Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6UPbm9DKN5CZs6pqRTcm47mBgH8.roa
File: 6UPbm9DKN5CZs6pqRTcm47mBgH8.roa (raw, json)
Hash identifier: 7QDED8rqEKibZt2eovEpy0cVab3YmlZDq+CtdIwB6DI=
Subject key identifier: E9:43:DB:9B:D0:CA:37:90:99:B3:AA:6A:45:37:26:E3:B9:81:80:7F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: A85D2B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6UPbm9DKN5CZs6pqRTcm47mBgH8.roa
Signing time: Tue 12 Apr 2022 15:56:14 +0000
ROA not before: Tue 12 Apr 2022 15:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.180.0/22 maxlen: 24
88.216.188.0/22 maxlen: 24
88.216.196.0/22 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
84.32.4.0/22 maxlen: 24
84.32.8.0/22 maxlen: 24
84.32.24.0/21 maxlen: 24
84.32.40.0/21 maxlen: 24
88.216.0.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.20.0/22 maxlen: 22
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11033899 (0xa85d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 12 15:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e943db9bd0ca379099b3aa6a453726e3b981807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:ff:99:ad:06:b9:cd:69:81:d8:d4:db:c1:
e7:0b:94:35:7d:a5:3b:ee:a4:52:2a:48:62:6d:77:
b2:73:28:b5:fa:c6:ef:44:58:e4:18:11:fe:ba:62:
e7:10:0f:a1:d1:8e:e1:a8:42:3a:2a:07:14:21:51:
18:e6:d8:ea:9a:14:73:32:da:38:a1:7b:3a:c8:c5:
eb:ba:26:9a:9b:8e:dd:5f:d7:eb:56:5e:6b:15:e8:
8b:15:6b:9b:6d:73:e9:f9:22:60:bf:50:bb:aa:8f:
80:e0:e3:e6:8a:6e:54:2f:44:9e:8d:c2:76:a8:24:
ae:89:21:51:13:fb:e2:e9:74:c3:d1:b1:80:ae:de:
07:8b:06:f7:80:b8:97:d2:3b:85:9d:4a:05:5f:8c:
85:3e:6b:46:7d:89:f5:0d:2c:4c:8c:d4:65:85:bb:
cf:47:54:88:4b:e2:42:e8:1e:33:4c:c1:39:55:56:
be:a0:d8:38:21:bc:51:df:dc:8a:ec:15:b3:4c:40:
6e:c0:c5:7d:81:e3:70:c4:08:1c:ca:3a:d7:97:1b:
87:b2:1d:ec:9b:48:ec:5b:35:cb:67:2a:b6:f3:54:
51:75:a0:0d:68:3d:72:52:7a:f7:c2:5f:e0:b1:13:
e9:ca:4f:10:53:23:0e:4d:3e:72:71:9a:0e:77:44:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:43:DB:9B:D0:CA:37:90:99:B3:AA:6A:45:37:26:E3:B9:81:80:7F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6UPbm9DKN5CZs6pqRTcm47mBgH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0-84.32.11.255
84.32.24.0/21
84.32.40.0/21
88.216.0.0/22
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/24
88.216.46.0/23
88.216.180.0/22
88.216.188.0/22
88.216.196.0/22
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
34:81:54:c9:12:30:72:43:e3:9d:a5:41:b1:98:85:47:45:a7:
d5:46:18:76:2b:02:b4:c6:c8:c8:2b:18:53:24:f8:c4:3d:00:
22:b3:d2:c4:e2:43:37:16:8b:52:9f:a9:9c:66:32:78:71:35:
3d:ab:ae:89:9c:52:24:90:39:21:b6:ab:af:3d:d7:44:63:88:
8e:18:35:68:10:d5:6c:1a:d8:ee:8f:dc:1e:c3:0a:5f:b7:39:
03:d8:6f:f3:94:55:0e:db:40:8c:d5:36:84:a8:14:1f:16:b9:
8a:90:2c:69:ff:1a:f6:93:e9:62:17:ba:97:ed:bb:59:a9:37:
94:8c:34:43:81:c2:1f:1b:a8:3b:46:a2:66:dd:33:69:85:75:
39:fe:60:c3:7f:3c:3f:39:b6:ca:f6:23:b1:5b:f1:60:67:fe:
56:87:66:77:bd:68:f5:e0:d0:c0:ad:21:c9:a8:ad:38:c2:6b:
2d:47:11:9d:dd:d1:50:bb:0a:dd:61:d2:45:d7:8a:a3:aa:14:
6b:ab:95:9e:50:0a:d0:bc:d9:0c:b5:cb:8b:dd:3e:97:df:38:
85:e2:34:6e:57:bb:d5:59:fb:d7:f8:91:6e:c7:1a:ac:a8:ce:
d1:05:29:6a:36:f5:4d:9f:3f:89:6b:45:ea:e1:9e:6a:2a:38:
ad:39:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org