Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/E6ub5bWUc8nHqaIwawOiHXiE9Vs.roa
File: E6ub5bWUc8nHqaIwawOiHXiE9Vs.roa (raw, json)
Hash identifier: JqLSo5mNHz+Jdse46OvnEbYtr3SjK8jRVl0VJIksEgg=
Subject key identifier: 13:AB:9B:E5:B5:94:73:C9:C7:A9:A2:30:6B:03:A2:1D:78:84:F5:5B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183ABD60F62737C4239326E66DB29104193
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/E6ub5bWUc8nHqaIwawOiHXiE9Vs.roa
Signing time: Thu 06 Oct 2022 05:47:56 +0000
ROA not before: Thu 06 Oct 2022 05:47:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 88.216.184.0/23 maxlen: 24
88.216.186.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:d6:0f:62:73:7c:42:39:32:6e:66:db:29:10:41:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 6 05:47:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13ab9be5b59473c9c7a9a2306b03a21d7884f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:52:22:b1:8b:f1:ce:2d:5e:d8:fc:fc:3d:
29:92:fa:10:84:0e:c4:9b:4a:b5:5d:05:b8:89:80:
af:24:2c:8d:67:42:57:e1:7c:a5:ed:18:2a:d1:2b:
72:64:67:29:00:b5:3e:c3:1d:31:b7:44:86:dc:85:
4c:34:62:e7:ab:96:7f:91:7c:a1:4e:87:6d:f6:17:
cc:a1:1e:a8:94:ab:36:ee:d1:7c:a2:44:da:db:fa:
83:3c:d2:f5:2a:1a:11:63:43:88:55:fb:82:6f:0f:
41:8e:94:81:f0:1f:29:49:ef:d9:72:a9:e9:b6:d4:
79:22:c5:c5:8e:2c:cc:f0:ce:12:19:09:73:ce:2e:
06:29:b2:2a:e3:ca:56:e8:c2:08:47:a0:0f:4f:7c:
88:b3:c1:d9:93:0c:27:64:ce:4e:72:29:ca:6e:6a:
4b:bf:26:1d:68:93:51:c9:42:e2:6c:ab:e6:77:8b:
79:82:c8:ca:b0:1a:ee:3d:e7:08:1c:58:39:77:e7:
68:f1:68:1d:cf:d5:c0:7b:9d:5c:12:23:bb:ab:98:
0a:8d:15:e4:62:ae:7a:5f:30:af:16:bc:41:72:d5:
8a:a9:c1:a8:64:82:6a:fa:d7:1d:e9:b3:ea:b1:1f:
bf:76:ec:ac:9d:90:45:5d:a1:af:4e:68:11:70:ea:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:9B:E5:B5:94:73:C9:C7:A9:A2:30:6B:03:A2:1D:78:84:F5:5B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/E6ub5bWUc8nHqaIwawOiHXiE9Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.92.0/22
88.216.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:dd:33:d5:2e:d5:03:54:f6:91:73:bf:e5:96:fa:5b:b9:49:
e8:61:9f:e6:7c:17:76:b4:aa:cd:24:4f:48:ff:5e:ec:62:1b:
81:cb:ed:05:5b:6d:fe:60:28:a5:74:ee:d2:cd:32:91:77:6c:
5c:82:32:25:72:53:27:3a:7d:ef:c5:d7:f4:7c:15:0e:62:01:
46:54:93:18:b5:cb:a8:94:38:c4:f5:39:9c:41:66:be:87:37:
b9:80:11:f9:89:b2:b7:d3:5c:5f:61:3b:5c:47:f3:c3:47:d8:
ae:5e:f6:a3:aa:a3:4b:7f:90:26:0e:ff:bf:d7:cf:d6:ad:72:
4d:ed:10:fb:1d:7d:13:e9:7d:48:7a:9d:b2:2b:2f:05:49:39:
12:f6:12:e6:87:4e:9a:ba:a3:e0:7a:d4:9b:63:e1:42:98:c0:
37:8f:25:4f:37:3a:d8:af:aa:18:dd:3c:97:8b:e1:94:b4:ee:
06:ce:72:99:5d:19:67:91:ba:2f:bf:95:59:d3:64:69:f8:7e:
f1:0d:d8:ff:5c:42:bd:54:b8:7c:da:cf:f4:5d:b3:1d:0f:85:
43:99:9b:1d:f3:50:eb:cd:ec:00:df:71:0b:ea:f3:f4:c8:24:
44:8c:45:17:30:6e:c3:c4:d8:cd:98:53:cb:8d:98:ac:c0:6d:
a2:21:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org