Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9ipyuzlOl0pFtaEc_b8vp8sNi_s.roa
File: 9ipyuzlOl0pFtaEc_b8vp8sNi_s.roa (raw, json)
Hash identifier: ACWzEacdfD8IJ8ph9k/KVOlDD4GZ7aNq8QYNQFBcu20=
Subject key identifier: F6:2A:72:BB:39:4E:97:4A:45:B5:A1:1C:FD:BF:2F:A7:CB:0D:8B:FB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183C84B85FFEE31109FE0A09B9DD29F5860
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9ipyuzlOl0pFtaEc_b8vp8sNi_s.roa
Signing time: Tue 11 Oct 2022 18:25:36 +0000
ROA not before: Tue 11 Oct 2022 18:25:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.187.0/24 maxlen: 24
84.32.87.0/24 maxlen: 24
88.216.37.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:4b:85:ff:ee:31:10:9f:e0:a0:9b:9d:d2:9f:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 11 18:25:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f62a72bb394e974a45b5a11cfdbf2fa7cb0d8bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:1c:6a:77:f6:67:7b:6c:65:7c:de:7c:f2:
cd:ff:9a:e1:fe:94:3d:7d:56:da:f9:a9:13:a6:6f:
45:62:54:be:0a:dd:9e:6e:64:32:90:41:ce:d8:24:
68:75:90:84:98:a9:e2:ab:5f:6a:9f:5b:3b:04:28:
9e:7e:71:6a:e6:42:0f:dd:e5:ff:cb:64:9e:c4:8b:
25:32:23:d9:0d:c3:6e:39:85:3b:d8:99:20:c8:f9:
9c:bd:b4:1d:d7:a0:18:91:de:4c:09:ac:c0:c5:b5:
32:4e:6f:25:21:8c:4d:d5:5c:ba:88:48:e2:f4:cd:
ce:1e:d9:47:03:a1:e1:eb:85:c8:4e:41:92:e3:99:
c3:e5:a7:8d:a0:cd:57:ba:07:ee:e7:4d:a8:de:1f:
7e:44:22:c3:48:57:c6:1f:32:93:67:b8:77:3f:24:
67:1b:a0:42:cf:86:28:ba:6c:5c:70:b6:26:74:d9:
73:ba:3d:d8:a6:f5:3a:a6:1b:b3:e6:eb:d7:b9:a0:
47:43:10:59:28:5c:33:3c:f6:bb:e7:f9:0e:b4:ca:
3c:c9:56:6d:68:2c:85:e7:99:d2:45:87:71:08:af:
6a:5e:72:73:c5:1f:ac:9b:39:25:30:f7:f7:76:52:
7a:2e:b9:e6:b7:dc:b9:dd:7f:88:ed:79:4a:6a:a8:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:72:BB:39:4E:97:4A:45:B5:A1:1C:FD:BF:2F:A7:CB:0D:8B:FB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9ipyuzlOl0pFtaEc_b8vp8sNi_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.87.0/24
88.216.37.0/24
88.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
69:76:19:8c:8c:bd:76:c1:1e:f2:0b:a0:ff:9e:2c:fa:30:a0:
16:ed:66:34:9f:5d:c6:d3:d7:ea:05:01:7f:ea:33:3b:52:aa:
df:b9:65:48:9f:2c:b6:ca:13:d1:16:75:b1:fa:b6:20:c5:3f:
9a:f2:2e:04:be:41:8d:17:8f:6a:e9:7e:fa:84:0c:31:d8:fe:
05:57:65:30:02:69:89:73:79:b3:c1:2a:be:7a:ce:68:84:99:
d2:dd:63:02:76:83:02:67:ea:7c:bc:88:f1:1b:89:4b:59:0d:
26:2b:af:5c:c6:65:3b:d2:5f:6b:71:ef:3b:49:e2:5d:95:e1:
61:b3:9a:b2:6a:b3:23:a7:80:94:02:c8:5e:66:a4:4a:af:24:
d1:54:f9:89:81:d9:f7:87:07:f8:c0:0f:53:9d:cd:eb:99:af:
8a:dd:c8:1c:31:dd:83:60:be:f2:3a:ab:96:67:8d:a6:e3:b3:
f3:07:3c:9b:97:5f:3b:d9:4f:aa:ca:47:4b:b3:09:f3:c7:aa:
1a:cc:2f:3b:e3:3c:b2:08:34:9f:07:ba:96:e1:55:45:ae:7a:
19:2e:9e:13:23:7e:5a:e5:5a:ed:ed:61:71:41:7c:f0:92:1d:
2a:17:51:67:18:69:58:73:76:49:3c:9d:5a:40:24:a7:c6:0d:
63:06:6a:63
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYPIS4X/7jEQn+Cgm53Sn1hgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMDExMTgyNTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjJhNzJiYjM5NGU5NzRhNDViNWExMWNmZGJmMmZhN2NiMGQ4YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIQcanf2Z3tsZXzefPLN/5rh/pQ9
fVba+akTpm9FYlS+Ct2ebmQykEHO2CRodZCEmKniq19qn1s7BCiefnFq5kIP3eX/
y2SexIslMiPZDcNuOYU72JkgyPmcvbQd16AYkd5MCazAxbUyTm8lIYxN1Vy6iEji
9M3OHtlHA6Hh64XITkGS45nD5aeNoM1Xugfu502o3h9+RCLDSFfGHzKTZ7h3PyRn
G6BCz4YoumxccLYmdNlzuj3YpvU6phuz5uvXuaBHQxBZKFwzPPa75/kOtMo8yVZt
aCyF55nSRYdxCK9qXnJzxR+smzklMPf3dlJ6Lrnmt9y53X+I7XlKaqjAtQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPYqcrs5TpdKRbWhHP2/L6fLDYv7MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvOWlweXV6bE9sMHBGdGFFY19iOHZwOHNOaV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVCAnAwQA
VCBXAwQAWNglAwQAWNi7MA0GCSqGSIb3DQEBCwUAA4IBAQBpdhmMjL12wR7yC6D/
niz6MKAW7WY0n13G09fqBQF/6jM7UqrfuWVInyy2yhPRFnWx+rYgxT+a8i4EvkGN
F49q6X76hAwx2P4FV2UwAmmJc3mzwSq+es5ohJnS3WMCdoMCZ+p8vIjxG4lLWQ0m
K69cxmU70l9rce87SeJdleFhs5qyarMjp4CUAsheZqRKryTRVPmJgdn3hwf4wA9T
nc3rma+K3cgcMd2DYL7yOquWZ42m47PzBzybl1872U+qykdLswnzx6oazC874zyy
CDSfB7qW4VVFrnoZLp4TI35a5Vrt7WFxQXzwkh0qF1FnGGlYc3ZJPJ1aQCSnxg1j
Bmpj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org