Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D77viR6MB6xh0gAMokplb_x5qd0.roa
File: D77viR6MB6xh0gAMokplb_x5qd0.roa (raw, json)
Hash identifier: 7YEAmvpva8sTsVYNnjhYeP8IYy6O9+k5CsA7+VP1Apg=
Subject key identifier: 0F:BE:EF:89:1E:8C:07:AC:61:D2:00:0C:A2:4A:65:6F:FC:79:A9:DD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184657B3271B2314EBE67FAA06A204D1B75
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D77viR6MB6xh0gAMokplb_x5qd0.roa
Signing time: Fri 11 Nov 2022 06:58:03 +0000
ROA not before: Fri 11 Nov 2022 06:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 88.216.188.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
88.216.91.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:7b:32:71:b2:31:4e:be:67:fa:a0:6a:20:4d:1b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 11 06:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fbeef891e8c07ac61d2000ca24a656ffc79a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:53:f3:64:4f:86:55:94:45:9a:3f:e3:4c:
28:1a:c2:48:de:9a:1e:b0:61:81:63:f4:bb:97:5e:
f8:3b:c7:e3:59:66:89:ad:96:dc:99:37:3a:e8:be:
3b:94:81:d3:21:1d:43:23:10:07:99:5f:7a:58:db:
b6:71:42:ea:e4:d4:e6:93:ce:a1:bb:72:6a:62:c9:
68:15:b5:22:0b:2d:1e:5f:36:74:c0:49:53:db:5a:
5e:44:96:a0:17:92:70:f2:53:d5:ac:cd:84:7a:88:
eb:08:ea:fe:53:fe:aa:03:d5:f4:64:0c:de:2e:df:
b6:1f:83:87:7f:a6:c3:ba:f6:23:6e:36:e1:ee:10:
ce:e4:f7:28:82:79:56:f9:c7:48:5b:72:2c:74:96:
7c:34:e1:f5:2c:0e:60:91:e0:96:71:0f:01:06:d4:
8a:b2:69:5c:ed:2e:f1:69:9d:69:fa:62:c7:66:21:
6e:c6:19:e9:9e:ec:da:9a:cf:e0:8f:a6:60:e7:66:
8e:96:08:06:8a:7d:99:cc:9c:ca:c7:24:2e:f9:9d:
92:c0:31:6c:d4:b8:a6:76:d6:08:13:63:69:55:2c:
71:a9:3f:57:07:c0:89:29:76:2e:9a:2d:e9:05:44:
c1:33:97:f1:14:10:0c:b8:ef:66:4d:14:86:f6:65:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:EF:89:1E:8C:07:AC:61:D2:00:0C:A2:4A:65:6F:FC:79:A9:DD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D77viR6MB6xh0gAMokplb_x5qd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0/24
84.32.15.0/24
84.32.42.0/24
84.32.44.0/24
84.32.46.0/23
84.32.49.0/24
84.32.60.0/24
84.32.63.0/24
84.32.65.0-84.32.66.255
84.32.68.0/24
84.32.86.0/24
84.32.90.0/24
84.32.92.0/24
84.32.94.0/24
84.32.227.0/24
84.32.255.0/24
88.216.2.0/24
88.216.35.0/24
88.216.40.0/24
88.216.91.0/24
88.216.102.0/24
88.216.188.0/24
88.216.190.0/24
88.216.198.0/24
Signature Algorithm: sha256WithRSAEncryption
90:11:6f:3c:8b:36:20:8f:ea:07:6d:dd:40:a3:ae:ab:f4:0b:
5c:1c:9e:be:c5:bd:62:8f:b7:a4:97:a9:fd:57:55:cd:0c:1d:
74:ea:9a:22:df:46:a4:f6:7d:77:61:82:46:31:2b:94:d7:16:
8d:bb:f2:9a:d7:c1:c9:fb:bb:36:06:56:c3:b7:ee:27:33:95:
1a:9a:88:57:ec:49:d0:b5:02:d3:ad:b9:72:d2:70:c0:1a:68:
f4:e1:31:4c:60:7f:05:36:62:a9:17:2a:72:2c:68:5b:5e:22:
c6:50:31:5d:02:07:9d:74:e6:99:9c:79:e4:30:eb:7f:dc:1a:
c1:5a:28:25:b1:48:f0:4b:cc:d5:6e:68:e4:91:b7:cf:db:c5:
3f:a4:52:fa:58:b8:48:da:6d:3c:33:3f:c5:6d:29:16:33:99:
f5:9e:14:c5:9a:f4:71:98:b7:26:48:80:88:9b:57:fb:31:66:
77:2e:d7:f5:71:ca:d9:eb:7e:a3:25:4d:ee:96:6c:96:08:35:
bf:d6:60:39:71:ab:f9:07:0e:da:19:5a:f6:20:73:4c:b5:4a:
2d:02:13:9a:8f:4a:58:42:e4:8a:1b:2a:92:eb:c2:24:d6:c3:
ef:32:9f:b5:29:c1:68:69:a5:4a:19:fa:71:64:84:4a:21:f6:
86:37:7c:a2
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYRlezJxsjFOvmf6oGogTRt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTExMDY1ODAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmJlZWY4OTFlOGMwN2FjNjFkMjAwMGNhMjRhNjU2ZmZjNzlhOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08xT82RPhlWURZo/40woGsJI3poe
sGGBY/S7l174O8fjWWaJrZbcmTc66L47lIHTIR1DIxAHmV96WNu2cULq5NTmk86h
u3JqYsloFbUiCy0eXzZ0wElT21peRJagF5Jw8lPVrM2EeojrCOr+U/6qA9X0ZAze
Lt+2H4OHf6bDuvYjbjbh7hDO5PcognlW+cdIW3IsdJZ8NOH1LA5gkeCWcQ8BBtSK
smlc7S7xaZ1p+mLHZiFuxhnpnuzams/gj6Zg52aOlggGin2ZzJzKxyQu+Z2SwDFs
1LimdtYIE2NpVSxxqT9XB8CJKXYumi3pBUTBM5fxFBAMuO9mTRSG9mVOBwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFA++74kejAesYdIADKJKZW/8eandMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvRDc3dmlSNk1CNnhoMGdBTW9rcGxiX3g1cWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBABU
IAcDBABUIA8DBABUICoDBABUICwDBAFUIC4DBABUIDEDBABUIDwDBABUID8wDAME
AFQgQQMEAFQgQgMEAFQgRAMEAFQgVgMEAFQgWgMEAFQgXAMEAFQgXgMEAFQg4wME
AFQg/wMEAFjYAgMEAFjYIwMEAFjYKAMEAFjYWwMEAFjYZgMEAFjYvAMEAFjYvgME
AFjYxjANBgkqhkiG9w0BAQsFAAOCAQEAkBFvPIs2II/qB23dQKOuq/QLXByevsW9
Yo+3pJep/VdVzQwddOqaIt9GpPZ9d2GCRjErlNcWjbvymtfByfu7NgZWw7fuJzOV
GpqIV+xJ0LUC0625ctJwwBpo9OExTGB/BTZiqRcqcixoW14ixlAxXQIHnXTmmZx5
5DDrf9wawVooJbFI8EvM1W5o5JG3z9vFP6RS+li4SNptPDM/xW0pFjOZ9Z4UxZr0
cZi3JkiAiJtX+zFmdy7X9XHK2et+oyVN7pZslgg1v9ZgOXGr+QcO2hla9iBzTLVK
LQITmo9KWELkihsqkuvCJNbD7zKftSnBaGmlShn6cWSESiH2hjd8og==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org