Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VnB8iLKVN99FtMZito8LGM15GNk.roa
File: VnB8iLKVN99FtMZito8LGM15GNk.roa (raw, json)
Hash identifier: YuMcynObU30M8FyOxVIC3sWIEDgveYXN1RvbOgiBjbU=
Subject key identifier: 56:70:7C:88:B2:95:37:DF:45:B4:C6:62:B6:8F:0B:18:CD:79:18:D9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184F2C5D0CF2A90E43D0D9BF686FB1A0F11
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VnB8iLKVN99FtMZito8LGM15GNk.roa
Signing time: Thu 08 Dec 2022 17:26:01 +0000
ROA not before: Thu 08 Dec 2022 17:26:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 88.216.212.0/22 maxlen: 24
84.32.210.0/23 maxlen: 24
84.32.208.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.232.0/23 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:c5:d0:cf:2a:90:e4:3d:0d:9b:f6:86:fb:1a:0f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 8 17:26:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56707c88b29537df45b4c662b68f0b18cd7918d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:e6:7b:3b:ac:30:74:d4:35:4b:3c:da:68:
37:a2:d8:45:51:f8:ed:b6:89:0c:82:3c:f5:77:a1:
b4:da:59:ca:98:94:10:37:87:0b:5d:ef:b0:cd:96:
cc:11:32:fe:5d:5c:e1:cd:f9:0a:aa:5c:a0:56:fc:
b4:f6:17:89:87:83:44:1b:35:41:98:c3:d2:eb:2d:
bc:49:71:a8:af:0c:67:58:50:16:af:52:9c:ae:d9:
fa:87:b1:57:ef:92:da:05:6a:26:44:8c:d3:26:f3:
9d:5b:40:f3:f1:c5:21:34:e3:78:18:34:af:1b:91:
b3:ca:f1:82:2f:0a:31:bc:10:8f:63:13:bf:75:54:
23:88:fc:4f:2d:cc:a0:f7:c5:3f:4e:98:2d:d6:66:
e7:83:23:71:fc:bf:63:bc:f6:d8:b6:e0:2d:e3:e0:
4f:bc:f7:0d:db:06:5d:d9:31:e4:de:82:24:e2:55:
37:02:25:85:4a:e7:dc:66:01:2f:69:d9:c6:01:31:
97:b4:ca:e8:48:7e:6c:e0:5a:ee:6d:cd:fe:b0:39:
ab:54:87:0d:05:2d:fa:6f:ed:17:c6:d0:c6:88:bc:
12:20:97:7d:44:84:64:bc:f6:3f:07:33:80:9a:82:
94:94:13:32:9b:78:66:52:2b:cc:30:56:19:29:eb:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:7C:88:B2:95:37:DF:45:B4:C6:62:B6:8F:0B:18:CD:79:18:D9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VnB8iLKVN99FtMZito8LGM15GNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.208.0/22
84.32.214.0/23
84.32.232.0/23
84.32.236.0/23
84.32.246.0/23
84.32.252.0/23
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:64:48:ef:c1:fc:f0:ee:df:3b:12:2d:e8:1b:07:7c:ff:64:
60:c3:e8:8e:4d:0d:78:e7:cb:bb:be:56:72:69:50:cd:17:83:
bb:f4:3c:28:19:46:3f:b9:3d:81:37:c1:0c:0d:bd:14:23:0e:
20:97:c9:b7:df:77:f3:a4:79:df:72:37:63:26:d9:93:48:54:
e2:62:9d:23:02:c9:73:b2:71:e6:3f:81:98:50:69:60:d2:0e:
60:a0:2b:84:15:93:7f:88:e2:2e:ec:f2:43:fc:f6:79:f9:4b:
49:ba:3c:48:51:91:3c:f5:f3:3b:ec:7a:49:40:07:59:36:ad:
8f:ac:cd:d6:51:04:b8:3f:9d:c3:ce:d2:54:cd:4e:22:b6:b0:
44:5a:dd:8d:22:2b:62:59:44:dc:30:95:cf:9a:a3:a1:86:a0:
b9:de:b8:23:df:8b:c3:4d:8c:bf:e5:07:a8:f0:13:e9:a6:31:
07:14:72:de:d8:fd:ce:3c:97:36:c7:67:ab:34:c1:b6:02:c1:
82:50:b8:28:bc:f8:d7:0e:ed:f8:06:22:d5:2c:9b:ad:aa:fa:
69:b1:cb:a0:c2:e3:0e:47:e7:a9:79:2e:75:7e:c8:86:54:67:
f0:de:1f:9c:07:40:f3:58:9d:68:54:10:66:1d:12:3b:df:56:
94:c7:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org