Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5gnErQpM6ZRpYGvSaBs99gygFbk.roa
File: 5gnErQpM6ZRpYGvSaBs99gygFbk.roa (raw, json)
Hash identifier: LHEB3zCOrQFz7f/v4MMmMNG35U8Okfc8qLG8dmDmQkA=
Subject key identifier: E6:09:C4:AD:0A:4C:E9:94:69:60:6B:D2:68:1B:3D:F6:0C:A0:15:B9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 017F8A87
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5gnErQpM6ZRpYGvSaBs99gygFbk.roa
Signing time: Fri 17 Jun 2022 05:36:44 +0000
ROA not before: Fri 17 Jun 2022 05:36:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
84.32.82.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.96.0/24 maxlen: 24
84.32.8.0/22 maxlen: 24
88.216.34.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25135751 (0x17f8a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 17 05:36:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e609c4ad0a4ce99469606bd2681b3df60ca015b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:c9:73:7c:17:20:4f:5f:98:9d:54:c8:14:
26:8a:98:da:85:13:07:58:33:b1:7f:2e:87:2a:87:
be:88:54:7b:96:4e:e2:e4:8d:c4:0e:6e:23:68:62:
94:79:0e:b5:be:a9:a6:b0:d1:58:f9:32:45:d7:68:
5c:c5:bf:80:19:47:a0:eb:7e:aa:b1:df:5d:bb:82:
d3:46:18:71:7e:e9:61:2b:b2:53:71:f4:bf:2e:e9:
de:55:e0:06:79:b4:9e:e7:f6:ca:91:94:ef:a6:68:
b3:d5:72:ce:31:07:fe:de:dd:a5:5e:c8:6c:ad:4f:
18:cc:17:f8:c3:31:50:a1:24:af:4a:60:90:f4:f3:
01:34:5d:3a:28:dc:12:23:05:02:da:27:f5:cf:37:
30:90:53:65:a0:ea:ee:df:df:98:c2:f1:8d:d9:b0:
3b:64:33:c9:06:16:08:dc:89:d2:8d:1b:3f:d4:67:
95:57:7d:d7:e8:87:c5:b1:df:5f:53:c2:38:f7:4d:
5b:87:ee:89:6c:b6:b9:80:8a:34:74:76:36:4d:1d:
d6:90:c8:77:12:80:56:54:6d:5a:f3:92:63:e8:df:
13:04:9a:f6:fc:11:4e:e0:53:43:84:e6:c1:19:99:
72:23:f2:c9:3c:af:ad:97:a6:c1:0a:34:c3:d5:39:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:09:C4:AD:0A:4C:E9:94:69:60:6B:D2:68:1B:3D:F6:0C:A0:15:B9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5gnErQpM6ZRpYGvSaBs99gygFbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/22
84.32.82.0/24
88.216.34.0/24
88.216.42.0/24
88.216.96.0/24
88.216.98.0/24
88.216.185.0-88.216.186.255
Signature Algorithm: sha256WithRSAEncryption
67:ef:82:d2:03:9f:53:9b:26:22:a1:84:9e:89:6e:aa:ee:3d:
4d:56:b0:e3:f4:78:ec:4d:62:b6:7e:46:bf:b0:cb:4e:68:ab:
6b:34:cb:f9:09:a1:a3:0e:5e:27:53:1c:59:02:98:6c:4d:7a:
53:99:ae:11:35:7f:ef:48:78:5f:dd:0b:e1:1d:79:45:72:21:
eb:1d:b6:c4:28:cb:4d:e2:79:9e:c5:f2:fb:d5:00:0c:74:e6:
73:32:aa:57:ea:d3:d1:71:6e:a4:35:8b:88:d9:4c:42:22:03:
7d:e7:93:72:fe:22:b7:86:f8:4d:a7:8c:18:02:67:b5:fc:fa:
a4:70:d7:f6:4b:64:35:58:b2:c0:0e:60:e4:d4:b9:60:9f:bd:
a7:64:1d:77:89:9b:57:86:c9:c8:06:34:61:0b:1d:88:79:73:
29:4a:51:9d:3b:a3:16:04:81:42:ad:95:88:3d:c3:ec:dc:63:
ca:c7:19:85:76:a4:07:5a:06:82:94:77:3d:e3:f2:70:d6:42:
15:0d:69:d4:f7:87:16:6d:a3:52:01:a8:23:49:46:e4:06:eb:
f1:a4:94:6c:73:24:22:28:d9:ec:57:ef:84:ef:69:75:3e:d8:
49:70:2d:aa:dc:99:b3:84:7c:0e:c7:d6:53:89:d4:0e:a5:76:
77:7c:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org