Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QiCgIqBLrAoOnJGBs9RKYwxyDQ4.roa
File: QiCgIqBLrAoOnJGBs9RKYwxyDQ4.roa (raw, json)
Hash identifier: vTl3MmX+vZxAU2cSyFUVrv5cIagKzEJ7sI/v15yP/I4=
Subject key identifier: 42:20:A0:22:A0:4B:AC:0A:0E:9C:91:81:B3:D4:4A:63:0C:72:0D:0E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184D19AE9FAC35E1C9A7E656E9C3F7F4E7B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QiCgIqBLrAoOnJGBs9RKYwxyDQ4.roa
Signing time: Fri 02 Dec 2022 06:51:41 +0000
ROA not before: Fri 02 Dec 2022 06:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 88.216.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:9a:e9:fa:c3:5e:1c:9a:7e:65:6e:9c:3f:7f:4e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 2 06:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4220a022a04bac0a0e9c9181b3d44a630c720d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:e5:72:a4:ef:5c:05:37:a4:3a:7c:7c:1d:
a2:f6:21:2f:a6:60:ae:69:05:b6:d9:1a:05:98:8a:
01:fe:b1:92:c9:ae:b8:fd:d3:bb:d2:72:0e:08:3b:
47:a6:fc:6e:40:d1:4b:6c:69:e9:ff:00:46:d2:61:
6f:71:ec:d1:32:e1:16:d1:72:f2:ad:47:b5:f6:74:
46:22:a1:b5:ce:27:a5:db:b2:2b:44:01:54:26:d8:
11:e3:6c:08:cc:23:35:ac:04:4f:8e:79:af:39:d0:
e1:55:ad:28:bd:ee:0e:02:28:e0:38:9d:a5:4f:37:
00:86:81:f6:38:6c:bc:b8:3f:25:d8:08:72:dc:40:
9e:eb:42:c9:8e:ee:46:c0:44:14:ef:6f:41:20:42:
ad:19:79:7c:1f:c0:b2:0c:84:d6:1b:a2:ec:87:b9:
71:aa:15:8d:dc:b3:54:f0:3f:8f:83:88:2d:c9:79:
aa:02:7b:8c:6a:45:f7:00:8c:9a:38:84:a0:de:a8:
c5:b0:bf:e0:35:62:6b:f0:37:96:f9:70:4b:8d:53:
80:b0:b7:17:f7:2b:7c:f0:a3:3a:f4:79:a2:e9:d0:
61:f5:6c:1c:a6:eb:b4:9b:d9:54:93:43:a7:25:4e:
a9:3b:1f:bb:54:f8:19:ad:a3:74:7b:51:2d:86:60:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:20:A0:22:A0:4B:AC:0A:0E:9C:91:81:B3:D4:4A:63:0C:72:0D:0E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QiCgIqBLrAoOnJGBs9RKYwxyDQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a1:92:e9:1f:02:45:5d:64:3c:96:c4:c5:4c:b2:81:18:2b:
40:b4:8c:bb:84:59:d7:e5:c1:23:e7:72:8e:bc:0b:41:30:6c:
fa:6b:e9:67:08:85:48:e8:57:bf:97:e3:0a:f0:5a:e2:3e:00:
67:d2:8f:e1:15:ef:cc:90:e4:ac:11:49:93:ff:26:85:eb:2f:
99:0f:8f:8b:66:d5:0a:de:35:39:b8:37:c9:20:ea:73:59:08:
0f:84:8b:5a:8a:28:b3:8a:d0:74:5d:7d:0e:e6:b4:ab:e1:16:
fc:ce:ea:bc:e2:e4:a2:88:d9:e8:9d:06:77:cc:98:9c:c3:7b:
fd:50:d9:11:c7:05:90:11:52:91:0d:19:a9:70:a3:bb:99:40:
32:d0:2d:58:9b:cd:ce:be:6d:e6:57:2c:84:8e:03:c7:c4:16:
67:f1:8b:bf:2e:59:b5:89:0a:28:c6:e4:d2:d3:d0:11:1c:de:
58:a5:72:0e:2d:4f:c9:e8:bc:5f:53:56:1d:3d:d0:0f:8a:95:
76:73:c7:1d:3d:e6:f6:78:ae:77:3e:14:4b:18:f0:97:c9:49:
88:d9:7d:7f:61:4f:f1:c0:18:6c:e2:4b:e3:4b:2d:a0:40:0f:
be:45:f3:ca:13:24:2e:2f:8d:e1:89:24:10:4c:71:85:ac:05:
93:71:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org