Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B9rwmtT63XS7-lLC36JMSxihSz4.roa
File: B9rwmtT63XS7-lLC36JMSxihSz4.roa (raw, json)
Hash identifier: Qo/BeWVkKU20iSYSHE2ovwLMa5FLp4K7iyGsT+Rwkaw=
Subject key identifier: 07:DA:F0:9A:D4:FA:DD:74:BB:FA:52:C2:DF:A2:4C:4B:18:A1:4B:3E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0182F7C95C5E5AE74BCDC7FD5B8B2CF00C8C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B9rwmtT63XS7-lLC36JMSxihSz4.roa
Signing time: Thu 01 Sep 2022 06:42:24 +0000
ROA not before: Thu 01 Sep 2022 06:42:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 88.216.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f7:c9:5c:5e:5a:e7:4b:cd:c7:fd:5b:8b:2c:f0:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 1 06:42:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07daf09ad4fadd74bbfa52c2dfa24c4b18a14b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:ea:f6:ea:bd:62:9d:82:58:b7:03:cd:57:
f7:c6:ed:db:a5:41:fd:d1:c1:08:c8:4e:39:7e:16:
42:ce:61:1c:ba:35:1f:f3:66:42:51:a9:b9:6f:4e:
d3:fe:99:c0:16:3f:5e:76:b9:43:c6:5b:e7:ea:a0:
e0:2b:55:cd:4c:91:58:4f:8a:a9:1f:40:69:45:c5:
d3:7d:7f:e7:93:87:2d:14:30:1a:66:47:60:ee:7f:
a0:ec:b3:aa:2c:b2:d1:43:db:b0:96:c2:2c:fd:83:
46:02:83:0b:9d:93:2e:bc:7e:a0:99:ba:98:ad:3e:
e3:d1:2b:4d:3f:1a:0e:01:4b:e5:ac:8e:fc:8a:49:
52:9b:a1:f7:98:f9:1b:91:ed:45:0e:b0:ca:72:a1:
3d:5f:ed:6f:91:e5:09:08:6d:7f:2e:81:f1:96:35:
92:63:f8:16:c2:ad:6d:e4:d3:c3:23:8d:ed:b7:3a:
8c:1d:9c:d3:fc:de:c0:97:0e:25:01:32:45:09:aa:
7d:cd:cb:5c:5d:99:89:4c:01:45:8a:bd:4a:08:44:
38:f0:44:c7:4a:94:49:cd:62:95:82:75:f2:e4:1d:
e4:76:e6:79:85:72:14:0d:4c:ce:36:1d:1c:8d:de:
5d:f8:43:d0:20:5d:72:43:79:eb:c5:bd:bd:d6:8f:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DA:F0:9A:D4:FA:DD:74:BB:FA:52:C2:DF:A2:4C:4B:18:A1:4B:3E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B9rwmtT63XS7-lLC36JMSxihSz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.96.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7a:d3:21:0e:06:50:07:c0:1a:b2:0e:ec:00:2e:5b:1a:e1:
de:49:c1:c4:f5:2f:18:16:f4:68:50:d0:54:c1:02:5c:4d:8c:
dd:5e:90:8b:f4:e8:61:7a:4e:0b:51:0b:55:ee:aa:dd:f6:33:
43:42:6f:7b:64:25:a4:c2:71:8c:3f:5e:6a:70:00:1b:7a:37:
55:12:38:2f:83:19:60:69:80:d1:8f:90:db:fb:ec:93:ad:28:
ca:0f:4b:d7:95:2c:5a:1b:0b:f0:04:b4:b4:06:0c:e7:2b:3a:
fe:23:c4:d6:1f:6a:22:5a:5c:02:0f:69:83:47:a1:a0:2a:39:
d5:24:b5:ed:31:3f:35:17:4b:af:ed:b5:7d:07:a4:e8:08:d1:
21:17:ee:f2:53:31:51:f5:df:3a:b7:0a:90:de:ad:c7:f4:0d:
5f:74:97:7b:f4:4e:63:ef:be:4f:74:f6:ea:08:12:33:6d:d4:
2d:b1:d4:9c:c8:ed:22:03:5a:97:67:4f:ca:8d:dc:8d:bd:c3:
7a:39:0b:5a:ab:42:59:c8:2c:0a:64:dd:75:24:2e:08:95:81:
6f:88:1d:7e:3c:e9:c0:3d:d3:ec:c8:4c:a0:7a:ed:96:7e:68:
c1:22:41:9f:e7:7c:29:86:fa:82:52:9a:9e:8f:c0:d0:d4:ea:
92:cc:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org