Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/92_rZ9McXfGJZ12cdg4ADqZHM2g.roa
File: 92_rZ9McXfGJZ12cdg4ADqZHM2g.roa (raw, json)
Hash identifier: Fm459zdmsT6JKiEe+fCzA274tHfaYK8J44Zez/mKT1Y=
Subject key identifier: F7:6F:EB:67:D3:1C:5D:F1:89:67:5D:9C:76:0E:00:0E:A6:47:33:68
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 599444
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/92_rZ9McXfGJZ12cdg4ADqZHM2g.roa
Signing time: Sun 20 Mar 2022 16:54:25 +0000
ROA not before: Sun 20 Mar 2022 16:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 88.216.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5870660 (0x599444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 20 16:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f76feb67d31c5df189675d9c760e000ea6473368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6b:c8:60:cc:15:6a:07:25:ea:7f:09:89:a0:
5c:0a:e3:04:a3:c2:82:4a:c6:64:88:3c:32:8f:cb:
e8:77:6f:cd:50:9f:ef:71:89:ff:8d:99:59:0b:a0:
d0:be:29:a7:d6:42:ea:f4:bf:f6:51:b1:32:8b:9f:
81:1a:39:ae:cd:72:10:02:30:b0:37:1d:88:26:64:
4b:9a:62:0d:4e:90:33:36:4a:c1:00:61:d9:8d:53:
41:df:91:71:9d:ea:38:4d:b1:12:0a:5d:f5:8d:e2:
6e:da:cf:75:48:3d:10:a2:59:10:5a:f7:03:56:72:
35:da:7b:4e:b4:be:e2:98:c1:49:ea:70:08:8b:1a:
98:21:27:cd:da:c2:e6:12:e4:25:a5:2d:31:ea:32:
5d:c4:56:e2:87:03:99:cd:cf:15:65:5f:dc:ca:8f:
35:d8:eb:be:69:1a:f2:10:74:b8:8c:90:39:82:30:
b6:35:c5:e7:af:73:fb:69:49:42:a3:14:1d:86:75:
ab:45:45:72:52:d2:8a:1b:62:74:52:d8:e1:f5:ce:
e0:dd:47:d3:90:6a:72:2c:e0:58:3c:fd:6a:3c:25:
9c:fa:1f:35:5e:3b:e1:69:5b:8e:e9:65:44:5b:7b:
3e:49:1b:da:13:c5:09:eb:1f:84:26:53:ee:4e:5a:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:EB:67:D3:1C:5D:F1:89:67:5D:9C:76:0E:00:0E:A6:47:33:68
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/92_rZ9McXfGJZ12cdg4ADqZHM2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.19.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5a:4b:2b:c5:c4:e5:f6:0d:a7:7b:08:dc:0f:73:fe:9f:31:
2b:dd:d6:44:97:5d:58:c1:80:23:75:9b:af:7a:9c:10:c4:d1:
c9:ce:7e:fd:66:f0:b6:0e:8c:70:e7:77:10:9d:78:0a:1d:80:
be:97:c1:6c:1a:da:28:19:eb:02:69:04:a0:4c:03:0d:ef:6e:
ab:3b:f4:87:f4:60:27:66:f8:e3:b7:10:62:4e:92:5c:c2:e7:
2e:c7:d0:d6:7f:33:af:eb:e9:44:4e:c5:52:62:66:23:47:34:
c7:5d:a6:69:9d:d9:6e:ac:52:da:7d:32:f1:7f:26:28:0f:50:
fb:98:b7:b7:d0:5d:cd:28:5f:5d:b9:43:28:f3:e3:5d:a2:81:
21:cc:c9:e4:0e:b8:3b:19:1d:69:8e:b5:7a:c0:c6:8e:ad:ac:
6c:29:78:48:10:58:fa:d0:87:52:95:3c:0d:79:57:82:bd:bf:
69:aa:52:83:17:7b:37:89:7a:f4:6c:c1:eb:51:66:88:35:bf:
b6:b1:a6:a8:b6:f3:fb:bd:54:2b:1f:a6:f5:72:db:c2:2f:9b:
92:a1:b1:b7:5e:50:98:34:22:c0:ed:6f:17:da:59:87:40:d1:
3a:cb:aa:fe:ed:08:1d:70:a7:4c:c6:46:5f:f9:d7:8d:12:d3:
1c:05:a2:7e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDWZREMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRm
YmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZiZGEzYzUwHhcNMjIwMzIw
MTY1NDI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmNzZmZWI2N2QzMWM1
ZGYxODk2NzVkOWM3NjBlMDAwZWE2NDczMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA+2vIYMwVagcl6n8JiaBcCuMEo8KCSsZkiDwyj8vod2/NUJ/v
cYn/jZlZC6DQvimn1kLq9L/2UbEyi5+BGjmuzXIQAjCwNx2IJmRLmmINTpAzNkrB
AGHZjVNB35Fxneo4TbESCl31jeJu2s91SD0QolkQWvcDVnI12ntOtL7imMFJ6nAI
ixqYISfN2sLmEuQlpS0x6jJdxFbihwOZzc8VZV/cyo812Ou+aRryEHS4jJA5gjC2
NcXnr3P7aUlCoxQdhnWrRUVyUtKKG2J0Utjh9c7g3UfTkGpyLOBYPP1qPCWc+h81
XjvhaVuO6WVEW3s+SRvaE8UJ6x+EJlPuTlr9VQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFPdv62fTHF3xiWddnHYOAA6mRzNoMB8GA1UdIwQYMBaAFE+9RfzjVuKmXx5N
Ha94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMzLzEv
OTJfclo5TWNYZkdKWjEyY2RnNEFEcVpITTJnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8z
OTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMzLzEvVDcxRl9PTlc0cVpm
SGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNgTMA0GCSqGSIb3DQEBCwUAA4IB
AQCXWksrxcTl9g2newjcD3P+nzEr3dZEl11YwYAjdZuvepwQxNHJzn79ZvC2Doxw
53cQnXgKHYC+l8FsGtooGesCaQSgTAMN726rO/SH9GAnZvjjtxBiTpJcwucux9DW
fzOv6+lETsVSYmYjRzTHXaZpndlurFLafTLxfyYoD1D7mLe30F3NKF9duUMo8+Nd
ooEhzMnkDrg7GR1pjrV6wMaOraxsKXhIEFj60IdSlTwNeVeCvb9pqlKDF3s3iXr0
bMHrUWaINb+2saaotvP7vVQrH6b1ctvCL5uSobG3XlCYNCLA7W8X2lmHQNE6y6r+
7QgdcKdMxkZf+deNEtMcBaJ+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:28 2023 by rpki-client on console-ams.rpki-client.org