Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7hx0n0fU36X4XLK52xWdA0FngAU.roa
File: 7hx0n0fU36X4XLK52xWdA0FngAU.roa (raw, json)
Hash identifier: b7IodA7ZXFdDVTBWDFyEh66GUhEujLePh1i02IFNzVw=
Subject key identifier: EE:1C:74:9F:47:D4:DF:A5:F8:5C:B2:B9:DB:15:9D:03:41:67:80:05
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184D2193FC6DCB1356044E658A3C3921C9C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7hx0n0fU36X4XLK52xWdA0FngAU.roa
Signing time: Fri 02 Dec 2022 09:09:40 +0000
ROA not before: Fri 02 Dec 2022 09:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.79.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
84.32.88.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
88.216.132.0/23 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.232.0/21 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:19:3f:c6:dc:b1:35:60:44:e6:58:a3:c3:92:1c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 2 09:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee1c749f47d4dfa5f85cb2b9db159d0341678005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:fd:e2:23:c4:44:61:48:6b:4b:0f:ed:f7:
cd:62:99:1c:a7:fa:00:dd:30:84:ff:56:bc:65:c4:
a4:6f:c8:6c:7d:92:33:09:91:db:c7:fe:e1:73:65:
ee:3c:0c:b9:b4:d1:95:1c:e8:0f:f4:15:ae:02:0f:
3f:40:b2:4d:2d:1f:20:8d:e4:a2:ed:84:b3:0e:8f:
63:64:f8:ab:b3:63:54:41:94:64:1a:21:11:6c:a7:
9a:0a:76:85:14:98:dd:b9:c5:fc:0b:cc:01:d6:c6:
76:25:6c:e4:a3:ae:70:f1:87:f8:d2:95:90:09:05:
5b:7e:7d:79:7a:37:5c:f8:90:83:4b:a1:53:80:b6:
a8:12:28:69:51:01:86:69:99:2a:a5:32:c2:91:96:
3e:a1:b1:5e:0c:12:24:36:0b:80:20:73:67:d3:02:
fb:69:ce:72:42:cb:52:ab:ca:e3:8a:7a:51:a6:f9:
79:91:ba:23:1e:16:aa:8d:b4:82:b5:f1:78:af:6a:
c4:3b:0e:56:88:60:ad:92:73:c5:4e:bc:1d:4d:9d:
00:a9:be:ec:4c:2f:f1:19:f5:ff:20:06:5a:6f:d4:
69:eb:ba:26:ec:88:5a:b1:8f:26:bf:14:7f:93:ec:
ee:e3:ca:d4:eb:a1:e6:f4:50:63:e5:be:13:24:68:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:74:9F:47:D4:DF:A5:F8:5C:B2:B9:DB:15:9D:03:41:67:80:05
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7hx0n0fU36X4XLK52xWdA0FngAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.79.0/24
84.32.88.0/22
84.32.212.0/24
88.216.44.0/23
88.216.128.0/24
88.216.131.0-88.216.135.255
88.216.224.0/22
88.216.232.0/21
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
27:8e:34:a1:09:f8:54:7a:ef:4d:d5:86:4b:7c:8e:9b:19:16:
9f:9d:d9:77:82:ec:53:90:90:62:c2:db:1a:93:0e:dc:03:76:
10:63:22:5e:c0:d7:66:aa:74:f7:2c:0a:53:c7:de:85:c3:71:
01:21:3e:97:c3:85:40:63:18:46:3f:dc:18:ba:73:0a:74:40:
84:26:45:cb:c3:fa:11:27:5f:5e:29:b1:fa:42:fb:9b:37:62:
cb:88:74:0d:9d:ce:9a:68:51:50:9f:cc:7a:cb:5f:2a:7a:45:
ca:6d:8d:b6:76:e3:af:ee:1c:83:71:b1:f0:27:79:bd:89:9a:
2b:75:49:61:30:98:16:9f:d8:97:a0:f0:85:20:87:fb:53:ee:
91:ea:d8:81:0d:b7:3a:94:b2:17:e9:7b:1e:34:db:cc:5b:f8:
c8:30:4c:7b:c1:f7:fe:42:17:eb:5d:73:8d:18:a2:13:3c:fa:
d4:51:9a:b5:3b:60:a0:5c:20:32:cd:b1:56:82:ac:05:0e:da:
9f:c5:e8:49:06:e2:ae:38:d0:ca:4f:8d:e8:e5:4d:46:a2:52:
6c:8f:29:02:8d:85:22:de:41:92:b7:5e:af:bb:e1:95:b6:c6:
f3:dc:d7:20:9a:b7:6a:9a:c2:9c:31:79:47:fe:6e:c6:50:d9:
10:0a:cc:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org