Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HNcQSgO_BoE4bkLcJZZl5cIL-2o.roa
File: HNcQSgO_BoE4bkLcJZZl5cIL-2o.roa (raw, json)
Hash identifier: zfQO/SV1oPfEjOx1AnAV+OjUD4XuNfCtr/2et1UanGU=
Subject key identifier: 1C:D7:10:4A:03:BF:06:81:38:6E:42:DC:25:96:65:E5:C2:0B:FB:6A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018519D6A28B79C6FA7F4E3BA2009EB35559
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HNcQSgO_BoE4bkLcJZZl5cIL-2o.roa
Signing time: Fri 16 Dec 2022 07:29:34 +0000
ROA not before: Fri 16 Dec 2022 07:29:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141968
IP address blocks: 88.216.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:d6:a2:8b:79:c6:fa:7f:4e:3b:a2:00:9e:b3:55:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 16 07:29:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cd7104a03bf0681386e42dc259665e5c20bfb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:99:7f:c0:96:47:8c:81:61:d8:6f:cd:72:
64:da:65:82:8e:1f:8b:00:94:1a:b8:89:52:e5:c1:
d4:59:da:7f:34:58:95:3a:f3:d4:1f:37:fb:6f:28:
e6:fb:3a:e3:23:78:d1:63:d5:d5:c4:a3:d9:ec:2a:
04:6d:78:44:ca:b4:db:73:5e:3a:a7:a2:f8:12:4d:
28:a8:f9:7a:fd:2a:15:89:10:6e:fb:e0:8b:80:86:
76:f8:ae:2b:cb:45:f4:be:2a:e0:d2:c3:3c:26:1d:
41:b1:c7:87:95:a3:67:3b:1c:db:60:d1:e2:f6:d2:
46:ca:e3:a7:86:59:f1:19:66:e4:ed:8a:b3:54:ab:
b1:25:4e:2e:d3:99:3b:ee:76:25:90:7e:eb:93:bc:
50:ae:83:75:46:72:26:5b:4f:2e:22:6c:3f:8c:f9:
cf:36:6d:45:b2:47:02:a3:8f:65:1d:50:b8:32:cb:
5c:32:54:2b:d7:db:eb:a2:05:c2:35:ea:a7:70:6e:
d0:5c:10:f0:af:42:b3:2e:6e:95:4c:f9:9d:eb:d2:
29:20:67:6a:48:99:10:df:55:0d:a0:f7:3a:b0:a6:
11:f2:88:43:56:9e:c3:4b:f7:8c:43:40:04:db:22:
89:11:ea:77:90:98:de:46:2b:bc:24:75:1e:d1:1f:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:10:4A:03:BF:06:81:38:6E:42:DC:25:96:65:E5:C2:0B:FB:6A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HNcQSgO_BoE4bkLcJZZl5cIL-2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2a:51:37:04:b4:95:a5:cd:92:ec:32:05:d7:5e:f4:d2:e7:
91:24:1a:66:87:0d:58:2e:56:86:4f:12:12:0c:a8:52:6f:f7:
8c:56:f9:9b:b0:35:ad:09:c8:fe:a1:a2:9a:4b:9e:ea:5c:e6:
2f:44:b7:74:7e:19:40:61:08:c5:2e:12:78:30:b3:c1:ae:64:
75:51:e0:d8:e4:cf:e8:67:59:c5:70:43:c4:75:84:1a:dc:06:
a9:bf:c6:f4:a2:9b:7e:f7:85:fa:01:55:44:ff:99:c9:b0:2f:
49:ff:75:4e:d5:2b:52:06:ca:25:63:fe:68:0b:0c:49:be:39:
61:69:a6:6b:e2:c4:dc:8f:ac:56:18:e6:f1:21:90:c1:1a:38:
25:85:ac:78:7b:29:fb:c9:f7:6a:f9:4f:be:4c:1f:47:86:d2:
e9:db:b3:d8:05:74:c9:44:e6:07:b0:68:fe:e4:8d:b7:ab:5c:
4d:2c:51:0e:ec:32:5d:25:78:a4:b2:b0:89:87:b6:dd:ce:bb:
46:24:e4:b5:74:2d:00:ba:14:7a:2c:d1:5c:28:46:c6:ff:90:
85:37:1b:63:be:3a:e0:1d:a8:51:68:1c:8a:b0:4f:d3:07:48:
e1:be:83:8b:a0:69:f8:3d:26:6e:46:ef:ce:23:a7:27:39:21:
eb:08:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org