Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8n-0wMxEXwX5iNGe2Gh1hfZ648Y.roa
File: 8n-0wMxEXwX5iNGe2Gh1hfZ648Y.roa (raw, json)
Hash identifier: 9sbm/ojz2vPpKHXSushSpSy8lQUhv0qQEJ3PDvgYca8=
Subject key identifier: F2:7F:B4:C0:CC:44:5F:05:F9:88:D1:9E:D8:68:75:85:F6:7A:E3:C6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018387EFE908B035C3E7D9E787BBCA9C5DF5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8n-0wMxEXwX5iNGe2Gh1hfZ648Y.roa
Signing time: Thu 29 Sep 2022 06:29:50 +0000
ROA not before: Thu 29 Sep 2022 06:29:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 84.32.68.0/22 maxlen: 24
84.32.82.0/23 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
84.32.8.0/22 maxlen: 24
88.216.90.0/24 maxlen: 24
88.216.0.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:87:ef:e9:08:b0:35:c3:e7:d9:e7:87:bb:ca:9c:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 29 06:29:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f27fb4c0cc445f05f988d19ed8687585f67ae3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:41:54:ae:e4:25:f8:53:be:6d:fb:c7:f5:
5b:92:97:6b:08:70:3b:1c:2b:4b:17:6e:5c:cc:a3:
19:e0:0d:20:06:e7:29:c9:33:d1:99:29:f7:5a:a9:
37:5f:bd:79:47:af:0b:63:be:47:d4:9e:14:e8:1c:
cd:97:83:6f:35:1a:c2:ff:d8:89:f2:0b:83:b1:ea:
50:99:ef:f1:2e:42:0e:55:4a:70:5e:41:be:8f:26:
2c:fb:a7:0e:d6:b1:3d:d6:2d:01:37:8c:16:9c:0c:
f7:7b:17:bf:97:18:ee:83:0b:10:51:ca:f6:80:d3:
c8:2a:b7:3e:24:23:ab:99:bc:48:ba:9d:6b:6a:9c:
e1:fe:b7:f6:9f:29:29:de:8b:58:d7:b1:13:d3:98:
99:16:53:c0:76:c5:ad:31:f7:76:91:d1:91:4f:18:
e0:68:a3:b2:ca:9f:54:53:71:94:d2:24:79:c4:d5:
04:9b:e2:19:1c:f4:0f:26:f3:2f:46:88:77:55:23:
fc:fe:d2:5a:47:c8:41:7d:d8:0d:ff:47:9e:28:69:
8e:d7:3b:1b:56:61:50:ed:1f:6c:d0:75:95:23:37:
36:d3:12:6b:ef:04:42:2f:36:b0:2f:42:ad:02:a7:
ce:27:fa:27:c0:06:7c:60:23:17:60:48:89:d4:b0:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:B4:C0:CC:44:5F:05:F9:88:D1:9E:D8:68:75:85:F6:7A:E3:C6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8n-0wMxEXwX5iNGe2Gh1hfZ648Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/22
84.32.68.0/22
84.32.82.0/23
88.216.0.0/22
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/24
88.216.46.0/24
88.216.90.0/24
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
99:f3:3c:07:47:0a:dd:47:98:cf:97:90:90:0c:4c:26:f0:d7:
3e:a3:aa:99:f6:9a:61:cb:44:5e:3c:90:ba:5c:34:f1:f0:8b:
d5:2f:fc:73:30:8b:37:f4:9d:38:9e:53:3d:90:cf:74:05:01:
3a:41:19:55:4b:4d:5c:a2:96:cd:ef:8a:04:f9:b0:2f:53:e1:
33:43:02:a6:b3:3d:61:7b:51:c2:a9:89:8c:48:6f:be:85:df:
2b:54:e4:62:1c:5c:9c:f3:86:55:a0:45:2c:10:d1:dc:ef:21:
43:9b:49:83:4d:80:11:ab:ee:ff:f9:16:b8:28:4d:c3:b2:ba:
b5:cc:d0:2a:41:f1:f8:69:8b:c7:37:ad:89:ea:fa:78:3a:50:
59:e3:5e:eb:79:7a:ad:e7:e7:82:50:99:6b:9f:bf:8a:c6:21:
29:33:04:21:27:45:01:c2:22:03:27:29:19:ee:63:1f:e2:45:
12:9c:91:73:12:27:53:37:d0:e7:a6:18:f2:4f:95:7f:85:a8:
b3:6a:a7:57:b8:32:a5:4f:df:21:ba:c8:04:a4:83:7f:ca:b8:
77:96:c9:fe:22:ca:74:d3:97:a1:13:27:4f:e7:a8:9b:a4:63:
c6:23:1a:69:02:ed:a9:9d:1d:eb:6e:0f:aa:56:93:1d:e8:6c:
1d:44:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:28 2023 by rpki-client on console-ams.rpki-client.org