Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JjV_YsP43mJEcvKaVQHJEpN3xro.roa
File: JjV_YsP43mJEcvKaVQHJEpN3xro.roa (raw, json)
Hash identifier: EwV2E6ppn9PxVf1DctxT1gD4K0xGVXWxd6pev4ncc3E=
Subject key identifier: 26:35:7F:62:C3:F8:DE:62:44:72:F2:9A:55:01:C9:12:93:77:C6:BA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185246630B7A63143E6C8D496DB693F3E71
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JjV_YsP43mJEcvKaVQHJEpN3xro.roa
Signing time: Sun 18 Dec 2022 08:42:35 +0000
ROA not before: Sun 18 Dec 2022 08:42:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.178.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
88.216.135.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:24:66:30:b7:a6:31:43:e6:c8:d4:96:db:69:3f:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 18 08:42:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26357f62c3f8de624472f29a5501c9129377c6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:06:0b:45:9c:a6:dd:e8:09:5f:fb:14:d9:
ee:c6:41:3e:38:3a:c0:5f:20:40:d2:b1:55:c7:73:
fe:99:ef:eb:bb:18:a2:96:af:e7:3d:98:50:22:b1:
2f:22:9b:f0:b4:c5:28:17:37:68:a5:6a:a2:41:5c:
39:cf:88:05:e9:3d:47:e7:41:b9:97:84:05:bc:83:
19:fd:4d:c3:e3:d7:8a:76:43:2f:be:ce:62:7c:ab:
c7:31:c5:bf:1c:d8:68:7a:09:58:0b:8f:22:dc:f3:
33:7e:29:39:8a:9c:d7:d6:43:6b:b7:69:f0:1c:6e:
f1:bd:ec:29:a9:0f:42:3d:d2:59:9c:8a:d4:49:3a:
17:ce:d9:b6:ff:fb:de:c9:00:12:0d:1c:ab:d2:5b:
24:95:29:dc:0e:53:c9:0d:56:7d:fc:2a:d2:a5:81:
b8:6b:18:62:b8:87:82:36:18:53:da:9b:95:33:9f:
61:9d:6b:2c:ef:2b:a7:7b:85:57:6e:43:76:5a:c5:
c6:70:a9:62:d1:b1:b7:f0:f2:28:2e:57:34:e1:43:
21:75:f4:6b:c3:9c:89:53:67:af:ce:c0:b7:c8:ef:
70:4d:2d:2d:4a:18:24:1e:4b:67:23:f0:05:5d:57:
4f:4c:a9:9d:4d:c9:b6:2f:b7:92:98:71:34:ee:c5:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:35:7F:62:C3:F8:DE:62:44:72:F2:9A:55:01:C9:12:93:77:C6:BA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JjV_YsP43mJEcvKaVQHJEpN3xro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.90.0/23
84.32.178.0/23
84.32.212.0/24
84.32.220.0-84.32.222.255
88.216.42.0/24
88.216.135.0/24
88.216.224.0/22
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:5a:2c:fd:05:f8:f2:50:31:be:5c:5f:59:ae:1c:14:1b:a5:
b3:f3:41:fc:1d:6c:9a:b5:df:a3:d6:98:57:6a:df:e4:5a:b2:
87:10:94:7f:a2:20:7d:b9:a6:58:88:f9:87:ec:45:ed:bd:a6:
b5:3a:b4:47:d6:ab:fb:ec:e0:c2:ac:75:d7:f7:cc:94:f0:12:
ec:53:5e:c4:10:91:b8:b4:5e:3f:d1:b4:86:65:76:b7:f2:bd:
04:79:47:99:cd:0a:d9:93:e6:37:1e:b8:1c:20:13:2e:ec:aa:
c6:f1:8e:53:34:f7:12:e7:0e:b1:73:d8:d7:64:c5:4f:ee:4c:
0b:d6:42:a2:4b:b3:5a:d5:1d:36:95:0f:0a:e6:5e:e8:f1:b8:
27:24:44:ed:8b:8b:06:58:64:ab:45:b9:cd:55:3f:7a:b7:e8:
f1:1f:56:34:ef:93:6a:67:0c:5c:a4:54:c4:5b:63:af:1f:55:
35:59:78:f8:75:01:6d:4c:e3:6b:62:eb:f3:fb:63:a6:38:e1:
66:92:7a:85:ef:86:37:55:23:65:90:33:cf:43:f1:13:d2:d4:
7b:c6:c5:82:1b:44:98:c4:64:67:9c:56:56:76:20:7d:2d:01:
ff:bd:cb:52:20:6c:41:5a:33:e4:b8:79:34:57:0e:21:49:c1:
15:9f:9d:5e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYUkZjC3pjFD5sjUlttpPz5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMjE4MDg0MjM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjM1N2Y2MmMzZjhkZTYyNDQ3MmYyOWE1NTAxYzkxMjkzNzdjNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOoGC0Wcpt3oCV/7FNnuxkE+ODrA
XyBA0rFVx3P+me/ruxiilq/nPZhQIrEvIpvwtMUoFzdopWqiQVw5z4gF6T1H50G5
l4QFvIMZ/U3D49eKdkMvvs5ifKvHMcW/HNhoeglYC48i3PMzfik5ipzX1kNrt2nw
HG7xvewpqQ9CPdJZnIrUSToXztm2//veyQASDRyr0lsklSncDlPJDVZ9/CrSpYG4
axhiuIeCNhhT2puVM59hnWss7yune4VXbkN2WsXGcKli0bG38PIoLlc04UMhdfRr
w5yJU2evzsC3yO9wTS0tShgkHktnI/AFXVdPTKmdTcm2L7eSmHE07sVWawIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFCY1f2LD+N5iRHLymlUByRKTd8a6MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvSmpWX1lzUDQzbUpFY3ZLYVZRSEpFcE4zeHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCVCAYAwQB
VCBaAwQBVCCyAwQAVCDUMAwDBAJUINwDBABUIN4DBABY2CoDBABY2IcDBAJY2OAD
BAJY2PgwDQYJKoZIhvcNAQELBQADggEBAHtaLP0F+PJQMb5cX1muHBQbpbPzQfwd
bJq136PWmFdq3+RasocQlH+iIH25pliI+YfsRe29prU6tEfWq/vs4MKsddf3zJTw
EuxTXsQQkbi0Xj/RtIZldrfyvQR5R5nNCtmT5jceuBwgEy7sqsbxjlM09xLnDrFz
2NdkxU/uTAvWQqJLs1rVHTaVDwrmXujxuCckRO2LiwZYZKtFuc1VP3q36PEfVjTv
k2pnDFykVMRbY68fVTVZePh1AW1M42ti6/P7Y6Y44WaSeoXvhjdVI2WQM89D8RPS
1HvGxYIbRJjEZGecVlZ2IH0tAf+9y1IgbEFaM+S4eTRXDiFJwRWfnV4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org