Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IB_O1HmaDOnb2V1CovEirUZ9zp8.roa
File: IB_O1HmaDOnb2V1CovEirUZ9zp8.roa (raw, json)
Hash identifier: yLtMjB5yKRQ74GcQVtJdksvYkNDSQYLCWxIDDZerni8=
Subject key identifier: 20:1F:CE:D4:79:9A:0C:E9:DB:D9:5D:42:A2:F1:22:AD:46:7D:CE:9F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018335B530A96D6BACB77971FD128C310A9A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IB_O1HmaDOnb2V1CovEirUZ9zp8.roa
Signing time: Tue 13 Sep 2022 07:16:50 +0000
ROA not before: Tue 13 Sep 2022 07:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.16.0/23 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/23 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.134.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:b5:30:a9:6d:6b:ac:b7:79:71:fd:12:8c:31:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 13 07:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=201fced4799a0ce9dbd95d42a2f122ad467dce9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:c5:87:b5:f0:43:b5:67:49:0a:6c:69:db:
39:67:c7:bc:20:4e:bc:8c:f8:81:2b:05:e3:56:d2:
92:67:76:91:4f:5f:eb:69:a9:06:5b:11:74:be:91:
1f:c1:79:58:46:73:92:b2:f4:92:78:89:e5:ff:57:
04:be:f3:e5:9d:9e:93:1a:8f:d1:93:f0:33:c1:e2:
32:e8:48:37:db:1b:da:6e:23:6a:e1:ba:fd:74:7a:
ed:18:be:7c:5a:da:24:b5:c2:89:60:51:9a:d6:76:
4a:9a:a3:73:e1:9e:3e:3e:2b:44:d5:3d:4a:5f:9b:
df:bd:bb:b0:1b:dd:dc:ea:74:6b:73:e5:0b:20:7e:
84:33:55:b4:64:1f:40:f5:34:c4:e7:3f:d4:46:72:
eb:4a:b0:58:28:35:2a:aa:bb:9f:8e:07:d2:46:d7:
fa:81:70:30:19:fc:4f:da:2c:fa:ef:87:ba:91:50:
45:ad:8b:ca:92:7d:77:94:28:b9:28:f6:f4:8d:e6:
b0:74:1a:8f:a2:3a:26:5f:6c:99:b5:40:52:0c:34:
23:6d:f7:c0:77:7d:c2:c0:32:19:e5:fc:d3:a3:4a:
ff:27:78:28:02:45:b4:70:01:e7:f3:38:09:74:18:
c4:f1:c5:e6:a1:31:5a:f4:e9:37:e5:f3:44:fb:9f:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:CE:D4:79:9A:0C:E9:DB:D9:5D:42:A2:F1:22:AD:46:7D:CE:9F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IB_O1HmaDOnb2V1CovEirUZ9zp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
88.216.16.0/23
88.216.33.0/24
88.216.92.0/22
88.216.129.0/24
88.216.132.0-88.216.134.255
88.216.224.0/22
88.216.232.0/22
Signature Algorithm: sha256WithRSAEncryption
80:56:c2:ff:9e:19:b1:0e:94:f8:40:f3:45:da:e3:b2:09:6e:
a7:b0:e4:e2:ab:9e:f0:95:61:8b:3b:8b:9f:ab:57:32:d3:d1:
28:77:31:e4:63:2c:da:4b:51:f2:be:dc:80:9b:cc:1b:1c:ee:
13:79:4a:59:1c:94:6f:af:89:1e:f1:43:ee:6c:a3:bc:0e:63:
d1:32:07:07:d2:b8:f5:27:da:8b:74:23:75:21:76:9c:4b:fd:
4e:91:5e:e1:f3:e3:8f:19:29:0b:ec:e7:91:42:59:f3:87:92:
cd:f0:88:a0:f9:a8:14:e1:ac:e8:c9:18:d0:05:3c:aa:9a:22:
83:18:a4:85:63:77:ea:7d:a6:b5:0e:80:8f:80:f6:de:d8:b1:
86:3a:72:e4:d1:c9:a4:9d:b6:4d:33:de:5e:b0:85:bd:72:a5:
a0:1f:6e:1b:51:3b:9e:f6:d6:a5:4b:0b:ae:d9:39:f8:6d:b4:
c4:8e:89:9e:1c:1f:b4:5c:07:d6:4b:85:c9:c9:6f:2e:e7:13:
55:61:5b:2f:71:c0:48:be:41:52:c7:65:ab:22:0c:36:8b:81:
10:0a:b1:a2:ba:11:56:13:fa:9a:f4:30:d5:16:b5:fe:ca:0b:
c2:a2:07:90:eb:0a:97:13:fc:2d:bc:b6:8c:79:59:4f:08:ad:
05:be:ac:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org