Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PSFGw_Yt7V4vgec1h0Lw2wQ3HoU.roa
File: PSFGw_Yt7V4vgec1h0Lw2wQ3HoU.roa (raw, json)
Hash identifier: P7vxx26eSBXMFJpec56sm+YtHT2sdQIZBAv+0fvXNh4=
Subject key identifier: 3D:21:46:C3:F6:2D:ED:5E:2F:81:E7:35:87:42:F0:DB:04:37:1E:85
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183ABD60FA39F51FB5CA24CD02F2F7C0D68
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PSFGw_Yt7V4vgec1h0Lw2wQ3HoU.roa
Signing time: Thu 06 Oct 2022 05:47:56 +0000
ROA not before: Thu 06 Oct 2022 05:47:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 88.216.184.0/23 maxlen: 24
88.216.186.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:d6:0f:a3:9f:51:fb:5c:a2:4c:d0:2f:2f:7c:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 6 05:47:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d2146c3f62ded5e2f81e7358742f0db04371e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:5c:fb:e1:cf:0d:53:c6:a8:bd:31:61:57:
2c:d0:f7:3b:8d:87:51:80:71:d9:64:2c:93:48:a7:
77:65:70:0c:f4:c0:40:a4:64:d7:4e:0c:57:15:b6:
a1:3e:87:4a:0a:ff:91:00:02:0a:23:28:41:eb:9a:
57:6a:c7:7f:b1:34:c0:b1:d3:f2:e8:5b:1e:8f:fa:
c3:a5:35:d8:3d:5b:33:71:3b:ee:71:ab:f7:e1:c9:
d0:e0:11:84:c2:90:14:60:bd:4d:20:96:c3:02:48:
7c:50:61:c0:d4:32:f5:6d:5a:5c:2f:22:bf:8e:d1:
3a:6c:85:ed:fd:bb:55:69:1f:a7:84:a0:ef:cc:c6:
ca:6c:d7:0c:91:55:96:65:03:2e:51:8c:66:2f:c5:
d9:64:6e:2f:bd:fe:1f:3f:e3:4d:44:a0:33:01:ae:
e4:bc:52:57:d0:4c:96:bc:da:76:3a:40:91:3f:fd:
42:e0:e2:83:7b:f0:d3:bb:67:b2:fd:f4:0a:d6:39:
90:d0:2b:32:ce:2a:2c:24:50:23:42:28:e9:1c:b1:
fc:9a:e4:98:56:f2:45:82:07:9c:63:f7:9e:8f:14:
28:7c:b6:ba:f6:84:81:7a:92:c6:e5:b4:52:c1:34:
e9:5a:5e:22:63:69:ed:22:f6:7e:41:1b:e7:90:db:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:21:46:C3:F6:2D:ED:5E:2F:81:E7:35:87:42:F0:DB:04:37:1E:85
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PSFGw_Yt7V4vgec1h0Lw2wQ3HoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.92.0/22
88.216.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:d2:72:a0:13:c6:45:31:46:fb:0d:6a:ec:b4:60:4a:ee:70:
c4:30:65:e3:66:4e:02:b5:cb:1b:cb:29:11:3a:97:98:48:a2:
fd:c5:e5:40:e4:38:d9:6c:04:18:05:4f:cf:e5:3a:93:78:be:
c8:74:94:4a:e4:ed:1d:f0:ba:cf:a9:aa:3f:88:0a:3b:43:ef:
8a:d1:ae:cf:33:da:ed:3f:80:84:c7:0e:8d:aa:5f:4d:2f:36:
d5:28:91:ef:0b:50:be:d8:78:cf:d8:11:31:20:66:34:b8:d5:
b4:5c:94:a2:6f:24:bf:a3:0b:4b:8a:2e:67:48:d3:a7:21:ed:
ab:f0:56:d5:96:86:f8:96:c2:80:51:9a:fc:26:62:93:cd:81:
70:c5:12:fe:db:18:fd:4f:46:03:c3:ef:d6:b8:08:a3:49:fa:
8d:c7:a5:4e:3b:73:62:63:a6:69:ba:ba:8d:a1:c9:63:9c:00:
9c:71:d4:77:20:b4:ce:35:3f:92:36:10:a5:bb:f3:9e:ea:2c:
76:84:28:d6:0a:62:6d:5e:e2:e3:7c:f2:55:54:01:44:e2:af:
98:b7:4f:4e:3d:b7:c7:b8:73:59:fb:ad:87:88:72:a1:00:f6:
23:4d:e4:d1:d3:1b:a5:a9:0b:ab:eb:c6:c0:f7:3b:37:9e:e7:
79:67:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org