Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ELUe5vtKNmCuVr_EhINlQOXX7OU.roa
File: ELUe5vtKNmCuVr_EhINlQOXX7OU.roa (raw, json)
Hash identifier: 7sSt5rftnbz9f51ozXswEUPabgGVJM0qi4BMOFfGAzQ=
Subject key identifier: 10:B5:1E:E6:FB:4A:36:60:AE:56:BF:C4:84:83:65:40:E5:D7:EC:E5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 9C3A91
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ELUe5vtKNmCuVr_EhINlQOXX7OU.roa
Signing time: Fri 08 Apr 2022 16:22:31 +0000
ROA not before: Fri 08 Apr 2022 16:22:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 88.216.186.0/23 maxlen: 24
88.216.184.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.216.0/21 maxlen: 24
88.216.34.0/23 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10238609 (0x9c3a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 8 16:22:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10b51ee6fb4a3660ae56bfc484836540e5d7ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b4:91:c6:28:14:ce:6b:25:01:49:08:47:03:
41:e5:c1:24:7a:6b:8b:28:23:e8:e0:30:ea:c2:5f:
5f:c0:cd:9b:02:79:a3:6f:88:f8:0d:14:62:73:7b:
66:f5:86:c7:64:b4:e6:fd:96:80:74:fc:bb:03:4a:
d1:06:41:5c:6c:26:78:cb:b6:9c:aa:19:33:09:36:
32:a0:e9:bb:90:c1:5f:e3:3d:80:c6:bf:0a:76:84:
45:82:0d:38:64:db:29:22:a4:8c:d0:7f:0f:dd:68:
fb:40:15:7f:06:0f:60:a5:5d:ec:cb:75:8f:e1:a6:
d8:ca:76:92:b9:2c:d9:2d:ab:81:a9:33:4d:c5:f6:
40:60:13:a2:64:19:b2:32:53:85:3d:0c:c8:06:c0:
70:d2:4c:07:4f:a9:c4:9f:54:83:e5:47:7c:f9:de:
3f:dc:ed:3a:ed:3d:dd:ae:50:d5:bb:22:41:d3:5f:
aa:ca:c3:54:bf:e7:7e:b9:8b:4a:ad:11:df:bc:39:
dc:48:37:e4:e7:70:eb:10:17:01:b2:5b:fa:cc:2e:
e2:5f:56:d5:c9:d2:58:3f:b1:29:49:8d:c5:c3:ce:
1b:b6:a1:ec:de:e0:fb:60:33:ff:ff:31:32:85:24:
7b:5e:48:d0:94:9a:ff:f9:da:6d:fc:25:d5:95:28:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B5:1E:E6:FB:4A:36:60:AE:56:BF:C4:84:83:65:40:E5:D7:EC:E5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ELUe5vtKNmCuVr_EhINlQOXX7OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/23
88.216.44.0/23
88.216.92.0/22
88.216.184.0/22
88.216.216.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:36:5f:d2:1f:6b:f1:cf:1d:80:97:bf:3a:f1:6d:b5:d8:4e:
36:90:c9:59:96:b1:e0:e0:18:88:4c:2a:eb:56:c5:4d:54:99:
30:94:c6:bf:d4:c4:f8:d5:31:19:ec:a7:d4:d3:10:d7:03:05:
0f:15:3e:fe:9e:87:f5:96:71:ee:05:1f:d2:54:30:56:7f:8b:
7c:41:da:a3:15:a9:89:f6:87:1b:a2:a9:8e:9b:02:f7:e5:f2:
7c:a4:06:d6:5b:30:c9:64:36:cc:65:51:10:2a:24:8c:9e:7c:
e2:b7:90:50:05:4f:e5:f7:63:77:12:cc:5c:1a:32:24:e1:20:
ae:c0:66:6c:95:9c:a6:16:eb:f9:c5:a5:37:02:4e:96:bf:87:
fb:61:30:ab:2a:46:4f:af:fc:d3:bd:0e:71:7c:53:8d:2a:69:
39:33:d2:3c:e0:5d:b3:de:c2:ab:b7:dc:ac:83:84:e7:c1:0a:
ae:f5:b7:7a:eb:08:16:12:75:4d:7a:23:0b:66:e5:ca:16:33:
6e:00:61:46:5c:4a:b1:7b:48:27:4c:98:81:60:d0:82:12:e3:
19:52:c6:4d:5e:43:5f:11:0f:cc:d3:58:e7:fc:0b:a9:ad:be:
5e:b7:34:be:e3:7f:4f:81:6a:9c:79:1c:69:0b:86:4b:e0:9e:
bb:aa:72:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org