Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6v7UKdvxpzYXraG7jsGsYR-7jdY.roa
File: 6v7UKdvxpzYXraG7jsGsYR-7jdY.roa (raw, json)
Hash identifier: Zv91ZJn9vmiY81yDR3VIP9XK/WxelkAQjfHwzS39Beg=
Subject key identifier: EA:FE:D4:29:DB:F1:A7:36:17:AD:A1:BB:8E:C1:AC:61:1F:BB:8D:D6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018486F3A1FB9050A35EDCC9A8B3CB650AA2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6v7UKdvxpzYXraG7jsGsYR-7jdY.roa
Signing time: Thu 17 Nov 2022 18:57:04 +0000
ROA not before: Thu 17 Nov 2022 18:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 88.216.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:f3:a1:fb:90:50:a3:5e:dc:c9:a8:b3:cb:65:0a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 17 18:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eafed429dbf1a73617ada1bb8ec1ac611fbb8dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:ed:a4:16:f4:ea:b0:8b:2f:86:06:f6:25:
05:50:43:df:28:7a:5f:5b:4d:a0:6b:c2:fb:02:99:
03:0a:48:45:17:8a:cb:3a:21:3a:da:6a:e4:1c:d2:
39:ca:86:b7:bb:b0:09:51:f8:6f:87:7c:fb:80:4c:
0f:6e:84:97:34:c0:28:aa:0f:52:7e:82:7a:1a:0c:
01:f1:c7:cf:dd:7c:62:a3:e3:db:ee:15:ea:cc:a5:
05:72:7d:af:64:bb:46:55:fa:7a:3b:47:fe:3e:70:
82:73:f3:50:28:d9:ca:e0:91:d0:4b:26:1a:71:d1:
fe:a2:84:90:1e:9e:3c:2c:85:0a:87:a7:2d:46:f2:
20:cb:99:3a:19:6f:fd:c1:26:53:eb:a3:ed:a0:63:
14:98:79:0b:a0:47:31:b6:30:04:48:5b:f2:54:66:
57:d8:d3:2f:07:f5:da:70:26:86:db:41:a3:a2:52:
be:3a:97:f3:bf:68:a8:88:2b:a4:b5:12:b5:29:9d:
f4:0d:49:9f:f8:6c:c3:6a:70:11:1d:5f:fe:23:90:
a0:61:4f:f5:e6:8a:ae:32:f0:03:9b:be:f1:5d:e4:
f2:7e:47:b2:51:7d:f2:16:94:b5:34:c2:a2:1e:17:
52:3d:c6:a6:74:ea:92:f2:a5:cd:81:2e:73:39:37:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:D4:29:DB:F1:A7:36:17:AD:A1:BB:8E:C1:AC:61:1F:BB:8D:D6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6v7UKdvxpzYXraG7jsGsYR-7jdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:33:03:78:c7:d3:80:d3:58:1e:07:f8:4d:4f:18:43:dc:43:
13:cc:53:b2:cf:9e:e7:3e:3f:5d:a0:75:67:9d:65:d3:11:e6:
cd:4c:20:0a:79:96:cc:1e:aa:e8:72:67:72:aa:d4:be:5e:1d:
a7:b8:7c:83:08:be:ed:e7:d6:56:c4:87:04:69:a9:f1:e3:da:
4c:8e:9c:7c:dc:06:74:f5:31:07:6e:c8:6b:10:2c:53:ce:79:
21:fe:d9:70:7f:ff:78:55:03:e3:92:cc:c0:0f:f8:79:d7:58:
e6:07:2c:c5:3b:0b:5e:ef:7e:32:5c:f0:09:99:e6:2c:b3:eb:
09:d1:84:91:1a:4c:04:06:dc:32:b5:85:27:6f:b8:11:e6:e5:
b4:b8:4b:dd:12:c8:fe:e2:52:6d:bb:0e:b0:e8:ed:e3:a5:fe:
db:e7:63:08:69:d8:ed:2d:02:49:ea:20:f1:b6:ec:a0:ae:5d:
c7:75:f0:9b:e4:f4:d9:a4:1d:fe:b6:d2:6b:2b:67:55:96:2c:
3b:9b:4b:49:fd:33:2d:25:e5:87:a1:7e:4c:c4:df:33:56:7f:
b6:60:7e:95:93:dc:91:f0:7e:ef:be:9e:25:dd:98:3a:7a:96:
76:2d:13:ed:f9:fe:18:92:6a:e2:53:fa:07:14:9a:ed:20:f6:
a4:99:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org