Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O27hNr2HO0Vpdgd5RaELmUIyKUQ.roa
File: O27hNr2HO0Vpdgd5RaELmUIyKUQ.roa (raw, json)
Hash identifier: jmm0mef39lPDp0cl0Lc4jUVfjpAT025gToCaiWICq4Q=
Subject key identifier: 3B:6E:E1:36:BD:87:3B:45:69:76:07:79:45:A1:0B:99:42:32:29:44
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183C848C6EC46975F1A931D296ACDA43164
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O27hNr2HO0Vpdgd5RaELmUIyKUQ.roa
Signing time: Tue 11 Oct 2022 18:22:36 +0000
ROA not before: Tue 11 Oct 2022 18:22:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.76.0/24 maxlen: 24
88.216.188.0/22 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.40.0/22 maxlen: 24
88.216.18.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.36.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:48:c6:ec:46:97:5f:1a:93:1d:29:6a:cd:a4:31:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 11 18:22:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b6ee136bd873b456976077945a10b9942322944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:5e:70:1c:40:40:69:62:e9:26:a5:f6:da:
b2:82:5b:24:c8:53:ef:40:68:68:29:0d:08:87:35:
2c:6c:29:fd:29:a1:85:3f:e5:53:8f:c8:c6:08:e3:
6e:99:f6:3e:13:c3:13:37:ea:d9:df:92:94:a7:59:
a1:e7:f1:07:3f:48:05:83:0f:68:7b:70:ef:2d:88:
1c:a4:3b:7b:24:e1:0d:dd:5d:7c:22:9c:82:bc:03:
ac:6a:94:0b:32:fc:a4:19:ae:f6:75:54:f5:bb:a3:
21:15:ad:e8:8e:f4:2d:92:0f:7d:a2:99:24:35:34:
83:17:e4:60:fb:21:d8:b8:1f:9b:ad:ca:49:f2:f8:
c1:fb:a3:72:9c:17:22:72:65:ac:09:88:3c:14:a5:
dc:94:37:a3:e7:2e:66:ce:9e:c4:1b:24:62:d5:09:
56:aa:eb:7b:a4:2c:8f:b2:b7:19:e1:c6:e6:cc:b1:
e5:b1:39:6d:9f:1a:ff:ae:2c:72:04:f1:b4:6c:eb:
fc:12:48:52:23:9d:fa:83:14:65:48:e5:f4:7c:45:
fd:02:4d:c8:49:66:28:8f:1b:de:45:74:d6:8a:c2:
d3:2b:5e:c4:0c:82:7d:f6:2e:77:75:fc:55:3d:ba:
c0:28:05:85:7c:81:07:a2:e7:8b:0c:d7:aa:2f:a8:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6E:E1:36:BD:87:3B:45:69:76:07:79:45:A1:0B:99:42:32:29:44
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O27hNr2HO0Vpdgd5RaELmUIyKUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.40.0/22
84.32.76.0/24
84.32.79.0/24
84.32.88.0/24
88.216.18.0/24
88.216.36.0-88.216.41.255
88.216.43.0/24
88.216.187.0-88.216.191.255
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
55:b1:ba:5b:30:12:1d:10:0d:5c:77:8e:84:95:9a:31:75:71:
fa:ef:38:9d:3b:2d:25:5e:32:2d:09:62:26:65:13:3e:60:74:
b0:89:39:b3:1d:a4:9f:ac:1a:6e:01:5d:30:23:77:21:81:f8:
2c:67:3c:58:08:da:1f:7d:37:d2:59:5e:be:62:12:85:84:09:
9b:e3:8e:52:a3:96:3f:18:da:64:b8:13:9a:55:1b:da:77:27:
92:92:85:3a:1a:1c:a1:cb:a2:41:ee:68:79:01:c4:84:aa:81:
39:e7:9e:dc:06:ca:e1:cc:62:cc:ab:4d:18:5a:89:af:14:68:
03:3e:a6:5b:3e:bb:38:4e:96:e2:e1:27:73:39:30:11:21:13:
ac:62:33:8f:4f:dd:a3:00:b3:3c:ff:d3:41:93:af:6c:40:60:
e6:dc:63:b1:4f:a2:1b:14:8d:fb:6d:ce:e9:ba:09:64:cc:2a:
fa:d8:2b:92:24:36:f9:37:aa:82:5a:08:0b:7b:98:b9:eb:27:
78:0c:57:65:68:78:65:8e:9f:be:e7:f7:43:ec:2a:00:b2:e8:
97:a8:0c:9e:70:88:5e:e3:08:bb:74:df:9e:ba:46:e6:4c:a5:
fd:6f:7f:d0:04:aa:30:14:0f:42:8a:47:06:89:fd:ec:cd:11:
45:81:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org