Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UrOxSsrUweOVHGE2sonJkFTYy18.roa
File: UrOxSsrUweOVHGE2sonJkFTYy18.roa (raw, json)
Hash identifier: 1bh6WIMKn05moWXkGZe43VFSBAiEELDVTscoIj7nrig=
Subject key identifier: 52:B3:B1:4A:CA:D4:C1:E3:95:1C:61:36:B2:89:C9:90:54:D8:CB:5F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01840E82ED9A778150FB8FB78B052065D923
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UrOxSsrUweOVHGE2sonJkFTYy18.roa
Signing time: Tue 25 Oct 2022 09:39:32 +0000
ROA not before: Tue 25 Oct 2022 09:39:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 88.216.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:82:ed:9a:77:81:50:fb:8f:b7:8b:05:20:65:d9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 25 09:39:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b3b14acad4c1e3951c6136b289c99054d8cb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:a0:c9:89:9d:58:cf:95:1c:8d:f0:e9:05:
d6:6c:19:50:98:46:50:fa:18:73:c1:32:22:ba:b9:
e6:03:af:a1:1b:49:fc:5d:09:6a:45:48:50:f6:a5:
38:bc:f6:46:55:46:89:9d:bc:3c:00:bd:43:fc:53:
a9:80:6f:6f:ae:07:29:35:49:73:33:21:3e:43:4a:
29:2d:21:59:88:ff:0c:30:15:5b:7b:d8:c2:83:b2:
7e:f4:af:f2:c0:49:3c:22:51:dc:da:c2:79:84:4f:
52:2a:7b:ab:13:d7:24:db:ae:67:8c:43:91:f8:5a:
17:37:44:c6:b2:b1:1a:dd:93:23:a8:1c:c3:2f:a3:
f9:2b:b1:88:30:28:d3:88:52:b9:16:d3:c2:59:cf:
c7:0a:15:86:37:15:d5:f2:98:7a:4d:b5:53:e1:a4:
91:1c:fe:0a:9a:c5:da:6f:b1:3c:bc:c7:2f:98:94:
34:e9:5e:ba:fd:bf:a5:a5:fe:82:c8:f3:48:d0:21:
6f:fd:19:a1:69:3b:80:18:b5:6c:45:c3:70:56:fb:
eb:fa:79:b2:a5:ed:c2:af:25:cd:b4:13:91:8d:d6:
10:39:51:d7:dc:34:02:20:57:27:be:a8:29:f5:80:
0f:87:ac:88:21:2e:3b:61:bc:00:13:88:e1:5d:a5:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:B1:4A:CA:D4:C1:E3:95:1C:61:36:B2:89:C9:90:54:D8:CB:5F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UrOxSsrUweOVHGE2sonJkFTYy18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.240.0/21
Signature Algorithm: sha256WithRSAEncryption
88:2d:db:04:34:f2:92:4f:a5:b4:6a:ed:13:b6:fd:fc:d9:4a:
be:0b:45:4a:99:96:40:b2:ca:ad:1b:fa:06:79:70:ac:3b:1e:
f1:99:d9:34:af:69:7d:02:e6:39:2a:7e:a3:05:ce:50:9f:93:
f1:e5:0e:89:62:75:c0:f2:e4:bd:2e:54:ee:fd:b9:69:a4:f2:
c9:fd:64:5a:db:1c:ff:ab:c1:f2:e2:f0:6a:c9:4f:39:87:a3:
90:3b:22:c4:85:f5:be:46:6d:57:2a:6e:68:b8:34:c3:4d:c1:
69:00:73:24:0e:ba:09:2f:42:cb:28:9b:a4:77:da:5e:da:ad:
9e:26:a9:35:89:d4:24:d7:4c:8f:71:07:12:61:39:59:1f:02:
ce:ab:77:a4:c7:ae:f0:c6:83:f7:a5:07:91:85:2f:ba:c3:8f:
a6:cc:f5:bd:a3:56:c3:59:cd:12:55:9f:61:c1:e9:79:71:0f:
3a:fc:23:a4:c8:a6:e7:d0:75:1a:87:4f:34:aa:78:c5:b0:bf:
75:1a:cd:23:8a:5e:29:52:fa:fc:02:e4:7d:bf:79:6d:aa:4e:
69:b5:ae:2b:4b:71:3b:44:15:b6:c1:61:af:d4:d3:28:60:dc:
3d:1b:b3:48:86:92:10:bf:29:54:08:e5:d5:22:d1:3f:8f:be:
5b:e9:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org