Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_FTxR6iQxUhroPulFl_UvdV5nTk.roa
File: _FTxR6iQxUhroPulFl_UvdV5nTk.roa (raw, json)
Hash identifier: /Y+m8hMoobkiiC9OLgs3isLmciiKSHlpxWNerB8Qmag=
Subject key identifier: FC:54:F1:47:A8:90:C5:48:6B:A0:FB:A5:16:5F:D4:BD:D5:79:9D:39
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0182AD3E53330D7D19BFC59084885B8D2B30
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_FTxR6iQxUhroPulFl_UvdV5nTk.roa
Signing time: Wed 17 Aug 2022 19:18:39 +0000
ROA not before: Wed 17 Aug 2022 19:18:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 88.216.224.0/21 maxlen: 24
88.216.128.0/21 maxlen: 24
88.216.240.0/21 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ad:3e:53:33:0d:7d:19:bf:c5:90:84:88:5b:8d:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 17 19:18:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc54f147a890c5486ba0fba5165fd4bdd5799d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:95:f8:76:cc:41:e2:b4:26:b5:70:e3:85:
7c:fa:6c:a1:42:0c:2d:b4:66:5f:d6:f2:8a:47:57:
40:7b:32:76:35:03:37:d0:55:fc:d0:18:42:12:50:
50:f1:f2:51:d0:fd:cd:a8:af:5d:db:31:bd:d5:d4:
5d:79:bf:4d:63:e7:74:82:1d:86:d7:28:bf:8e:c6:
98:1a:d6:47:3e:22:cb:a8:57:96:aa:fa:a9:22:20:
08:f2:af:59:32:b2:07:a6:29:73:e6:a9:1c:a0:8d:
c9:38:f2:d8:f2:54:f1:ec:21:1b:b6:48:2a:05:c7:
c2:67:10:e5:32:33:47:80:a4:2e:07:b4:23:f3:81:
33:79:3b:b8:a7:16:88:84:18:2c:44:3e:e7:b1:6b:
39:7c:00:e6:e5:80:97:7b:1f:cc:e7:ce:db:5f:e1:
f0:20:f9:13:80:c1:44:36:2b:b6:dc:8b:42:58:a7:
65:e0:53:df:1f:ff:e2:f1:98:b5:30:4d:a1:c1:b5:
e8:92:8b:b7:67:dd:c0:dd:f8:b3:72:96:78:65:22:
d0:b3:10:e0:3e:f4:c9:93:39:c2:db:fb:e3:f6:7d:
26:c8:1f:a5:ac:2e:20:d4:3b:35:5d:fd:d6:b5:e0:
d2:46:36:c0:dd:50:ae:45:bb:d6:38:ad:c8:42:e6:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:F1:47:A8:90:C5:48:6B:A0:FB:A5:16:5F:D4:BD:D5:79:9D:39
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_FTxR6iQxUhroPulFl_UvdV5nTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.128.0/21
88.216.224.0/21
88.216.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:7c:ae:03:b4:e6:2a:27:4a:ad:49:4e:3d:10:54:90:8a:61:
9d:2e:0d:46:bc:4f:5c:1f:f4:40:9c:a9:8e:eb:91:13:1d:1f:
8b:6d:dd:3f:4d:0c:4a:06:ab:2b:32:70:c9:58:ac:71:82:9d:
58:22:3a:d4:42:25:2e:62:32:b7:86:09:ed:f6:7c:f9:85:1a:
84:fb:90:e7:54:93:b9:53:4f:2b:b2:a5:01:b3:f1:fe:a2:a1:
47:52:3b:0b:c0:e2:5f:7d:42:92:35:bd:c8:d5:29:22:5d:10:
37:c2:95:d2:b6:d3:08:90:7a:3e:68:0f:03:dc:5a:08:ca:76:
b9:91:2a:39:2c:f4:6f:fd:0c:f1:a2:9f:b6:ec:72:3c:e8:43:
c1:51:5e:01:05:85:f4:a0:4e:fb:98:57:7c:86:21:aa:d5:b7:
e8:f4:44:a1:0d:83:d0:e6:78:03:e8:ea:32:39:cf:d2:62:e2:
0d:4a:2d:e0:c6:6b:cb:52:0e:e8:d6:ea:79:ca:04:52:8b:c3:
4a:36:35:8d:bf:95:56:bb:79:0f:cf:ca:44:f8:71:c4:36:01:
18:d6:97:84:28:6e:47:e5:ed:05:c3:ee:d2:28:e4:de:02:77:
e0:1a:76:09:b7:2c:27:83:b5:ba:82:c5:5e:04:8f:5f:b8:2f:
7c:35:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org