Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I6DlPC7lYXkTaeFpktmnQx5pTAs.roa
File: I6DlPC7lYXkTaeFpktmnQx5pTAs.roa (raw, json)
Hash identifier: qufUyFJWIQmaL2q0AZyY2XngsWibLptLAQ8yr0zU3os=
Subject key identifier: 23:A0:E5:3C:2E:E5:61:79:13:69:E1:69:92:D9:A7:43:1E:69:4C:0B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 812275
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I6DlPC7lYXkTaeFpktmnQx5pTAs.roa
Signing time: Fri 01 Apr 2022 19:31:39 +0000
ROA not before: Fri 01 Apr 2022 19:31:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.180.0/22 maxlen: 24
88.216.188.0/22 maxlen: 24
88.216.196.0/22 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
84.32.4.0/22 maxlen: 24
84.32.8.0/22 maxlen: 24
84.32.24.0/21 maxlen: 24
84.32.40.0/21 maxlen: 24
88.216.0.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.20.0/22 maxlen: 22
88.216.33.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8462965 (0x812275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 1 19:31:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23a0e53c2ee561791369e16992d9a7431e694c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:97:dd:4d:e8:20:90:f4:28:4c:b0:ae:46:
9e:4f:d6:b9:7f:67:46:f5:a8:c2:59:07:8a:e3:19:
7b:b6:0f:9a:42:12:d7:0e:fd:09:98:89:b4:b2:56:
39:be:3c:64:71:b2:68:6f:16:4c:7f:f6:c3:31:72:
d5:64:dd:06:73:a6:37:77:88:45:81:4c:12:00:b2:
92:fe:8a:a8:12:1a:bf:d3:dc:43:2b:df:9b:12:77:
02:1d:31:66:4d:9c:f7:9e:e9:00:8b:69:a0:6d:a0:
7b:e7:6c:0c:66:c8:aa:3a:98:91:ba:a0:f2:84:5b:
13:50:81:82:62:59:23:d1:57:03:c8:ab:d1:5d:17:
44:0f:14:56:4f:95:78:ba:65:1f:28:31:6e:a4:38:
1b:be:f1:45:1b:5a:cc:1a:98:6f:07:25:af:b1:7f:
81:47:01:81:3c:b9:83:ec:82:14:6e:d1:91:0f:3e:
15:c2:6f:39:87:85:65:77:3b:9b:03:4b:76:86:c3:
d9:74:84:c5:dc:1d:5f:bf:9a:4b:f0:01:cd:b6:57:
ce:ce:fe:48:d6:5f:f7:79:c7:80:2f:1e:2a:2d:11:
be:f4:83:79:a6:4d:85:2d:28:a8:3a:77:30:5f:4b:
f7:62:aa:18:9f:c2:53:0f:97:18:b4:4f:e9:ee:03:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A0:E5:3C:2E:E5:61:79:13:69:E1:69:92:D9:A7:43:1E:69:4C:0B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I6DlPC7lYXkTaeFpktmnQx5pTAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0-84.32.11.255
84.32.24.0/21
84.32.40.0/21
88.216.0.0/22
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/23
88.216.46.0/23
88.216.180.0/22
88.216.188.0/22
88.216.196.0/22
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
68:b0:70:8c:2d:e4:43:f3:d6:9f:92:01:08:7d:58:98:d3:84:
02:49:c9:6d:33:5c:e6:16:ec:7f:48:79:ea:7b:c6:3a:bd:6a:
cd:49:82:72:52:01:5c:86:ee:23:19:31:ab:5c:45:ad:62:40:
14:1c:a0:bf:67:9e:9a:24:a7:0b:6c:20:0c:b6:97:11:01:39:
9a:5c:c2:c1:ac:3f:bf:ba:6c:b9:d9:6d:5f:b2:0b:b9:5b:2d:
01:95:35:dc:87:04:a6:23:37:9e:2f:d4:36:32:d6:a5:60:b3:
f0:a6:1f:46:58:54:6d:b7:98:1f:b8:75:70:1c:44:7d:a1:f9:
39:ab:00:fa:48:3b:d0:4e:df:50:23:dd:4e:ea:42:99:3a:a8:
b9:5f:e5:f2:d6:32:be:6e:ff:bc:35:80:17:5f:5d:a4:f6:4b:
66:47:40:99:8f:49:7b:c5:3d:12:79:a1:39:75:18:60:dc:6a:
5f:72:6d:6e:15:2a:64:0f:7b:8f:fd:9a:78:27:c4:d7:c1:f8:
52:e6:94:99:5b:b9:ef:ab:97:69:2e:10:a1:b0:ce:9e:56:68:
2e:5a:f5:4f:93:ab:be:ee:f7:38:d8:9f:94:6f:a4:7e:11:2a:
42:1b:5c:84:3a:b4:d9:f9:17:85:57:a7:3b:28:93:cc:31:a3:
e4:e3:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org