Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bb-__U-5nHqCKAfIhmh59LS9JTM.roa
File: Bb-__U-5nHqCKAfIhmh59LS9JTM.roa (raw, json)
Hash identifier: dMckG5yBV3FqFkqdzNP8EiiRxX0qitRjgtcTgg6Jw1A=
Subject key identifier: 05:BF:BF:FD:4F:B9:9C:7A:82:28:07:C8:86:68:79:F4:B4:BD:25:33
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01835EB9601B92AEDEAF6CAD90205CF8A25F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bb-__U-5nHqCKAfIhmh59LS9JTM.roa
Signing time: Wed 21 Sep 2022 06:25:50 +0000
ROA not before: Wed 21 Sep 2022 06:25:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 88.216.210.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.128.0/21 maxlen: 24
84.32.50.0/23 maxlen: 24
88.216.0.0/22 maxlen: 24
88.216.224.0/21 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.240.0/21 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.248.0/21 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5e:b9:60:1b:92:ae:de:af:6c:ad:90:20:5c:f8:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 21 06:25:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05bfbffd4fb99c7a822807c8866879f4b4bd2533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:57:45:09:85:46:51:68:66:32:72:c1:03:
61:64:b3:83:8e:2b:77:c5:d6:5d:8c:71:0d:f2:d5:
93:eb:8e:63:12:da:e6:ad:44:80:bd:3e:48:16:cf:
85:a7:e9:8a:78:62:ef:de:a5:5a:20:de:b8:96:f1:
4f:be:bf:c5:01:c6:01:35:fd:eb:fd:1a:b7:15:c2:
fc:8e:83:b4:76:b0:98:e4:a2:78:c6:c9:9f:06:00:
ae:c4:74:d8:1b:1a:e1:65:06:b5:0a:3c:e1:a2:97:
26:7a:89:b2:1a:6a:32:26:1a:23:3d:23:ee:3c:cb:
3f:cc:46:0c:88:30:c0:4d:ea:85:ee:4a:21:c2:b7:
55:31:56:17:ee:bc:2f:4f:61:4a:75:be:ed:42:0b:
3e:fe:e7:0c:87:a8:99:1d:b9:d4:9e:4b:3c:f9:64:
57:2e:ab:cb:a7:0b:a2:b7:38:22:1a:93:d0:b5:1d:
04:82:d5:ad:31:86:b9:69:88:83:62:f5:2c:d1:78:
02:43:ac:1d:d5:30:0b:8e:6d:b5:d3:b2:65:ec:4d:
55:5f:7f:9e:40:78:35:e1:b0:84:f9:57:dd:9d:d7:
2e:d1:64:3a:a4:b1:5b:76:d1:96:ba:cf:b7:9d:4d:
13:30:a5:f0:ea:72:a2:f3:e5:f0:1d:d9:39:ca:37:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:BF:FD:4F:B9:9C:7A:82:28:07:C8:86:68:79:F4:B4:BD:25:33
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bb-__U-5nHqCKAfIhmh59LS9JTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.50.0/23
88.216.0.0/22
88.216.19.0-88.216.23.255
88.216.32.0/24
88.216.46.0/24
88.216.128.0/21
88.216.209.0-88.216.211.255
88.216.224.0/21
88.216.240.0/20
Signature Algorithm: sha256WithRSAEncryption
84:0e:5a:a4:5d:b7:f4:ae:db:e1:6b:e1:96:e3:37:26:2f:7a:
12:99:87:9b:5f:d0:9a:74:2f:2b:a9:b8:aa:fb:88:2e:51:bd:
c9:16:df:20:29:fc:e1:50:03:5d:04:ba:ca:87:c4:f0:fd:9a:
82:55:6a:62:37:a6:31:8b:00:76:97:2b:5f:44:f6:7f:e5:21:
ec:ea:d6:50:4b:ed:89:17:e8:d2:54:47:15:a5:a1:16:bb:8c:
70:32:b2:c2:2f:08:87:46:ab:d7:e3:79:d8:86:af:dd:64:db:
8e:69:24:1b:be:7e:1a:da:e3:71:73:34:ff:84:a6:10:18:a8:
87:02:d5:46:f1:dd:d5:61:bf:3a:87:b2:f7:d7:cf:18:00:6a:
dc:11:6b:c4:16:c3:da:c1:c3:12:57:e4:9c:d5:76:22:fc:43:
6a:fe:6b:5e:c6:a7:44:da:a0:81:6b:43:4c:3a:74:30:3e:6e:
b5:61:30:e7:5d:7f:d0:ae:e2:9a:44:76:76:d7:38:30:56:cc:
fa:3a:f6:af:0e:f9:f7:4e:28:d4:e9:86:51:66:36:93:38:b8:
d6:8d:84:df:55:29:6d:c7:55:d9:b5:a8:a7:1e:ae:a2:53:5e:
f9:11:d0:54:98:fc:5f:62:d2:55:29:d5:96:79:b3:ea:ff:a9:
6f:8e:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org