Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PKnLR48-bxrIdfzquQuc1HiAMuc.roa
File: PKnLR48-bxrIdfzquQuc1HiAMuc.roa (raw, json)
Hash identifier: q8RewJO/8MUA5jvXBk2OX+us8QGGDKASSc60F0JC63c=
Subject key identifier: 3C:A9:CB:47:8F:3E:6F:1A:C8:75:FC:EA:B9:0B:9C:D4:78:80:32:E7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01847087B1F5C7A8356F3D2C763E96289301
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PKnLR48-bxrIdfzquQuc1HiAMuc.roa
Signing time: Sun 13 Nov 2022 10:27:31 +0000
ROA not before: Sun 13 Nov 2022 10:27:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 88.216.131.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.132.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:70:87:b1:f5:c7:a8:35:6f:3d:2c:76:3e:96:28:93:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 13 10:27:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ca9cb478f3e6f1ac875fceab90b9cd4788032e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:95:99:81:3a:1e:ee:79:39:10:26:22:76:
35:75:57:c7:c9:2a:c1:11:c0:d2:6d:60:4f:08:a0:
b7:f2:3d:76:4a:df:04:56:40:52:be:05:44:f8:1b:
95:db:02:c9:8b:5c:bc:11:76:0f:77:90:af:ac:40:
7d:8d:17:8f:71:c1:b4:2d:3c:25:21:b4:b3:f5:09:
4f:1f:35:96:aa:e4:c5:f7:fd:e6:9e:9d:74:18:8a:
1e:1e:1c:70:fd:21:49:4f:32:0f:fc:bc:50:1d:44:
1d:3f:a6:97:9d:65:65:15:d2:ca:f5:f2:94:74:0f:
b9:5e:dc:aa:00:d7:8e:f4:d4:b7:76:5c:e4:48:4a:
56:e0:6b:ed:2a:8b:e7:dc:45:fd:5f:01:1a:3d:f2:
b3:79:8e:be:05:91:b4:10:5d:4c:08:42:7d:ee:f7:
e6:6d:81:74:c8:b7:14:16:b4:0f:6a:90:7d:bd:9f:
45:51:a7:66:3e:d2:5a:41:cf:41:31:15:e7:2d:22:
85:0f:08:bc:93:2a:e5:79:9f:01:99:9c:7a:9d:97:
93:1f:47:94:64:29:db:05:18:c9:ea:bc:d0:7f:55:
9d:72:0b:4d:09:fe:22:b2:e6:6d:ba:6c:3d:42:bb:
b9:84:4d:8c:2a:0e:eb:72:74:8f:cf:5a:45:1e:52:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A9:CB:47:8F:3E:6F:1A:C8:75:FC:EA:B9:0B:9C:D4:78:80:32:E7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PKnLR48-bxrIdfzquQuc1HiAMuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.130.0-88.216.133.255
Signature Algorithm: sha256WithRSAEncryption
43:6f:4a:ae:0b:be:2b:79:14:38:c8:34:3a:ca:aa:1e:dd:6d:
1a:4a:e2:00:ea:be:9f:33:31:33:b6:50:7b:81:0b:94:22:4b:
03:7c:96:a0:89:54:a1:94:05:d2:f5:d1:96:57:03:61:db:52:
56:85:63:85:18:54:98:5b:61:c4:63:b9:21:36:34:a9:b1:5d:
84:cd:c2:1e:dc:76:63:c7:84:80:cb:83:4f:24:c8:4b:e2:dc:
3a:c3:ba:6c:4f:5f:13:6d:3c:ae:d6:dd:4f:4e:81:dc:6d:f1:
d8:36:da:a8:12:ee:40:72:72:62:10:8b:e1:04:1d:f8:fb:f3:
cc:6f:02:49:bb:98:9d:be:37:98:a1:c6:1b:06:12:ba:17:2a:
e9:8d:14:e8:62:ac:1b:a9:76:4e:c6:6b:54:bc:a9:a8:fd:fc:
d2:eb:24:bc:8c:e7:9e:4f:91:31:5a:2f:ab:b9:e2:9c:be:c3:
71:5c:a8:a5:0a:94:ae:44:26:f2:93:e1:34:31:7a:33:82:af:
b5:e0:97:1d:4f:69:fe:d3:a1:3d:1b:8b:aa:c3:b6:31:1d:f0:
65:55:31:be:d4:28:1e:66:dd:4e:da:a4:02:d4:e5:86:b6:95:
7c:a3:22:78:23:d3:24:84:39:02:ea:a3:b0:9c:2c:74:4c:53:
33:8e:90:11
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYRwh7H1x6g1bz0sdj6WKJMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTEzMTAyNzMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2E5Y2I0NzhmM2U2ZjFhYzg3NWZjZWFiOTBiOWNkNDc4ODAzMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/OVmYE6Hu55ORAmInY1dVfHySrB
EcDSbWBPCKC38j12St8EVkBSvgVE+BuV2wLJi1y8EXYPd5CvrEB9jRePccG0LTwl
IbSz9QlPHzWWquTF9/3mnp10GIoeHhxw/SFJTzIP/LxQHUQdP6aXnWVlFdLK9fKU
dA+5XtyqANeO9NS3dlzkSEpW4GvtKovn3EX9XwEaPfKzeY6+BZG0EF1MCEJ97vfm
bYF0yLcUFrQPapB9vZ9FUadmPtJaQc9BMRXnLSKFDwi8kyrleZ8BmZx6nZeTH0eU
ZCnbBRjJ6rzQf1WdcgtNCf4isuZtumw9Qru5hE2MKg7rcnSPz1pFHlKN5QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDypy0ePPm8ayHX86rkLnNR4gDLnMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvUEtuTFI0OC1ieHJJZGZ6cXVRdWMxSGlBTXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFY2IID
BAFY2IQwDQYJKoZIhvcNAQELBQADggEBAENvSq4Lvit5FDjINDrKqh7dbRpK4gDq
vp8zMTO2UHuBC5QiSwN8lqCJVKGUBdL10ZZXA2HbUlaFY4UYVJhbYcRjuSE2NKmx
XYTNwh7cdmPHhIDLg08kyEvi3DrDumxPXxNtPK7W3U9Ogdxt8dg22qgS7kBycmIQ
i+EEHfj788xvAkm7mJ2+N5ihxhsGEroXKumNFOhirBupdk7Ga1S8qaj9/NLrJLyM
555PkTFaL6u54py+w3FcqKUKlK5EJvKT4TQxejOCr7Xglx1Paf7ToT0bi6rDtjEd
8GVVMb7UKB5m3U7apALU5Ya2lXyjIngj0ySEOQLqo7CcLHRMUzOOkBE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org