Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_SPnrdAWMesSoQu1sr3upDba43I.roa
File: _SPnrdAWMesSoQu1sr3upDba43I.roa (raw, json)
Hash identifier: P3RNtoB6iggxHwi2IubFKBpgAOqXr0ItddoJj6vhTrE=
Subject key identifier: FD:23:E7:AD:D0:16:31:EB:12:A1:0B:B5:B2:BD:EE:A4:36:DA:E3:72
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0F67F6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_SPnrdAWMesSoQu1sr3upDba43I.roa
Signing time: Sat 26 Feb 2022 08:59:02 +0000
ROA not before: Sat 26 Feb 2022 08:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.180.0/22 maxlen: 24
88.216.196.0/22 maxlen: 24
84.32.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1009654 (0xf67f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 26 08:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd23e7add01631eb12a10bb5b2bdeea436dae372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:bf:bc:60:8c:78:b9:2a:47:a4:12:a2:c0:
e7:fd:79:78:4d:9b:a9:76:5b:70:c1:20:23:bc:73:
f9:fe:7f:5d:4f:fc:4b:8d:da:fc:cf:2d:a2:9d:7e:
f8:0a:43:ab:0e:72:f3:35:0e:b1:16:88:3e:40:74:
c6:0a:e4:c2:2f:9c:d5:0b:29:93:0f:5a:e7:59:a9:
58:ee:a7:df:49:cd:ab:a0:22:b9:ca:93:63:bd:3a:
10:4d:09:23:82:2f:38:97:da:10:d7:5c:84:2e:66:
21:9a:c7:a1:2f:e0:7f:b0:7a:e5:93:d3:82:23:95:
22:05:68:4a:4b:92:19:0c:1c:d6:82:63:ed:ea:46:
fb:da:bd:63:07:0b:0b:0b:da:76:20:aa:e3:11:2b:
88:e1:af:3d:2d:e9:b9:4a:10:36:81:23:09:e6:92:
04:d2:98:69:c4:5f:fd:5a:fd:41:3f:5f:83:6f:84:
02:77:40:ef:5f:01:17:8d:2f:c5:2b:cf:34:43:7d:
25:ad:88:23:e5:15:91:3e:8f:b4:9d:71:37:63:8e:
4c:9a:c1:d9:12:cd:b8:80:6c:1e:f9:b4:33:31:c1:
65:8f:e0:3e:69:1e:e1:b8:3b:a6:c7:97:5b:7a:d2:
ee:75:ae:da:31:21:23:74:77:bd:eb:59:ac:d0:bb:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:23:E7:AD:D0:16:31:EB:12:A1:0B:B5:B2:BD:EE:A4:36:DA:E3:72
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_SPnrdAWMesSoQu1sr3upDba43I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/22
88.216.180.0/22
88.216.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:2d:64:d3:eb:e7:06:22:74:3b:44:7c:0e:4a:c1:49:df:0d:
91:27:df:1c:26:78:68:01:9f:0a:52:c6:bc:91:bd:6a:8c:6a:
64:f6:09:9e:c0:8c:2b:d3:ab:51:02:7f:05:c0:26:a6:19:af:
36:4e:b2:c1:90:d3:d5:d3:1e:b6:96:1d:b3:dc:fb:ca:3c:73:
76:1a:f9:85:4e:7b:6c:f2:e4:a2:ae:3b:72:61:15:96:15:09:
c4:68:6e:46:23:64:f1:37:aa:cd:f9:d2:74:f6:82:54:d4:dd:
b0:3b:0e:8e:54:c5:aa:11:60:9c:27:18:66:0e:b5:a0:b0:88:
23:55:1c:62:7c:47:4c:db:4c:c6:2f:3f:55:b5:5b:53:4b:ca:
ad:e6:f1:5c:f2:0c:57:cd:e9:41:ec:55:17:0b:8f:3f:4f:d4:
57:fa:d3:ea:b0:0e:c1:c5:58:9a:cc:5e:9b:5a:13:84:88:e7:
c4:2f:e8:c2:f2:29:82:70:3e:1d:c2:ec:13:1b:fe:cd:46:4b:
34:7e:02:4e:3c:01:2a:20:7d:3f:62:57:b3:b0:49:2d:c3:7b:
0c:02:1d:fe:e9:ec:20:76:19:b3:34:cd:a9:c0:47:6c:94:53:
c0:5a:b3:28:e0:33:8e:f7:ce:6e:65:9d:33:39:96:bf:63:37:
bc:aa:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org