Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F_a98nIkpYW5pcA8js1m-cYrZ-4.roa
File: F_a98nIkpYW5pcA8js1m-cYrZ-4.roa (raw, json)
Hash identifier: BprE5Bp/Kbhvv80DchBG1cWXcdx78rFwOYKBE6QbQCM=
Subject key identifier: 17:F6:BD:F2:72:24:A5:85:B9:A5:C0:3C:8E:CD:66:F9:C6:2B:67:EE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018387EFEB10C36D95A5D84D923A9840BC01
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F_a98nIkpYW5pcA8js1m-cYrZ-4.roa
Signing time: Thu 29 Sep 2022 06:29:50 +0000
ROA not before: Thu 29 Sep 2022 06:29:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.59.0/24 maxlen: 24
88.216.90.0/24 maxlen: 24
88.216.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:87:ef:eb:10:c3:6d:95:a5:d8:4d:92:3a:98:40:bc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 29 06:29:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17f6bdf27224a585b9a5c03c8ecd66f9c62b67ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:8d:62:c0:79:d0:4e:25:c3:6c:c4:7f:3d:
5c:f4:ce:6f:03:fd:89:ae:5b:eb:1c:ed:98:8a:12:
d0:8b:33:d0:ba:d8:48:f4:31:83:d8:aa:b1:0a:be:
c4:40:80:34:80:bd:0d:a2:13:ae:74:c7:43:ac:e1:
34:1e:54:b5:b1:85:43:29:7a:d7:a6:41:64:0e:35:
98:8a:13:8a:b0:f4:d1:bc:9d:85:46:dd:50:08:67:
38:f0:f8:aa:b7:56:66:87:1d:a5:0d:50:72:57:3c:
2f:02:b9:b1:8c:62:c4:1e:49:1d:3b:3a:52:c8:8b:
3a:7e:ae:f3:7a:d0:4a:74:d7:28:7c:d4:aa:18:9a:
c0:11:99:b6:1a:5b:25:8f:0c:22:ef:14:59:50:b2:
92:18:5e:65:40:ec:9e:86:0d:f1:37:df:90:98:5a:
93:52:84:83:f1:66:8e:60:63:19:9d:6d:2b:0e:dc:
90:a9:33:67:d5:38:14:43:1c:73:27:f8:02:db:c5:
7a:0f:fd:30:a9:34:06:b3:22:d7:0a:31:40:98:89:
6c:de:e5:ca:28:bd:83:ac:bd:39:22:2b:20:99:48:
09:86:4c:46:dd:41:2d:15:bf:77:34:94:30:c1:79:
3e:b3:2b:74:8a:9a:68:73:dd:8e:46:6b:0b:71:d9:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:BD:F2:72:24:A5:85:B9:A5:C0:3C:8E:CD:66:F9:C6:2B:67:EE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F_a98nIkpYW5pcA8js1m-cYrZ-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
88.216.33.0/24
88.216.90.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c9:e9:45:fc:7a:9e:f7:22:d9:bc:a1:b6:f6:e4:7c:01:7d:
56:06:bc:17:6f:e9:ee:53:be:1c:c4:c2:e2:be:8e:06:61:e7:
5e:56:bc:9a:b5:af:3e:ee:2f:65:52:70:86:18:ca:cb:cd:85:
80:cf:de:03:d5:d9:b2:83:55:64:53:64:e7:dc:a8:56:49:16:
b7:2a:5a:47:69:ee:a4:51:45:dd:e5:7c:92:1d:b7:74:a4:08:
8a:0e:7b:17:fb:b9:fb:16:e3:67:d1:f0:97:79:f7:de:01:f2:
16:3c:fd:a7:f6:4b:9f:c9:a7:d9:b6:04:d4:dc:a7:5a:7c:48:
82:ea:d8:8e:0f:73:cf:8c:27:0e:db:f3:a5:ca:77:dd:3e:72:
f4:ca:0b:83:ff:3c:ac:f6:df:96:30:0a:3f:7a:bd:68:90:f8:
b5:5c:4d:ad:14:89:39:32:00:45:6a:cb:d8:0d:47:1f:cf:1e:
5b:b8:7f:c2:f1:12:bb:ba:45:7f:58:27:6f:9a:b2:8d:6f:8a:
23:2b:6b:19:a0:dc:30:33:b9:d7:71:3d:ae:5d:a4:00:ac:a2:
32:f7:f5:25:2b:c7:3f:1c:a6:4a:cf:6d:00:f5:e4:c3:7c:5d:
5a:81:ff:89:87:54:1b:3a:ed:27:8b:a8:c9:02:88:44:7b:97:
a7:d2:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org