Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mh0ybm-dfTAL8usIJPrStKO7Tf8.roa
File: Mh0ybm-dfTAL8usIJPrStKO7Tf8.roa (raw, json)
Hash identifier: HE9xwgIZDOPyOJ2h5Ob/NcwDjDhKnQzMYGERaE2bH60=
Subject key identifier: 32:1D:32:6E:6F:9D:7D:30:0B:F2:EB:08:24:FA:D2:B4:A3:BB:4D:FF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 902FA1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mh0ybm-dfTAL8usIJPrStKO7Tf8.roa
Signing time: Tue 05 Apr 2022 18:58:41 +0000
ROA not before: Tue 05 Apr 2022 18:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.180.0/22 maxlen: 24
88.216.188.0/22 maxlen: 24
88.216.196.0/22 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
84.32.4.0/22 maxlen: 24
84.32.8.0/22 maxlen: 24
84.32.24.0/21 maxlen: 24
84.32.40.0/21 maxlen: 24
88.216.0.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.20.0/22 maxlen: 22
88.216.33.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9449377 (0x902fa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 5 18:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=321d326e6f9d7d300bf2eb0824fad2b4a3bb4dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:18:ed:0c:76:18:ab:b3:0a:f6:e2:b3:80:
d5:e4:aa:73:d5:a2:07:bf:6e:53:be:03:7c:f3:3c:
5f:ec:21:1a:81:34:de:7b:70:9c:92:d4:0d:36:1b:
71:45:cc:fb:4f:73:38:ea:ac:a3:de:c0:a7:5d:ec:
7b:10:c0:df:e4:03:17:5c:18:fc:98:d8:74:af:a2:
d0:55:a0:2f:48:22:4b:e5:2e:d8:03:de:bf:dc:38:
26:27:5d:f7:11:17:88:ca:93:26:65:d8:b6:be:eb:
8a:f7:4a:89:3e:90:dc:da:f8:09:bc:42:c5:ea:38:
32:c4:49:10:7f:31:97:0f:fb:00:60:6c:f0:2b:ff:
28:76:08:05:64:1d:3d:6c:bf:5b:d6:b5:e6:8f:66:
61:d2:93:d4:1b:38:9a:64:b4:08:ec:fb:09:1b:d9:
4c:5d:e0:ad:19:8b:f0:b5:e5:f6:54:fd:f7:66:c1:
c9:a4:ad:ca:bc:17:3b:1c:98:4a:c3:72:55:92:8b:
9c:4d:39:20:f3:5a:97:88:25:51:47:df:ea:72:7e:
5d:fd:25:f2:6e:b5:61:54:82:37:72:68:49:57:01:
41:89:05:de:cf:7f:a3:d7:17:b5:65:a9:c0:a6:cf:
92:e0:f7:6f:eb:d6:b3:81:46:28:2a:b2:7a:77:5a:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1D:32:6E:6F:9D:7D:30:0B:F2:EB:08:24:FA:D2:B4:A3:BB:4D:FF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mh0ybm-dfTAL8usIJPrStKO7Tf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0-84.32.11.255
84.32.24.0/21
84.32.40.0/21
88.216.0.0/22
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/23
88.216.46.0/23
88.216.180.0/22
88.216.188.0/22
88.216.196.0/22
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
93:e0:ef:7f:f2:55:b8:88:5d:71:2c:a7:b3:97:5b:bd:e4:b4:
06:1c:9b:46:22:9c:a9:c9:58:17:f5:c5:71:64:6d:b5:94:f5:
10:1a:4b:ef:a4:92:3e:36:3e:c7:8b:9a:5c:45:e3:2b:3a:01:
18:10:4a:ca:fe:28:3b:4c:72:e3:45:f6:f2:8c:72:2c:d6:eb:
38:75:59:a8:8c:eb:aa:fe:79:cc:ce:cf:aa:0c:22:10:36:01:
52:6d:d2:85:cf:15:6e:e3:5b:c7:c0:1f:be:53:55:b1:85:a3:
e6:6a:4b:b7:95:40:76:05:34:a3:cb:70:e4:e6:ff:a2:7b:ae:
b5:d1:7d:da:f4:cf:35:dc:37:ce:59:37:a3:ba:09:a4:60:2c:
55:a2:d3:f6:4c:c6:b2:31:00:5c:b3:cd:e8:e9:c7:42:e6:06:
14:f1:0f:65:61:41:26:1b:37:2a:e3:6d:35:f2:b3:21:bb:28:
90:8b:48:3f:06:53:b3:2b:fa:c9:23:74:65:fc:89:08:96:05:
8f:e5:eb:17:fa:a7:64:97:68:33:d0:bc:04:8a:b8:80:f5:5c:
e6:e7:fc:d4:a5:1e:70:ef:76:15:36:ab:c7:f8:54:64:9c:40:
cf:55:e2:c4:dc:c6:f1:f7:23:d0:03:6f:26:3e:3e:31:95:58:
5a:f3:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org