Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7JJDT-kC9YaPL9tSJ06B4UU0QxU.roa
File: 7JJDT-kC9YaPL9tSJ06B4UU0QxU.roa (raw, json)
Hash identifier: Zp0roaFnD5EGSqlvoZmetRNOa5ExJr5PogdnHTYf38c=
Subject key identifier: EC:92:43:4F:E9:02:F5:86:8F:2F:DB:52:27:4E:81:E1:45:34:43:15
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018441AF7B46DD7C5FE1C0B180CE84A5F609
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7JJDT-kC9YaPL9tSJ06B4UU0QxU.roa
Signing time: Fri 04 Nov 2022 08:08:50 +0000
ROA not before: Fri 04 Nov 2022 08:08:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 88.216.131.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.132.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:af:7b:46:dd:7c:5f:e1:c0:b1:80:ce:84:a5:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 4 08:08:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec92434fe902f5868f2fdb52274e81e145344315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:4e:13:6c:73:44:37:81:a7:7f:8d:99:bd:
68:5c:22:c7:df:5a:04:16:de:6b:99:ed:7e:14:dc:
c8:9b:c3:60:44:e8:a1:9b:0a:06:90:d9:a0:dc:3f:
e5:ea:97:5f:95:74:a2:eb:7d:10:5f:ba:2f:ef:55:
48:cb:23:d8:08:b9:24:9a:c7:ab:42:df:fe:90:68:
c5:7f:ec:bc:40:cc:ff:8d:92:00:fb:3f:cb:4e:27:
76:d2:6b:82:db:5f:e7:e8:df:af:4d:8f:0f:16:f5:
d4:ba:b6:51:1e:f9:18:21:00:bd:3c:3b:6e:6b:7b:
46:8f:5f:6b:79:80:47:8f:a4:07:17:b0:97:eb:88:
94:02:90:a1:6e:ba:db:01:1b:5f:47:c2:ce:24:d2:
3e:b4:4d:03:59:44:b4:50:3e:a1:ac:e4:cb:cc:08:
55:6a:ab:7b:de:20:3f:56:a0:c5:42:95:e9:ba:aa:
fc:b5:30:a3:d8:c5:9d:15:6d:02:9e:0c:0b:d0:36:
41:f8:33:da:63:d0:65:5e:35:20:84:0f:81:68:c1:
f4:5d:18:28:79:86:f6:7c:60:c4:59:b6:8d:1b:83:
2e:18:58:53:59:5b:56:a1:49:7f:cd:10:a2:4c:0c:
28:6b:d9:88:ed:19:05:cd:14:b5:06:a9:fe:7b:d6:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:43:4F:E9:02:F5:86:8F:2F:DB:52:27:4E:81:E1:45:34:43:15
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7JJDT-kC9YaPL9tSJ06B4UU0QxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.33.0/24
88.216.130.0-88.216.133.255
Signature Algorithm: sha256WithRSAEncryption
40:f2:f5:94:86:02:5c:65:aa:47:c2:63:24:da:21:ee:58:df:
eb:b4:49:32:c1:84:a4:d6:ea:31:63:ee:be:9a:71:d9:86:c2:
25:1c:08:9b:87:d8:08:cc:8c:a1:3f:ae:68:91:a3:b5:24:98:
80:5f:f6:59:73:3e:3f:ef:2e:42:69:57:d5:32:59:f7:f4:58:
22:8f:53:18:71:e0:f8:c1:0c:90:a6:d5:22:1e:f3:fc:aa:98:
70:a5:5d:24:fb:f1:60:24:5f:96:a1:93:af:73:fb:31:90:2c:
51:a0:0d:d9:0b:e2:5d:85:a9:78:59:c0:9d:7e:58:88:ac:9f:
f7:48:aa:54:84:33:2d:72:12:d4:2b:18:d9:5c:a4:8a:4b:90:
56:3c:a4:65:23:6c:14:1b:97:1e:f8:38:1f:3e:ce:71:0b:33:
07:ac:7b:09:8d:da:18:7a:3f:e2:9a:97:f9:12:5b:d5:3a:51:
30:90:bd:73:65:f7:56:da:d9:69:be:8a:4c:7e:60:f1:15:79:
31:94:d2:35:4f:50:b0:29:8c:a9:6b:3e:23:3b:23:c9:82:29:
c2:cb:94:d6:dc:0c:e4:d9:c1:26:38:98:d1:c2:f5:f9:16:41:
2a:e7:94:da:0d:b2:60:6c:9f:1a:2f:6f:3d:30:45:25:f8:55:
a0:9b:91:98
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYRBr3tG3Xxf4cCxgM6EpfYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTA0MDgwODUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzkyNDM0ZmU5MDJmNTg2OGYyZmRiNTIyNzRlODFlMTQ1MzQ0MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZpOE2xzRDeBp3+Nmb1oXCLH31oE
Ft5rme1+FNzIm8NgROihmwoGkNmg3D/l6pdflXSi630QX7ov71VIyyPYCLkkmser
Qt/+kGjFf+y8QMz/jZIA+z/LTid20muC21/n6N+vTY8PFvXUurZRHvkYIQC9PDtu
a3tGj19reYBHj6QHF7CX64iUApChbrrbARtfR8LOJNI+tE0DWUS0UD6hrOTLzAhV
aqt73iA/VqDFQpXpuqr8tTCj2MWdFW0CngwL0DZB+DPaY9BlXjUghA+BaMH0XRgo
eYb2fGDEWbaNG4MuGFhTWVtWoUl/zRCiTAwoa9mI7RkFzRS1Bqn+e9bxDQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOySQ0/pAvWGjy/bUidOgeFFNEMVMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvN0pKRFQta0M5WWFQTDl0U0owNkI0VVUwUXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAWNghMAwD
BAFY2IIDBAFY2IQwDQYJKoZIhvcNAQELBQADggEBAEDy9ZSGAlxlqkfCYyTaIe5Y
3+u0STLBhKTW6jFj7r6acdmGwiUcCJuH2AjMjKE/rmiRo7UkmIBf9llzPj/vLkJp
V9UyWff0WCKPUxhx4PjBDJCm1SIe8/yqmHClXST78WAkX5ahk69z+zGQLFGgDdkL
4l2FqXhZwJ1+WIisn/dIqlSEMy1yEtQrGNlcpIpLkFY8pGUjbBQblx74OB8+znEL
MwesewmN2hh6P+Kal/kSW9U6UTCQvXNl91ba2Wm+ikx+YPEVeTGU0jVPULApjKlr
PiM7I8mCKcLLlNbcDOTZwSY4mNHC9fkWQSrnlNoNsmBsnxovbz0wRSX4VaCbkZg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org