Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CoaM6bpVH6TK99ADqxVo3Z64Dig.roa
File: CoaM6bpVH6TK99ADqxVo3Z64Dig.roa (raw, json)
Hash identifier: u8pwoL0r626t25nUSsywDSNPZijswXWgZQdsEbcThhA=
Subject key identifier: 0A:86:8C:E9:BA:55:1F:A4:CA:F7:D0:03:AB:15:68:DD:9E:B8:0E:28
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: C4D98C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CoaM6bpVH6TK99ADqxVo3Z64Dig.roa
Signing time: Mon 18 Apr 2022 06:57:37 +0000
ROA not before: Mon 18 Apr 2022 06:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.180.0/22 maxlen: 24
84.32.84.0/22 maxlen: 24
88.216.188.0/22 maxlen: 24
84.32.82.0/23 maxlen: 24
88.216.196.0/22 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
84.32.4.0/22 maxlen: 24
84.32.8.0/22 maxlen: 24
84.32.24.0/21 maxlen: 24
84.32.40.0/21 maxlen: 24
88.216.0.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.20.0/22 maxlen: 22
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12900748 (0xc4d98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 18 06:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a868ce9ba551fa4caf7d003ab1568dd9eb80e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:f7:e2:f4:35:89:96:8e:13:9b:9a:67:04:
4d:90:5d:f6:48:de:8d:42:50:22:32:4a:b5:09:8a:
81:43:c9:00:8d:b9:ce:7f:96:61:ec:3d:a5:f4:e2:
be:63:b1:da:e6:bc:a5:ff:27:82:19:8b:8f:35:cd:
d1:2c:d4:44:ec:a2:84:f1:7f:2d:9d:11:1f:80:8e:
52:7c:f8:b2:1c:d0:9b:fb:3a:ff:fd:fd:9d:5a:af:
5a:77:fc:62:ea:86:1e:37:56:4b:df:93:56:9f:0b:
ec:d1:ba:84:f5:4f:a0:dd:de:48:49:a4:91:fc:f4:
e9:3d:3b:99:3b:c6:2f:6e:5f:a2:ac:b8:e8:e6:f6:
12:4d:07:63:fd:ac:03:7d:e5:dd:82:db:02:0a:e1:
23:5f:95:e4:0d:94:db:7f:03:cc:2d:06:f9:a6:7a:
c4:e2:70:27:f1:0a:3e:f9:1f:85:2a:98:6b:aa:f5:
f2:da:33:0b:83:b3:ea:38:9f:5a:91:fe:ab:06:3b:
92:7a:47:20:0b:a5:05:d6:f9:b4:36:3f:d1:64:15:
35:98:09:6a:97:49:c0:c5:91:ed:5a:ea:1e:a2:aa:
b2:d2:2c:32:73:be:a7:2f:8f:d2:c6:83:c1:db:40:
63:83:b2:4b:13:15:8a:70:73:ad:87:f1:c1:26:af:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:86:8C:E9:BA:55:1F:A4:CA:F7:D0:03:AB:15:68:DD:9E:B8:0E:28
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CoaM6bpVH6TK99ADqxVo3Z64Dig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0-84.32.11.255
84.32.24.0/21
84.32.40.0/21
84.32.82.0-84.32.87.255
88.216.0.0/22
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/24
88.216.46.0/23
88.216.180.0/22
88.216.188.0/22
88.216.196.0/22
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
5a:7b:fe:4f:85:aa:34:63:eb:ba:6b:d8:ca:88:1a:f4:94:e5:
9d:70:b6:24:a2:8a:e6:6c:aa:02:04:a1:55:5c:49:c1:34:89:
67:9c:8c:0b:b8:81:84:bc:95:d5:fb:3c:00:41:71:08:a3:a6:
73:57:59:ff:20:ad:c4:3b:c6:6f:74:fa:89:6a:5f:55:5b:fd:
29:bf:6d:f8:e6:dc:04:34:3a:99:a4:17:83:a0:e7:ce:0b:2b:
15:6d:86:9a:cd:14:da:95:26:96:7d:6d:ef:0c:3a:d4:af:9c:
c7:ba:37:ad:0f:63:8a:c6:ba:03:09:f4:d9:06:2a:94:d1:5c:
bc:55:8b:c6:c4:10:41:7b:c6:d4:6b:35:f0:e0:b7:eb:db:ed:
e6:ce:c6:01:99:83:3b:48:cf:18:e2:15:2c:53:36:70:1c:fa:
f9:68:78:73:dc:51:4b:48:d9:00:23:8d:2a:35:5c:86:8e:0f:
8b:a7:ad:71:08:9c:23:dc:bf:02:73:37:ce:d3:e4:97:9a:0b:
a8:81:0f:51:22:da:e2:30:fc:c4:fd:54:e2:0f:79:07:96:de:
90:d4:e9:a7:cf:6e:d7:14:38:c7:6e:6a:ba:6e:d2:72:81:7c:
6d:2e:5f:df:4a:9d:77:2d:31:0a:02:5d:a5:20:fc:4b:d9:d8:
3c:30:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org