Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T1VmMgQTUc6oMlRk-s6MqM4KjzU.roa
File: T1VmMgQTUc6oMlRk-s6MqM4KjzU.roa (raw, json)
Hash identifier: PSnl0hFHTCRv6SogIR0SFag63s5SMuZmOoCxhwWMmec=
Subject key identifier: 4F:55:66:32:04:13:51:CE:A8:32:54:64:FA:CE:8C:A8:CE:0A:8F:35
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018474DDCC3FAA8516C6C218DF9700654F66
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T1VmMgQTUc6oMlRk-s6MqM4KjzU.roa
Signing time: Mon 14 Nov 2022 06:40:03 +0000
ROA not before: Mon 14 Nov 2022 06:40:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 88.216.188.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
88.216.91.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:dd:cc:3f:aa:85:16:c6:c2:18:df:97:00:65:4f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 14 06:40:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f556632041351cea8325464face8ca8ce0a8f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:08:a1:15:8d:ab:e6:2d:88:7a:94:ea:50:
43:33:17:02:b1:2a:21:71:dd:70:19:fe:fe:a8:3d:
af:93:35:ef:d4:5d:44:c1:37:cb:3d:41:40:a3:55:
ad:6e:51:7f:c6:51:32:e9:89:2c:c2:58:37:cc:2d:
e3:0f:19:a8:76:96:47:b9:bc:df:0e:d4:89:d4:30:
4a:68:9e:0a:53:ca:b0:8a:1c:ec:8f:d7:56:2e:9f:
da:af:9d:e2:3d:3d:b7:ed:65:3b:02:e7:93:6c:e1:
94:e6:e3:df:e7:cd:1e:74:72:a3:db:4b:22:42:e3:
6a:62:a2:b9:5e:1a:d3:6a:3b:38:5e:bf:87:b4:bb:
ce:a3:a2:9a:f8:c3:e5:aa:4b:2b:88:57:7b:44:5c:
16:4b:16:16:1e:b0:26:03:08:78:e0:f5:66:a7:7a:
e2:dc:9e:0b:49:b2:c3:0d:11:3b:3e:f4:69:88:9e:
39:26:e5:fe:16:32:c3:34:bd:33:48:9b:66:5f:b2:
31:37:97:d2:15:f2:58:c8:b9:7e:a5:7f:78:fb:e1:
74:51:ae:78:1b:fb:3d:38:82:64:53:28:37:3d:dd:
75:5a:22:3f:88:e5:e2:df:bf:b1:1d:ce:d6:3d:c1:
f6:e2:29:a5:6e:3b:c0:ef:4e:a8:81:99:72:f6:6c:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:55:66:32:04:13:51:CE:A8:32:54:64:FA:CE:8C:A8:CE:0A:8F:35
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T1VmMgQTUc6oMlRk-s6MqM4KjzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0/24
84.32.15.0/24
84.32.42.0/24
84.32.44.0/24
84.32.46.0/23
84.32.49.0/24
84.32.60.0/24
84.32.63.0/24
84.32.65.0-84.32.66.255
84.32.68.0/24
84.32.86.0/24
84.32.90.0/24
84.32.92.0/24
84.32.94.0/24
84.32.227.0/24
84.32.255.0/24
88.216.2.0/24
88.216.35.0/24
88.216.40.0/24
88.216.91.0/24
88.216.102.0/24
88.216.188.0/24
88.216.190.0/23
88.216.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:63:ad:bd:5e:ff:7f:fe:55:55:51:04:0e:fb:d3:60:11:20:
92:d4:a4:42:21:35:63:d4:74:8c:50:b0:12:c5:f3:d8:c1:d4:
b3:31:0c:c5:72:97:45:80:4e:1f:d8:0c:48:eb:95:1c:c9:8e:
b9:80:6d:7f:9f:b9:1b:fa:bb:fa:0d:a2:b7:96:75:12:6b:0b:
80:5c:87:67:db:ba:75:07:a7:73:7c:63:9d:38:ab:62:64:ce:
81:1a:da:31:fe:58:ce:55:3a:59:e7:f6:97:3b:53:62:85:b0:
fc:5b:68:74:75:11:03:d0:89:fe:b5:70:b5:4d:ce:4a:d5:8b:
93:bd:02:e7:f3:81:d3:dd:94:85:8a:1e:0c:8b:a9:25:69:94:
0f:08:1a:dc:fb:07:62:98:fd:fd:39:fa:a9:97:f4:77:6b:1f:
77:78:8a:ee:40:b7:91:a8:29:14:22:c2:d8:d9:be:c3:15:4c:
fe:81:46:f2:2a:b2:fc:43:02:ff:c7:ca:cf:4c:0b:73:3f:c3:
03:bd:f1:4b:8f:97:4e:d2:59:76:d2:8c:cb:df:f1:e0:48:b3:
10:61:29:80:da:fa:0f:b1:2c:36:07:13:5b:af:8a:bf:14:72:
f0:58:01:47:00:a4:27:57:56:1f:7d:93:21:5c:36:66:e7:69:
74:38:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org