Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZPh2-BIWcE5Kd1A8lWBwcLWBy7w.roa
File: ZPh2-BIWcE5Kd1A8lWBwcLWBy7w.roa (raw, json)
Hash identifier: NFcQw30/vlFurbqMnKwwFp2F1cGzGaEVWEHhzTAM8oE=
Subject key identifier: 64:F8:76:F8:12:16:70:4E:4A:77:50:3C:95:60:70:70:B5:81:CB:BC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: B4FB53
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZPh2-BIWcE5Kd1A8lWBwcLWBy7w.roa
Signing time: Wed 13 Apr 2022 16:24:23 +0000
ROA not before: Wed 13 Apr 2022 16:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 88.216.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11860819 (0xb4fb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 13 16:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64f876f81216704e4a77503c95607070b581cbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:d8:68:db:90:53:14:d1:62:62:cc:6a:2b:
ba:60:8c:51:37:d6:39:83:95:ea:73:28:85:5d:1a:
35:32:da:75:09:0d:18:33:ce:af:84:ed:8d:f9:61:
b2:86:f8:5a:6e:51:fa:09:6d:8e:54:97:aa:3e:f3:
b5:3e:b9:17:34:d7:6a:3f:d3:26:c1:86:93:f2:27:
c2:f0:2e:cb:88:60:85:b0:e5:9e:fb:21:d6:7d:86:
da:48:d1:08:5c:1a:ad:61:1f:3c:d8:93:74:63:74:
35:41:91:fc:0c:e3:39:45:39:36:27:6a:46:9f:71:
dd:80:e2:9d:4e:df:21:18:df:a7:3b:46:5f:25:d2:
b8:d3:04:1b:a0:b5:3a:fe:70:14:f8:bb:bf:f9:77:
60:e0:c3:c1:88:7b:6a:c9:66:9d:b5:11:d4:b6:3c:
b3:3f:fa:5c:ae:d0:52:e7:ba:e2:4c:03:6e:7a:bc:
0c:d9:7c:3e:de:98:c6:58:47:e2:a6:68:7b:19:49:
9f:ad:0a:cb:7c:c4:b9:fe:7f:09:79:55:7b:6b:ea:
6c:a7:de:88:04:c1:63:12:92:0a:64:98:46:6e:46:
37:49:6a:4d:7d:bb:44:a9:55:c9:a2:7f:13:e0:33:
80:35:3f:7f:e3:e9:43:cc:cd:31:cf:35:ca:c0:25:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F8:76:F8:12:16:70:4E:4A:77:50:3C:95:60:70:70:B5:81:CB:BC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZPh2-BIWcE5Kd1A8lWBwcLWBy7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.128.0/21
Signature Algorithm: sha256WithRSAEncryption
13:5f:82:28:75:56:63:3a:12:22:85:b9:52:66:f2:6c:69:b6:
2b:53:03:c2:3a:f0:67:4f:2a:14:a3:13:82:77:3d:77:7b:eb:
3f:62:d8:01:75:b8:88:32:ac:f8:f3:46:00:1d:ef:85:91:1f:
47:2b:7b:df:06:ea:67:96:e8:0b:99:46:55:e7:44:6c:97:c5:
ff:f2:a8:56:1b:73:07:ca:d7:55:80:b5:57:27:c2:88:4e:51:
15:94:7f:db:69:82:8f:00:2e:0b:18:24:08:5e:70:67:75:4c:
e5:96:61:b8:73:af:f3:28:51:a2:be:c6:33:94:bf:d6:5b:96:
93:82:d3:3d:d0:9a:b8:a8:b0:77:67:10:70:30:92:dc:89:7b:
33:98:b8:66:73:4d:15:45:17:68:26:17:d5:0e:18:4d:06:1c:
c3:bb:13:48:c1:ac:1b:02:1d:34:d8:52:92:d6:9e:f8:a7:ea:
97:38:ab:de:fc:a8:88:ff:00:d9:79:e6:28:fd:fa:ff:23:7e:
f8:fb:e8:a5:1a:a1:67:ea:83:e4:ed:94:e8:bc:d0:e1:32:f1:
e1:e8:a2:95:83:c4:32:84:a1:75:38:72:30:67:25:fa:59:32:
e3:d1:99:d2:a2:e6:9d:a0:e4:a6:23:aa:db:a0:31:fe:b2:b5:
4d:cb:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org