Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GHGeW60PwyRDlIcrrcqDawatoHs.roa
File: GHGeW60PwyRDlIcrrcqDawatoHs.roa (raw, json)
Hash identifier: okbCqbS8Bz5cgY463B2eMAc2ulE1NvNS0qzjkE36Pro=
Subject key identifier: 18:71:9E:5B:AD:0F:C3:24:43:94:87:2B:AD:CA:83:6B:06:AD:A0:7B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183B10D527CD6F0AFE0F557EE56E1C096C9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GHGeW60PwyRDlIcrrcqDawatoHs.roa
Signing time: Fri 07 Oct 2022 06:06:23 +0000
ROA not before: Fri 07 Oct 2022 06:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 84.32.68.0/22 maxlen: 24
84.32.82.0/23 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.90.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:0d:52:7c:d6:f0:af:e0:f5:57:ee:56:e1:c0:96:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 7 06:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18719e5bad0fc3244394872badca836b06ada07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:27:e8:b1:c6:c0:ac:35:98:65:1d:27:2c:
80:d9:cd:da:c5:3d:ce:7d:d3:d4:51:d2:59:03:14:
97:1c:15:e7:e3:5f:d8:83:09:9d:93:cd:51:47:7d:
a6:f7:db:ad:ff:7e:cc:16:dd:21:d9:71:b1:84:c7:
fb:01:bc:21:dd:ee:24:51:77:27:c7:8f:c1:91:7b:
68:56:85:0f:ab:7d:95:f8:f7:96:ba:ec:6e:09:8b:
57:cf:15:56:d1:ff:58:74:4c:7d:ed:f6:dc:86:5c:
d3:29:08:c2:03:9c:fc:0c:17:40:30:ad:46:53:16:
48:9b:9e:0a:b2:ad:51:6d:9c:1e:35:12:37:29:2a:
5f:91:6a:dc:25:5c:0c:52:93:dc:0f:4f:bb:25:1d:
45:be:35:f2:94:b0:58:3a:fb:d6:ba:85:52:af:64:
3d:2d:cb:d8:d6:69:1c:b4:c0:c6:19:f2:b8:40:90:
4d:14:05:f2:fb:e3:c9:d6:b0:6d:1a:90:2c:2f:8e:
e4:8d:f8:53:f4:9e:e1:1b:e8:06:c4:a6:24:f9:50:
21:0b:6e:b2:1e:f0:cb:c1:c2:9a:48:7c:a2:aa:13:
78:cf:d2:3f:6d:5a:e2:b7:78:db:ab:43:cc:85:39:
ad:b0:0a:73:8b:ce:53:58:9c:f8:93:51:d6:0e:3c:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:9E:5B:AD:0F:C3:24:43:94:87:2B:AD:CA:83:6B:06:AD:A0:7B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GHGeW60PwyRDlIcrrcqDawatoHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.68.0/22
84.32.82.0/23
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/24
88.216.46.0/24
88.216.90.0/24
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
32:b9:57:14:f4:52:9a:0b:20:88:c0:7d:80:46:15:0e:90:6a:
d5:1d:ba:70:b5:00:26:e1:05:b3:0d:a7:76:49:18:23:b8:a2:
c8:3e:fc:d9:37:8e:7c:65:74:f4:f7:da:1a:95:47:d5:0e:2f:
a8:30:4e:4d:fc:57:4d:ed:bc:3d:07:4b:7b:d4:72:73:91:e0:
93:f0:b6:26:aa:6c:ae:d6:e5:48:35:b6:36:b1:f2:03:77:1a:
0f:f2:d8:e8:f0:88:ea:24:b2:58:86:0e:fc:81:74:a2:6a:b3:
47:a1:cb:57:18:ee:4f:99:c6:a7:cc:07:a0:66:fc:d0:c4:92:
5e:34:69:00:0f:9f:d9:b0:08:93:51:55:1e:86:71:63:20:eb:
dc:53:ac:3a:f7:62:57:71:fc:04:3b:c8:dd:cb:9f:4d:03:fb:
8d:a6:41:3a:94:d1:ea:90:af:d2:99:68:6a:f7:49:60:7d:d3:
ee:a9:47:fe:56:f0:cf:df:5b:83:88:87:02:48:6d:94:c5:2b:
bf:f4:4f:7a:07:60:6f:90:a3:54:07:9c:56:71:4e:f4:67:75:
c5:0f:c5:a2:4e:34:dd:cb:88:01:a8:a1:dd:49:f9:94:db:2c:
52:6c:d2:99:59:a3:bc:d0:44:59:8a:b1:da:b0:d1:bd:c2:77:
76:e2:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org