Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7VDfAwbYyBvCsHCRM0tAagcC5dk.roa
File: 7VDfAwbYyBvCsHCRM0tAagcC5dk.roa (raw, json)
Hash identifier: GrdZJBZ6v3tFgjeUKihLgiMa4/RqwSDwxg9E/Tbe5oM=
Subject key identifier: ED:50:DF:03:06:D8:C8:1B:C2:B0:70:91:33:4B:40:6A:07:02:E5:D9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0120D50C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7VDfAwbYyBvCsHCRM0tAagcC5dk.roa
Signing time: Thu 19 May 2022 08:44:16 +0000
ROA not before: Thu 19 May 2022 08:44:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 88.216.188.0/22 maxlen: 24
84.32.92.0/22 maxlen: 24
88.216.100.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18928908 (0x120d50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 19 08:44:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed50df0306d8c81bc2b07091334b406a0702e5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:d5:2a:27:a7:74:89:e5:43:24:01:dc:0b:
ce:c0:c5:ff:94:27:f5:a8:8d:a0:b6:7f:e2:d8:2f:
d5:13:a8:e9:c8:22:41:ae:f3:b7:81:c8:40:95:fb:
2c:55:bb:2f:5c:3d:5a:66:95:a5:b0:83:01:a1:91:
f6:e5:80:51:ca:ba:b5:6a:30:36:c7:4b:45:60:5e:
a1:07:16:50:51:46:b0:64:a4:a6:07:57:39:f9:e4:
38:7e:a2:d4:9d:89:b0:0a:97:e3:4d:16:6e:80:92:
a4:37:46:17:28:9b:e0:ae:63:cc:01:25:55:d9:93:
ce:1f:05:f2:ca:af:18:90:d3:14:ee:36:b0:a4:45:
e0:1b:9c:ce:b4:e2:84:51:c0:17:5f:2b:f4:6c:4b:
52:64:44:db:7c:d6:ef:ee:97:fa:8c:ea:af:48:47:
73:9a:98:ef:0b:8a:f7:f5:25:a5:23:de:7f:c5:5f:
4f:4a:da:fb:39:7f:72:c9:b0:aa:9e:3f:49:ed:4c:
a5:b2:03:95:94:eb:0a:73:fd:de:f3:3a:d0:31:86:
b4:8d:f7:9f:fd:62:ce:b7:55:c3:cc:19:e0:88:1f:
ed:37:1f:19:29:08:45:30:e1:03:cd:49:45:51:0b:
03:40:54:4e:09:7f:5d:30:96:86:4b:f0:63:a3:1a:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:50:DF:03:06:D8:C8:1B:C2:B0:70:91:33:4B:40:6A:07:02:E5:D9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7VDfAwbYyBvCsHCRM0tAagcC5dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.92.0/22
88.216.16.0/24
88.216.100.0/22
88.216.188.0/22
Signature Algorithm: sha256WithRSAEncryption
04:20:81:bd:1f:d5:bc:a7:37:1b:16:e7:bb:30:e2:b5:7b:a9:
2b:6b:3c:94:79:ba:01:9a:24:d9:ed:f7:ff:b7:99:cd:08:90:
4c:37:47:19:62:11:e7:7a:9c:cb:1a:29:2c:7c:ce:0d:75:da:
c3:c4:e1:d2:08:68:06:3c:17:cd:45:8e:2c:cb:b8:cf:a3:82:
70:4c:84:55:18:80:44:72:47:b0:bf:93:84:85:49:6f:aa:d2:
c5:11:50:34:c4:75:3d:4d:b1:c2:c0:29:a0:64:22:85:b0:d9:
c9:2a:c2:ce:ac:a9:94:c1:9c:2b:0e:55:e9:8e:ce:33:07:10:
b7:99:b4:87:c8:b4:63:c5:e4:ae:d7:1e:0b:a8:d3:b1:e3:a6:
fe:87:82:e4:f2:6d:46:d7:6a:cc:9b:08:91:7f:23:5a:db:75:
cf:d6:2c:63:bc:de:c2:6f:0e:4d:1e:ac:58:bd:68:9d:dd:81:
46:a3:65:cf:5f:9f:25:cc:e1:3e:1c:51:69:6a:25:9e:4f:e3:
27:76:43:17:65:b1:7d:b8:21:45:9f:0e:65:3f:a0:2c:04:de:
5e:50:6d:c1:ff:9c:88:62:14:9e:8d:c8:90:a2:a9:5c:48:f6:
90:c5:eb:8c:29:09:3b:50:30:21:03:64:a1:93:2d:76:05:62:
e1:47:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org