Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Hbjt2tiLvtbCrzro-olkDcfvLrU.roa
File: Hbjt2tiLvtbCrzro-olkDcfvLrU.roa (raw, json)
Hash identifier: P28UFO0rj4IFdjLCI0VBbJ+Lf7jWrY+k96+UMzRVLAY=
Subject key identifier: 1D:B8:ED:DA:D8:8B:BE:D6:C2:AF:3A:E8:FA:89:64:0D:C7:EF:2E:B5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183C2DEDE72AA5C06BC6E99F4F72C1766BF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Hbjt2tiLvtbCrzro-olkDcfvLrU.roa
Signing time: Mon 10 Oct 2022 17:08:49 +0000
ROA not before: Mon 10 Oct 2022 17:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.187.0/24 maxlen: 24
84.32.87.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:de:de:72:aa:5c:06:bc:6e:99:f4:f7:2c:17:66:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 10 17:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1db8eddad88bbed6c2af3ae8fa89640dc7ef2eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:ee:e2:62:58:a0:34:7d:af:63:b7:22:c2:
b4:99:fd:98:3f:0e:8b:41:8a:8d:73:64:a8:f7:f0:
c6:02:93:2a:2c:3d:94:46:af:b8:b9:19:e8:0f:87:
91:4a:09:6d:11:a1:41:9d:a6:c2:27:f2:97:ea:e6:
86:d8:c5:26:f6:99:8b:40:02:dd:2d:45:4f:6d:ab:
54:9b:f8:77:94:b7:0e:7c:1c:d9:d7:f3:99:02:85:
13:c3:a5:fd:d4:17:b1:56:f7:83:a1:61:02:c3:b6:
ac:e8:04:cb:6b:89:07:e8:77:0b:cd:09:2c:89:f9:
8f:68:5a:2e:f5:cf:f1:40:6e:20:30:ac:94:cd:ca:
c2:7a:89:3f:1c:44:d6:7f:2e:eb:71:a3:c2:f7:6e:
a7:d8:9e:89:8d:7c:86:c0:88:6e:05:e5:84:d3:8b:
36:8e:11:bc:22:01:46:91:74:1b:86:17:34:94:36:
c4:92:0b:15:23:f2:da:55:cf:f6:1d:a0:93:46:11:
7c:83:70:a9:ee:42:c2:80:78:95:a9:6b:f8:5f:27:
d3:6f:b3:2d:f9:78:57:8c:49:0f:ac:da:b5:be:3c:
3f:fe:ce:d3:08:a8:77:96:37:49:3f:da:44:6e:61:
49:dd:c5:3b:96:3f:85:4e:00:27:ba:2c:2f:0b:28:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:ED:DA:D8:8B:BE:D6:C2:AF:3A:E8:FA:89:64:0D:C7:EF:2E:B5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Hbjt2tiLvtbCrzro-olkDcfvLrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.87.0/24
88.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a0:47:d8:0b:70:40:9e:fd:a1:f1:c3:fe:5f:78:03:6b:c3:
78:a2:76:52:bd:df:f7:db:6c:cd:80:ea:ac:a6:a0:d9:00:69:
58:d4:35:9b:b9:9d:0c:73:a6:ac:dc:18:7e:78:06:db:4d:e5:
f4:9f:23:c7:8d:bb:68:fb:e9:70:3e:3d:9d:34:96:87:7e:3c:
34:18:a3:56:b8:f4:aa:f3:f6:d4:41:e5:0d:b3:8a:56:b4:18:
0f:7a:d2:b3:13:8d:f3:c8:20:62:d1:d7:6d:79:8f:49:26:2a:
9d:14:46:77:a5:ff:5b:49:80:53:09:ac:53:df:2a:f8:6f:eb:
73:10:c4:56:90:28:e4:f2:04:8a:ab:ec:54:97:38:df:a1:44:
b2:ee:dd:ad:67:d0:a8:df:de:e8:62:90:1a:c9:9a:98:04:61:
46:ac:18:16:2a:12:69:ca:52:fc:23:be:06:1f:2f:e3:12:46:
c0:4e:d4:60:eb:0c:ba:27:4d:a2:28:29:63:52:be:9d:c5:53:
e9:d3:08:fe:93:c4:59:11:5c:0e:e7:1c:c3:95:29:66:35:5d:
4b:00:5a:21:62:e7:7a:74:87:9c:bf:ff:45:79:40:0c:50:3d:
48:8f:ba:b1:9d:10:db:6f:87:fc:0e:20:d2:66:51:4c:65:26:
a3:b4:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org