Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SBhIXD0Y0pDQy6OlBfjZtPDttPE.roa
File: SBhIXD0Y0pDQy6OlBfjZtPDttPE.roa (raw, json)
Hash identifier: ULFl5HgasvYA7PO6hoCOo5qlvGOf9UVvyON0Mc+TLao=
Subject key identifier: 48:18:48:5C:3D:18:D2:90:D0:CB:A3:A5:05:F8:D9:B4:F0:ED:B4:F1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01849E16616FC8774AD477188658103DC20D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SBhIXD0Y0pDQy6OlBfjZtPDttPE.roa
Signing time: Tue 22 Nov 2022 06:46:17 +0000
ROA not before: Tue 22 Nov 2022 06:46:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 84.32.62.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:16:61:6f:c8:77:4a:d4:77:18:86:58:10:3d:c2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 22 06:46:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4818485c3d18d290d0cba3a505f8d9b4f0edb4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:9c:d6:0d:5d:f8:ac:73:86:ec:cb:e8:81:
9c:9b:bb:a5:b4:f5:35:1f:e1:37:f1:a0:ea:48:cd:
51:76:70:6d:7f:ca:fd:0d:f2:75:95:9b:4b:ea:a2:
a7:c5:a6:a9:f8:b5:a4:30:58:ad:ff:8c:e4:43:0a:
89:f7:4b:63:02:e2:a8:2e:1c:c0:f5:b3:57:fa:cb:
76:07:f3:ca:15:dd:17:d3:c5:f1:b6:f6:15:ea:d1:
0e:e7:ba:67:cb:51:0e:79:eb:5b:17:60:4e:a2:7c:
b3:a6:4e:7c:52:22:8c:cc:5e:86:e8:26:cf:7d:fc:
c6:a1:39:a8:22:52:a8:62:ab:52:aa:39:f2:e7:78:
4c:24:1d:0a:1d:71:b5:2f:41:31:4e:ea:a4:6d:cc:
0b:c2:a1:3a:17:55:d3:c1:72:95:76:a5:1c:32:9c:
0d:79:b0:ee:e0:5c:6b:6e:b9:9b:34:ee:da:f9:77:
13:20:e0:e9:08:2c:11:61:83:cd:4b:40:9c:6e:11:
f6:97:ac:1e:9f:6a:1c:53:a8:2d:35:1c:91:54:6c:
1f:f5:04:a4:2b:0b:e2:b3:7f:ec:e0:42:db:b1:d9:
4f:ba:d6:f7:5d:f9:bc:91:02:dc:2f:0e:88:85:1e:
56:db:e4:13:cb:11:f5:17:e6:7c:de:d9:1d:d5:05:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:18:48:5C:3D:18:D2:90:D0:CB:A3:A5:05:F8:D9:B4:F0:ED:B4:F1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SBhIXD0Y0pDQy6OlBfjZtPDttPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.62.0/24
84.32.83.0/24
88.216.16.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3a:0c:36:88:61:d3:d6:32:44:d4:02:e0:79:7f:36:f5:31:
3f:c5:7d:f3:f3:42:f1:62:43:6f:29:4b:a2:5c:43:c5:b4:9a:
1b:01:69:e7:a5:f5:7f:8e:7c:90:b6:26:32:8e:dd:c2:e1:96:
50:43:cb:5c:82:f8:b7:05:5f:32:b5:27:e8:ec:b8:13:36:fb:
a9:f0:b7:00:d7:52:a1:f2:b4:dc:5a:4b:c1:9d:1f:67:0c:a0:
82:f9:65:54:29:f9:30:21:c0:c2:d8:85:68:20:a1:ab:4b:47:
6b:63:1b:fd:f8:2d:3a:a2:76:57:46:f0:c4:33:9e:21:23:7c:
66:3a:c5:68:d1:1f:2b:da:88:63:ed:38:88:a3:9d:4b:19:5e:
3f:82:08:14:e1:e7:fe:10:73:fd:1f:6f:01:ca:7e:56:a5:4b:
ef:6a:81:47:a1:57:3f:76:fd:21:14:12:76:03:87:a7:bc:e6:
7c:52:45:c8:5f:52:65:00:8c:e8:65:c8:ea:96:aa:d3:ab:06:
c0:78:b5:c9:93:5f:dd:da:63:4c:69:18:28:5b:e6:fb:0b:e2:
fd:1c:bd:52:d9:52:af:6e:84:0c:c8:55:f9:f3:25:19:88:28:
a0:e0:09:09:ec:33:0a:1a:05:38:f4:7f:62:4d:9c:76:0a:45:
07:07:8b:4f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYSeFmFvyHdK1HcYhlgQPcINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTIyMDY0NjE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODE4NDg1YzNkMThkMjkwZDBjYmEzYTUwNWY4ZDliNGYwZWRiNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQSc1g1d+KxzhuzL6IGcm7ultPU1
H+E38aDqSM1RdnBtf8r9DfJ1lZtL6qKnxaap+LWkMFit/4zkQwqJ90tjAuKoLhzA
9bNX+st2B/PKFd0X08XxtvYV6tEO57pny1EOeetbF2BOonyzpk58UiKMzF6G6CbP
ffzGoTmoIlKoYqtSqjny53hMJB0KHXG1L0ExTuqkbcwLwqE6F1XTwXKVdqUcMpwN
ebDu4FxrbrmbNO7a+XcTIODpCCwRYYPNS0CcbhH2l6wen2ocU6gtNRyRVGwf9QSk
Kwvis3/s4ELbsdlPutb3Xfm8kQLcLw6IhR5W2+QTyxH1F+Z83tkd1QXDDwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEgYSFw9GNKQ0MujpQX42bTw7bTxMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvU0JoSVhEMFkwcERReTZPbEJmalp0UER0dFBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVCA+AwQA
VCBTAwQAWNgQAwQAWNjFMA0GCSqGSIb3DQEBCwUAA4IBAQBVOgw2iGHT1jJE1ALg
eX829TE/xX3z80LxYkNvKUuiXEPFtJobAWnnpfV/jnyQtiYyjt3C4ZZQQ8tcgvi3
BV8ytSfo7LgTNvup8LcA11Kh8rTcWkvBnR9nDKCC+WVUKfkwIcDC2IVoIKGrS0dr
Yxv9+C06onZXRvDEM54hI3xmOsVo0R8r2ohj7TiIo51LGV4/gggU4ef+EHP9H28B
yn5WpUvvaoFHoVc/dv0hFBJ2A4envOZ8UkXIX1JlAIzoZcjqlqrTqwbAeLXJk1/d
2mNMaRgoW+b7C+L9HL1S2VKvboQMyFX58yUZiCig4AkJ7DMKGgU49H9iTZx2CkUH
B4tP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org