Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bs-MnxDeuM1c4eX4oVhAAioMKhE.roa
File: Bs-MnxDeuM1c4eX4oVhAAioMKhE.roa (raw, json)
Hash identifier: 4uNxhJBwV00MlWjLrlIYL02B41KWusn1a8RQJoWAsBc=
Subject key identifier: 06:CF:8C:9F:10:DE:B8:CD:5C:E1:E5:F8:A1:58:40:02:2A:0C:2A:11
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184619154485847208977DC038BB31DE0F1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bs-MnxDeuM1c4eX4oVhAAioMKhE.roa
Signing time: Thu 10 Nov 2022 12:43:44 +0000
ROA not before: Thu 10 Nov 2022 12:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 88.216.188.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
88.216.91.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:91:54:48:58:47:20:89:77:dc:03:8b:b3:1d:e0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 10 12:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06cf8c9f10deb8cd5ce1e5f8a15840022a0c2a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:34:ed:65:d9:01:41:ba:3b:3f:4a:82:fc:
51:03:2f:be:30:a7:81:d0:ca:28:a0:f9:9f:08:2e:
39:d5:0c:44:f4:4a:76:6b:3e:19:c7:09:76:c3:da:
f1:60:31:03:68:4a:a6:10:67:e0:80:24:2f:21:d1:
fe:a9:b1:8e:74:a8:7d:8d:cc:9a:fb:a4:a8:02:0d:
c6:65:5c:f1:2b:44:9e:4b:36:e4:81:c6:68:a8:94:
29:8e:8d:69:7e:52:56:3e:c3:c3:a1:6f:8d:03:6e:
9e:82:97:e4:21:0b:a4:fb:8a:4f:31:28:27:3c:57:
9e:fb:d9:ab:5a:c5:be:da:7d:55:29:88:08:0e:f6:
09:6a:3f:74:98:99:3f:fa:1e:79:92:92:3c:8a:f9:
b4:0c:d0:94:c7:07:2e:3e:9a:e5:72:a7:86:56:a6:
b7:f9:ae:c3:83:fd:52:0e:e8:9a:93:b3:71:70:3e:
fc:9a:79:7a:aa:9a:2b:e0:ef:50:24:72:66:21:6a:
29:c3:81:30:1e:35:54:5e:a9:e3:cc:ae:02:90:bb:
35:12:2a:de:3b:92:6c:b5:4c:12:0b:62:1f:45:0c:
97:92:30:86:7c:de:c1:19:73:04:a3:ae:32:8d:4d:
f5:65:e4:99:6c:9d:cd:95:60:8a:4b:8e:14:96:e1:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CF:8C:9F:10:DE:B8:CD:5C:E1:E5:F8:A1:58:40:02:2A:0C:2A:11
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bs-MnxDeuM1c4eX4oVhAAioMKhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0/24
84.32.15.0/24
84.32.42.0/24
84.32.44.0/24
84.32.46.0/23
84.32.49.0/24
84.32.60.0/24
84.32.63.0/24
84.32.65.0-84.32.66.255
84.32.68.0/24
84.32.86.0/24
84.32.90.0/24
84.32.92.0/24
84.32.94.0/24
84.32.255.0/24
88.216.2.0/24
88.216.35.0/24
88.216.40.0/24
88.216.91.0/24
88.216.102.0/24
88.216.188.0/24
88.216.190.0/24
88.216.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f0:21:9e:69:d7:33:71:39:40:1a:f7:59:85:38:bc:48:84:
0f:05:91:e4:da:7a:0f:48:de:c9:27:ad:df:73:b4:dc:fc:2d:
2f:1a:46:ff:23:72:4e:eb:13:4d:f8:2f:31:e4:11:97:3c:76:
2f:32:61:ad:61:31:ff:1c:e9:75:d2:0b:53:64:13:86:80:c9:
12:1f:10:01:c8:8c:b1:15:8f:75:5a:cb:c1:7b:90:e2:bc:73:
4b:07:b4:18:06:3a:4b:ab:16:9b:3f:5c:a8:d4:d7:f6:19:9d:
76:15:36:9a:1b:ad:f8:56:4b:cf:0b:02:dd:0d:45:57:ec:2f:
69:5c:b7:9d:cc:90:50:50:2f:3d:5c:fc:94:8e:51:83:2e:1e:
66:74:c8:07:83:21:5f:f8:0b:1d:1c:f5:06:98:6c:ad:fe:f6:
1b:9f:00:61:ee:c0:e4:87:f4:ff:a0:73:ba:4d:12:a6:52:46:
a6:63:d7:24:ee:72:21:59:1e:f6:80:ea:64:74:f2:67:8d:ad:
5f:3a:10:a1:05:ef:62:c5:9b:af:16:02:43:61:11:60:4e:63:
8f:04:79:8c:7b:5e:ec:12:2f:2a:50:0e:fc:5c:d6:cd:9a:a0:
ed:72:88:fe:e0:3c:a5:79:07:f9:56:24:0d:38:b5:de:9b:3d:
14:66:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:28 2023 by rpki-client on console-ams.rpki-client.org