Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6U69m7ZQLlOB6qlXONA66OU65No.roa
File: 6U69m7ZQLlOB6qlXONA66OU65No.roa (raw, json)
Hash identifier: s1oVUZDazbyQDBjXNAKIgi3Q5SrSVdLY5ySlF70C4rI=
Subject key identifier: E9:4E:BD:9B:B6:50:2E:53:81:EA:A9:57:38:D0:3A:E8:E5:3A:E4:DA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01847087B33A94370B723550F18560A407DB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6U69m7ZQLlOB6qlXONA66OU65No.roa
Signing time: Sun 13 Nov 2022 10:27:32 +0000
ROA not before: Sun 13 Nov 2022 10:27:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.90.0/23 maxlen: 24
84.32.88.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.132.0/23 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.232.0/21 maxlen: 24
88.216.16.0/23 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:70:87:b3:3a:94:37:0b:72:35:50:f1:85:60:a4:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 13 10:27:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e94ebd9bb6502e5381eaa95738d03ae8e53ae4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:d5:81:c9:73:25:e3:b9:a6:39:c5:d4:93:
49:a1:f9:fe:c6:ce:39:44:6a:98:d4:ac:d6:38:70:
c4:54:51:b8:e0:53:df:e9:1c:9b:a7:fd:48:7b:a0:
d9:34:28:d1:be:f4:b0:67:5c:2c:a6:52:11:91:f7:
64:36:93:40:17:bf:d3:08:3b:62:0c:a0:3f:f6:1b:
a8:bc:69:45:0d:f6:f9:b3:5c:d8:35:52:e8:68:5b:
74:3c:12:19:47:ef:58:10:40:f4:a3:6c:2f:8d:29:
34:94:95:b1:5e:77:31:46:39:fd:77:43:64:ba:30:
8a:1e:2e:4f:71:a7:82:3a:ff:ed:32:68:6b:4c:1c:
7f:ed:83:2a:da:29:d4:4c:70:35:3e:dd:96:e3:cc:
e0:c2:25:5d:50:56:6e:e1:8f:a1:91:5f:7c:e4:d7:
7c:52:fa:4b:6f:ae:f5:8e:4f:38:3d:29:53:fe:39:
a9:71:4b:5c:b1:97:90:d4:1a:88:13:85:02:af:6f:
e8:f7:54:57:27:fb:83:07:37:a7:ca:47:a5:63:81:
be:89:d4:bc:04:5e:0d:be:10:8a:3c:f7:bb:bd:a2:
b7:28:25:00:91:77:8b:43:ad:ff:a1:02:dd:9f:3f:
11:1c:56:3f:28:af:cd:77:3c:fb:c8:31:7e:45:44:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:BD:9B:B6:50:2E:53:81:EA:A9:57:38:D0:3A:E8:E5:3A:E4:DA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6U69m7ZQLlOB6qlXONA66OU65No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
84.32.88.0/22
84.32.212.0/24
88.216.16.0/23
88.216.41.0/24
88.216.43.0-88.216.45.255
88.216.92.0/22
88.216.128.0/24
88.216.131.0-88.216.135.255
88.216.224.0/22
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
92:f2:64:3b:90:cb:1b:41:b2:b3:23:80:37:75:d5:eb:5d:d3:
fd:29:26:5d:69:cd:6f:04:92:ee:0d:01:03:ee:27:f9:30:c7:
92:94:ed:d7:24:3f:ae:62:61:3f:b1:9f:46:27:60:31:c9:95:
9e:13:9e:57:dd:ed:26:29:6e:ba:a4:c8:c7:8b:4a:46:1d:6b:
66:18:d4:1a:b9:55:7f:a3:2d:0d:0f:42:7d:f0:a3:f2:a7:32:
df:33:3b:e9:48:13:4e:8b:eb:d1:e4:2f:c4:3b:f5:99:45:8a:
f9:ca:63:47:25:f5:73:2c:b6:f5:b0:ec:ec:26:d3:e1:9f:8d:
d7:26:6b:81:b5:4a:da:fb:a6:52:24:c1:32:5f:15:28:ac:e9:
a9:72:b9:a7:ac:fd:c2:b9:d7:57:2e:b8:37:b8:1e:42:62:30:
59:a9:84:54:16:19:74:d0:66:ea:51:d1:a3:bb:12:4b:6a:1c:
07:27:5d:4e:12:89:1e:a0:34:72:e7:b9:f6:36:3a:c4:d0:43:
6f:da:6b:56:94:4d:e8:30:d8:aa:08:fc:a1:0c:64:7b:8b:18:
16:83:0e:04:0b:e4:fc:d4:df:0a:41:63:7a:46:9f:ac:41:84:
8a:76:c2:71:38:00:33:db:ae:84:35:73:64:a7:8e:59:b9:5d:
f0:72:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org