:
23:74:18:fd:6c:f6:b2:3d:3d:91:ad:50:c2:b6:ed:
1e:6b:b7:53:06:71:ec:7b:ec:e1:1b:b4:28:8c:05:
c6:40:f0:0a:fb:3f:95:64:48:a8:ff:a8:47:4e:12:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:75:E1:EA:96:9E:76:78:FD:FA:A4:69:82:D0:CF:65:6A:D2:05
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5_p14eqWnnZ4_fqkaYLQz2Vq0gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.79.0/24
84.32.90.0/23
84.32.212.0/24
88.216.42.0/24
88.216.44.0/23
88.216.128.0/24
88.216.131.0-88.216.133.255
88.216.135.0/24
88.216.224.0/22
88.216.232.0/21
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
41:2b:bb:c0:2e:f6:5a:9e:5d:1f:3c:31:55:81:59:6b:bb:f9:
5e:e8:7b:ae:e4:b6:ba:f8:da:57:03:8a:26:17:e6:06:ec:a0:
19:01:0d:ae:df:5c:a0:5c:dd:4a:fd:64:32:a5:30:1f:48:22:
b0:60:23:36:35:e7:51:ab:0d:4d:7f:82:8b:64:a5:c9:13:bc:
b8:01:ce:da:c0:ac:8f:43:ea:d5:c8:5c:51:70:cf:b6:b7:5a:
cc:4c:2b:00:74:4e:e2:f8:c5:d7:84:a2:a3:47:50:b9:36:e8:
61:ca:91:89:09:15:55:b4:00:9e:66:1a:83:80:88:71:20:1d:
25:ca:d0:26:b7:4c:df:a7:9a:9d:3b:58:45:51:ed:89:cf:9d:
65:87:75:97:4b:c1:62:e0:e6:0a:5e:5d:13:9e:6d:1e:e2:57:
75:c9:9a:56:4d:c2:71:39:d7:24:e8:82:4a:e5:17:d5:c7:cf:
dc:47:2a:cf:d9:de:e8:21:21:1d:32:cd:ef:18:6d:f0:8e:05:
7e:60:44:97:b6:4a:f3:e5:d5:b8:14:d5:a4:e9:fb:1f:41:33:
00:22:79:ec:2c:7a:b4:39:6c:37:04:be:c6:01:71:ee:39:01:
7a:66:9c:5a:50:dc:18:80:b1:d9:03:bd:a2:59:ac:42:c8:3a:
09:4b:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org