Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VJibsDYHS1elgSjJYNYps9EolKM.roa
File: VJibsDYHS1elgSjJYNYps9EolKM.roa (raw, json)
Hash identifier: ZquBUJeKhUEKVwmXzz8/zgiv3tyzK0atr6fGFGtVe/I=
Subject key identifier: 54:98:9B:B0:36:07:4B:57:A5:81:28:C9:60:D6:29:B3:D1:28:94:A3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018553F329C71DE49CAE906D011488F3CA44
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VJibsDYHS1elgSjJYNYps9EolKM.roa
Signing time: Tue 27 Dec 2022 14:18:42 +0000
ROA not before: Tue 27 Dec 2022 14:18:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 88.216.199.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:f3:29:c7:1d:e4:9c:ae:90:6d:01:14:88:f3:ca:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 27 14:18:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54989bb036074b57a58128c960d629b3d12894a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:26:3f:48:2e:82:ec:92:d3:c0:5d:4b:55:
10:6e:77:b3:9a:c5:e8:28:44:c1:67:ef:5d:93:20:
15:a7:fe:b3:2f:bf:13:c2:d4:32:c5:cd:ac:82:94:
91:1e:3a:66:73:f1:94:3c:56:00:78:9b:85:c2:71:
db:6a:a3:06:37:b5:97:ab:02:ae:ea:c9:2f:6c:e2:
fc:8d:1e:7c:df:91:ad:89:9c:62:50:92:c4:ad:f9:
69:d7:92:78:8b:7f:4f:b0:92:53:b1:28:bf:c1:0c:
44:25:cd:3a:9e:c3:38:fb:54:0c:59:d3:32:ae:68:
c4:19:8d:64:ad:19:30:e5:97:15:12:18:75:c1:82:
59:1f:5c:00:52:21:a3:63:83:36:3f:fd:2f:b4:8e:
41:43:a2:6f:ff:58:d2:1f:3c:ea:a7:de:1f:87:e5:
8d:d8:21:aa:e2:5a:f3:4e:0a:34:5f:ca:f7:7b:be:
10:3e:f8:10:af:86:5b:ec:75:e3:80:11:44:7e:8e:
3a:a1:bc:e1:9c:70:3b:ac:9a:95:7e:fd:3e:b4:26:
74:71:42:75:a5:8f:17:16:20:8e:96:93:2b:55:c3:
51:da:57:fd:7e:89:58:bd:a7:87:4e:de:bd:80:bd:
a3:c4:de:b4:da:68:ed:df:52:70:79:38:fb:36:05:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:98:9B:B0:36:07:4B:57:A5:81:28:C9:60:D6:29:B3:D1:28:94:A3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VJibsDYHS1elgSjJYNYps9EolKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.108.0/24
84.32.150.0/23
84.32.177.0/24
84.32.218.0/24
84.32.226.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/23
88.216.92.0/24
88.216.134.0/24
88.216.199.0/24
88.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:ea:a0:8b:b3:8f:20:aa:98:12:be:c8:53:ed:1b:2c:52:a9:
06:f6:ea:ff:79:a1:ee:e6:d0:ba:a1:9b:19:5f:7f:62:80:d5:
b2:95:15:c0:05:b1:29:c3:f2:d0:06:cc:7b:4e:b7:da:f8:a7:
17:5b:a9:d2:2d:51:7a:a0:5d:eb:0b:c2:64:86:68:d7:0b:0b:
a5:d0:d0:ee:19:d3:05:ca:ba:53:4b:09:30:92:4f:dc:d7:51:
a7:c5:6a:8b:48:e8:38:da:f5:71:6c:7b:7e:7c:c2:59:86:4f:
75:aa:bf:c6:dc:40:3f:fb:92:90:8e:2b:33:87:c7:0c:9e:e8:
d2:85:2f:c6:3e:36:27:b4:f6:45:be:44:d1:88:14:ed:2a:07:
81:01:78:1b:1f:00:a3:5f:ce:34:7e:51:d5:2b:17:8b:df:79:
ea:ec:a9:13:e7:27:6b:ca:d7:5d:69:66:38:2b:99:95:59:78:
04:b1:ca:73:24:8e:e5:12:0d:4c:94:a5:d4:6b:8a:ec:08:c2:
f1:63:3c:09:c3:72:3c:5c:43:31:45:7c:9a:14:5e:63:84:33:
18:cb:a2:a0:9a:2c:aa:a4:5c:15:7d:60:2b:3b:cf:73:f9:d1:
96:da:ff:04:34:b6:d1:02:62:64:c5:94:31:ea:35:43:72:05:
68:63:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org