Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DBoGLGp-QQaOSyCbFcZ16JftzeY.roa
File: DBoGLGp-QQaOSyCbFcZ16JftzeY.roa (raw, json)
Hash identifier: NtH99BQiLhpB5mClg8C4nJLjMEGeuFLm0bENyPvLSZw=
Subject key identifier: 0C:1A:06:2C:6A:7E:41:06:8E:4B:20:9B:15:C6:75:E8:97:ED:CD:E6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183C848C7F20688B0E2565F0A3DD814E4A6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DBoGLGp-QQaOSyCbFcZ16JftzeY.roa
Signing time: Tue 11 Oct 2022 18:22:36 +0000
ROA not before: Tue 11 Oct 2022 18:22:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 84.32.56.0/24 maxlen: 24
88.216.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:48:c7:f2:06:88:b0:e2:56:5f:0a:3d:d8:14:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 11 18:22:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c1a062c6a7e41068e4b209b15c675e897edcde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:a1:e5:63:c2:d5:52:2a:73:65:b6:85:27:
42:05:95:48:2d:54:e9:16:7a:83:40:5b:52:91:02:
2d:87:8e:ab:e5:ce:b1:58:7e:92:27:cf:b0:d8:bb:
58:42:b2:cc:49:36:3d:82:ee:3c:ab:37:9f:8a:d4:
e1:79:33:7f:55:e6:c5:79:6a:54:2a:82:73:6e:83:
92:d4:77:03:39:5a:c7:8f:36:31:24:00:23:09:9f:
74:87:cb:4c:22:2d:1a:ab:d2:e5:fe:d9:f0:a3:a7:
f2:1e:4a:48:9c:2d:fb:02:51:16:78:90:09:b4:ac:
ee:50:98:86:d8:7b:24:c2:af:72:f1:75:4f:21:bf:
36:51:e1:ec:79:86:68:4d:a3:83:39:eb:a7:bd:be:
da:3f:01:54:e4:cc:4b:46:fe:53:e5:41:8a:18:75:
45:2c:38:f1:e3:7a:e9:d5:ed:cf:a1:23:6b:61:33:
18:da:31:9e:d1:cc:82:42:29:93:09:ff:24:3a:69:
e0:b3:25:b5:c5:5d:9d:73:c4:2e:26:d7:d9:21:54:
57:1a:3a:15:a9:d5:e6:94:c5:a7:d4:0e:7a:a4:ec:
6b:02:65:ec:9b:bd:2c:01:b9:47:c0:95:d6:07:ab:
49:df:1a:ef:b1:12:cf:a9:06:45:eb:f0:28:88:0f:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:06:2C:6A:7E:41:06:8E:4B:20:9B:15:C6:75:E8:97:ED:CD:E6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DBoGLGp-QQaOSyCbFcZ16JftzeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.56.0/24
88.216.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:08:0b:19:ff:85:66:b9:85:bc:ad:3e:27:46:91:f3:26:72:
e1:c0:67:a3:6d:e7:33:bf:fd:ad:05:cf:47:45:bb:e1:9b:43:
87:b3:51:94:51:d6:15:af:73:55:85:8f:bf:d5:c4:09:6c:7a:
31:22:da:e1:8b:ce:5a:58:57:7b:d5:0b:a9:0b:b3:38:b2:e3:
cb:d2:a4:12:63:e3:68:45:32:d0:1c:1a:97:fd:c0:5f:17:0d:
f3:45:ab:68:3c:f1:f3:cf:0e:ee:6c:fe:3e:53:73:a0:89:51:
9c:64:95:ff:fd:61:18:33:82:6a:f8:81:1d:bd:9b:3f:76:68:
e5:41:7c:53:54:ce:5c:1e:5d:77:c0:83:bc:34:86:56:13:d8:
35:60:c3:53:f5:2b:ac:86:66:3b:15:11:b4:29:60:59:9f:2d:
22:9b:4f:84:97:81:e3:3e:14:ac:79:bb:ab:0f:b7:74:80:9d:
19:e1:27:8d:95:87:1c:2a:91:19:c9:b4:0a:75:2e:57:e1:8d:
1a:88:9e:1d:5b:f0:1d:a8:1b:0f:74:35:b8:af:24:14:7d:08:
25:d4:c3:16:e4:5c:d8:26:af:24:dd:4e:8f:98:f9:af:00:02:
61:c1:a7:4f:37:ea:ae:8b:c9:28:18:10:16:27:b9:79:d8:7c:
67:24:51:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPISMfyBoiw4lZfCj3YFOSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMDExMTgyMjM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzFhMDYyYzZhN2U0MTA2OGU0YjIwOWIxNWM2NzVlODk3ZWRjZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYSh5WPC1VIqc2W2hSdCBZVILVTp
FnqDQFtSkQIth46r5c6xWH6SJ8+w2LtYQrLMSTY9gu48qzefitTheTN/VebFeWpU
KoJzboOS1HcDOVrHjzYxJAAjCZ90h8tMIi0aq9Ll/tnwo6fyHkpInC37AlEWeJAJ
tKzuUJiG2Hskwq9y8XVPIb82UeHseYZoTaODOeunvb7aPwFU5MxLRv5T5UGKGHVF
LDjx43rp1e3PoSNrYTMY2jGe0cyCQimTCf8kOmngsyW1xV2dc8QuJtfZIVRXGjoV
qdXmlMWn1A56pOxrAmXsm70sAblHwJXWB6tJ3xrvsRLPqQZF6/AoiA8nWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAwaBixqfkEGjksgmxXGdeiX7c3mMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvREJvR0xHcC1RUWFPU3lDYkZjWjE2SmZ0emVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCA4AwQA
WNhhMA0GCSqGSIb3DQEBCwUAA4IBAQB8CAsZ/4VmuYW8rT4nRpHzJnLhwGejbecz
v/2tBc9HRbvhm0OHs1GUUdYVr3NVhY+/1cQJbHoxItrhi85aWFd71QupC7M4suPL
0qQSY+NoRTLQHBqX/cBfFw3zRatoPPHzzw7ubP4+U3OgiVGcZJX//WEYM4Jq+IEd
vZs/dmjlQXxTVM5cHl13wIO8NIZWE9g1YMNT9SushmY7FRG0KWBZny0im0+El4Hj
PhSseburD7d0gJ0Z4SeNlYccKpEZybQKdS5X4Y0aiJ4dW/AdqBsPdDW4ryQUfQgl
1MMW5FzYJq8k3U6PmPmvAAJhwadPN+qui8koGBAWJ7l52HxnJFFm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org