Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JNMbaUFQ_8AAtanIKFDMiZ4Ytvw.roa
File: JNMbaUFQ_8AAtanIKFDMiZ4Ytvw.roa (raw, json)
Hash identifier: D2HCGT9GQ1geC1Knf8+3RiVCVafGXt9atDg3LVeu6Ng=
Subject key identifier: 24:D3:1B:69:41:50:FF:C0:00:B5:A9:C8:28:50:CC:89:9E:18:B6:FC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184571B64E490A7E5B8138AB7FC7F049D12
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JNMbaUFQ_8AAtanIKFDMiZ4Ytvw.roa
Signing time: Tue 08 Nov 2022 11:58:43 +0000
ROA not before: Tue 08 Nov 2022 11:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 88.216.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:1b:64:e4:90:a7:e5:b8:13:8a:b7:fc:7f:04:9d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 8 11:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24d31b694150ffc000b5a9c82850cc899e18b6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:83:83:86:e2:45:62:dd:e5:5f:b2:7b:05:
cb:7b:38:53:6c:2c:f0:ed:f3:0e:94:3c:c4:6a:7d:
b5:81:8d:41:94:06:65:2e:49:c4:27:7a:8e:6a:31:
8c:51:06:47:8f:95:50:26:17:db:c9:9f:aa:bc:62:
42:da:3d:90:31:f6:e2:25:e9:73:7f:ba:8b:ec:1c:
bc:d0:43:f9:00:82:e2:f8:c4:40:df:37:eb:e2:b6:
90:f2:27:85:2d:7e:18:8e:02:7e:7b:1a:91:22:5e:
d9:9c:1a:37:47:9d:91:07:3a:2c:3f:de:23:c6:61:
44:73:26:bb:e6:4a:79:6f:d4:b6:36:03:81:6a:53:
0e:fc:3f:ab:1a:fe:e0:f3:16:2e:7e:dc:e1:d5:5c:
1e:07:28:d7:d6:65:a1:60:3d:8f:33:41:fc:5b:b8:
6a:bc:7a:89:f1:77:2b:c3:e0:1a:99:88:f4:6b:dd:
6d:b0:c3:a6:10:57:22:a3:b5:0d:e4:44:cb:50:22:
ba:4a:a5:75:ba:e0:44:5c:cb:b5:36:d5:29:a6:fe:
7a:bd:94:52:0e:f2:99:3c:99:31:98:c6:6a:cd:de:
1b:5e:4f:cd:47:cd:86:2d:a5:4d:9c:52:8b:da:98:
ad:ca:83:56:2b:a8:99:c9:e7:7a:af:14:c2:f2:91:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:1B:69:41:50:FF:C0:00:B5:A9:C8:28:50:CC:89:9E:18:B6:FC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JNMbaUFQ_8AAtanIKFDMiZ4Ytvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.212.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b5:e8:87:87:f3:e2:bb:c5:c6:77:8b:1e:a6:9c:bf:b1:0a:
85:10:80:e2:c6:24:0d:18:1e:7b:97:5f:dd:6e:c7:90:64:3f:
c4:f6:c8:f5:1c:1c:43:89:f7:e5:ad:8f:7c:b3:15:b8:03:8f:
17:66:e2:4c:c4:8e:d5:1f:01:a0:0a:7b:b9:f5:16:f5:c4:15:
94:a0:fc:cc:5b:2d:34:c1:ed:cf:cb:20:e6:a7:90:5d:4d:20:
81:f2:f9:0d:bb:9a:ab:f3:58:d0:07:4f:06:0f:a8:67:6a:9c:
e6:e3:4d:d6:72:50:52:36:4a:fb:b6:52:4a:39:c5:ae:cd:92:
6f:01:91:71:fe:cf:44:b3:20:86:d3:3f:a7:1d:03:fe:6b:ac:
76:40:45:a5:08:17:d3:ae:78:c2:7a:a3:12:b8:bf:ad:04:82:
19:9f:ff:43:75:e7:dc:2b:47:ea:72:bb:c6:e9:1b:7f:96:48:
f9:fb:89:80:82:6b:ef:0a:bd:6b:5f:9b:98:11:68:d8:f5:8f:
fc:a8:d3:66:43:01:e3:eb:08:62:2b:2b:f9:f9:79:a9:21:05:
7b:19:e1:53:ee:73:45:2d:7b:57:67:48:b7:6d:9b:db:6b:a6:
00:f1:95:0f:89:cb:77:b9:aa:c8:5e:0b:16:36:08:9f:89:f3:
7b:d0:77:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org