Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FI3NU3NTcp_DdQ4TzJfSVW9r4JI.roa
File: FI3NU3NTcp_DdQ4TzJfSVW9r4JI.roa (raw, json)
Hash identifier: +HaeRLb2os3or0yyYVVPp2172SWl5ZocU59CUW+UQZs=
Subject key identifier: 14:8D:CD:53:73:53:72:9F:C3:75:0E:13:CC:97:D2:55:6F:6B:E0:92
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018392755D38EFAA66404F11E2FDDB6EAD11
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FI3NU3NTcp_DdQ4TzJfSVW9r4JI.roa
Signing time: Sat 01 Oct 2022 07:31:48 +0000
ROA not before: Sat 01 Oct 2022 07:31:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.76.0/24 maxlen: 24
88.216.188.0/22 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.40.0/22 maxlen: 24
88.216.90.0/23 maxlen: 24
88.216.18.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.36.0/22 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:92:75:5d:38:ef:aa:66:40:4f:11:e2:fd:db:6e:ad:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 1 07:31:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=148dcd537353729fc3750e13cc97d2556f6be092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:54:30:02:94:12:92:0c:f4:1d:31:e2:0f:
07:9c:7b:a8:86:1e:74:68:92:db:a2:00:78:5f:67:
5f:ab:c1:eb:8f:cb:53:62:4b:3a:45:31:3a:85:5e:
c8:91:95:22:db:8e:b7:ed:ab:7d:44:56:d6:64:b3:
b7:54:53:ef:aa:c4:8b:11:96:7e:24:72:e7:b3:12:
a7:f2:f0:3a:f8:c5:5e:89:7b:bc:c3:76:3c:91:56:
2e:c5:c4:49:0f:e3:03:a3:fa:0a:1c:a2:48:28:27:
48:de:d5:1f:9f:8a:28:e6:27:40:dc:d0:8b:e3:05:
55:86:4f:c8:9b:fe:ca:7d:39:eb:d2:7b:f9:37:77:
c8:d7:39:b6:19:65:ab:6e:56:90:50:01:26:c9:24:
d8:ee:af:62:f7:0c:e8:2d:cc:1a:df:54:08:14:16:
3c:0b:7e:ad:f7:d7:07:be:98:12:29:bc:78:6a:f5:
92:96:2e:9e:26:3a:a9:ac:20:50:df:4b:2b:ed:2c:
f3:e7:9f:18:64:d4:82:bd:76:b3:d8:b8:c5:fd:8c:
7e:2d:ea:27:82:88:fb:9f:a0:7e:c8:fe:5a:93:1e:
83:93:f2:76:4f:ad:bd:10:18:c8:21:9a:68:0c:0b:
1e:24:49:a6:02:df:8e:4e:1e:5f:f0:6c:27:39:f8:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:CD:53:73:53:72:9F:C3:75:0E:13:CC:97:D2:55:6F:6B:E0:92
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FI3NU3NTcp_DdQ4TzJfSVW9r4JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.40.0/22
84.32.76.0/24
84.32.88.0/24
88.216.18.0/24
88.216.35.0-88.216.41.255
88.216.43.0/24
88.216.90.0/23
88.216.187.0-88.216.191.255
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
76:fc:c0:1b:48:16:a0:01:fd:93:54:c7:51:0f:5c:0d:d9:1e:
02:45:1c:25:65:d0:d4:62:c4:00:4d:e7:dd:ca:91:f2:ce:af:
a4:58:a5:56:76:5e:a8:d7:3f:6a:a8:67:e6:b4:31:4d:7c:aa:
f4:ba:42:05:10:97:72:da:87:81:af:85:86:e0:d8:b3:86:87:
ef:71:0f:19:4c:df:eb:cb:12:cb:9f:e9:65:38:88:ec:f9:7b:
ad:c5:8c:c1:22:89:f1:bd:a7:e5:54:fa:9f:a4:a6:08:5d:37:
2e:af:f5:e2:b1:f4:d6:61:0d:b9:c8:5f:79:2a:15:2c:9d:47:
c0:d6:03:af:64:5c:68:5e:9d:37:74:ae:a7:04:25:7b:38:d4:
2e:78:e3:44:97:df:c7:af:88:09:2e:b1:de:04:b7:56:bb:c6:
63:7d:b4:6a:be:ac:6f:63:04:e9:4c:4b:3c:26:cc:cd:af:28:
b2:4f:63:46:25:a0:8f:db:ef:b5:08:77:78:5d:e8:1a:76:d4:
cf:e9:3e:a3:18:94:08:54:49:14:cc:dc:31:c9:ac:15:ac:57:
12:94:fa:0f:a3:5a:13:97:06:9a:52:f8:87:f3:50:78:e0:ae:
ca:4d:bf:e8:89:49:f8:51:5a:d7:75:32:ba:86:e5:61:db:a5:
3a:43:ad:71
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAYOSdV0476pmQE8R4v3bbq0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMDAxMDczMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDhkY2Q1MzczNTM3MjlmYzM3NTBlMTNjYzk3ZDI1NTZmNmJlMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vNUMAKUEpIM9B0x4g8HnHuohh50
aJLbogB4X2dfq8Hrj8tTYks6RTE6hV7IkZUi24637at9RFbWZLO3VFPvqsSLEZZ+
JHLnsxKn8vA6+MVeiXu8w3Y8kVYuxcRJD+MDo/oKHKJIKCdI3tUfn4oo5idA3NCL
4wVVhk/Im/7KfTnr0nv5N3fI1zm2GWWrblaQUAEmySTY7q9i9wzoLcwa31QIFBY8
C36t99cHvpgSKbx4avWSli6eJjqprCBQ30sr7Szz558YZNSCvXaz2LjF/Yx+Leon
goj7n6B+yP5akx6Dk/J2T629EBjIIZpoDAseJEmmAt+OTh5f8GwnOfhqlQIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFBSNzVNzU3Kfw3UOE8yX0lVva+CSMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvRkkzTlUzTlRjcF9EZFE0VHpKZlNWVzlyNEpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQAVCAOAwQA
VCAiAwQCVCAoAwQAVCBMAwQAVCBYAwQAWNgSMAwDBABY2CMDBAFY2CgDBABY2CsD
BAFY2FowDAMEAFjYuwMEBljYgAMEAljY+DANBgkqhkiG9w0BAQsFAAOCAQEAdvzA
G0gWoAH9k1THUQ9cDdkeAkUcJWXQ1GLEAE3n3cqR8s6vpFilVnZeqNc/aqhn5rQx
TXyq9LpCBRCXctqHga+FhuDYs4aH73EPGUzf68sSy5/pZTiI7Pl7rcWMwSKJ8b2n
5VT6n6SmCF03Lq/14rH01mENuchfeSoVLJ1HwNYDr2RcaF6dN3SupwQlezjULnjj
RJffx6+ICS6x3gS3VrvGY320ar6sb2ME6UxLPCbMza8osk9jRiWgj9vvtQh3eF3o
GnbUz+k+oxiUCFRJFMzcMcmsFaxXEpT6D6NaE5cGmlL4h/NQeOCuyk2/6IlJ+FFa
13UyuoblYdulOkOtcQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org