Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_V20hAe5f7t5697OsiTI33QPMms.roa
File: _V20hAe5f7t5697OsiTI33QPMms.roa (raw, json)
Hash identifier: tgNJA2RaNXa9YfUAp6Jk2lKOkpuLJ0imTCK3gTQDjY8=
Subject key identifier: FD:5D:B4:84:07:B9:7F:BB:79:EB:DE:CE:B2:24:C8:DF:74:0F:32:6B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0182AF6AF76600B6CFCD81F7ECA1BF60EAD9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_V20hAe5f7t5697OsiTI33QPMms.roa
Signing time: Thu 18 Aug 2022 05:26:39 +0000
ROA not before: Thu 18 Aug 2022 05:26:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 88.216.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:6a:f7:66:00:b6:cf:cd:81:f7:ec:a1:bf:60:ea:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 18 05:26:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd5db48407b97fbb79ebdeceb224c8df740f326b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:dc:62:c1:81:39:e3:00:a5:e4:9b:05:38:
02:ba:6e:a7:4c:78:0c:13:48:3f:57:90:30:da:16:
40:a6:fc:10:64:f1:29:7f:13:9f:ee:35:78:cc:fe:
d0:35:4d:b7:ac:cd:ea:4a:58:61:62:b8:31:e9:0f:
80:c8:1c:a5:e3:2f:db:37:ec:4b:86:6a:5c:67:02:
98:29:c7:8f:40:ec:a2:46:21:0d:bb:00:cd:2a:ab:
20:56:be:37:35:f3:51:fa:17:2c:f1:eb:0c:50:3f:
09:e6:46:29:b8:f0:84:c9:54:5d:d5:eb:97:ac:7e:
54:f6:b2:18:c1:7a:84:2c:f6:66:4d:ab:74:e4:69:
d2:63:cf:4e:20:42:3f:16:23:5c:1e:3c:5a:c6:3e:
78:1a:f9:2c:d5:89:0f:7b:9f:60:f1:9b:42:32:c7:
4a:bf:fd:fd:fb:46:b3:6c:fb:1e:11:14:db:1f:97:
c6:f5:0f:d3:32:ba:81:24:d4:b4:77:0a:50:5f:26:
29:70:89:ca:37:e2:0a:60:30:d0:31:5f:63:76:7f:
d9:1c:d9:97:fb:0b:6a:9e:7a:38:a7:30:59:be:a7:
7a:f0:b8:e0:75:dc:bc:29:d5:64:4b:f5:1e:ff:17:
e3:20:a4:e2:58:bd:92:aa:73:35:0f:6c:21:8f:db:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5D:B4:84:07:B9:7F:BB:79:EB:DE:CE:B2:24:C8:DF:74:0F:32:6B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_V20hAe5f7t5697OsiTI33QPMms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ab:c0:50:d4:d8:97:7f:1a:cf:e5:61:d4:f5:91:5f:4c:4a:
f9:ed:a9:06:06:c9:4e:4a:50:a7:f7:d9:60:7c:2e:dd:8d:11:
1a:03:d2:23:1c:ab:d9:db:14:7c:9a:f3:b9:c5:3d:cb:49:1f:
b3:2f:39:20:67:cd:d8:5f:aa:a6:b2:80:0c:f1:6f:99:fa:e4:
35:c5:56:71:29:c6:fa:93:06:5f:7f:37:a8:b8:74:bc:37:8c:
96:45:87:36:8d:1b:8f:59:f1:15:79:1d:1a:46:2e:a2:43:5a:
7b:d6:b2:77:2d:59:9f:c1:68:e7:01:e9:d4:a4:55:48:09:be:
3b:0e:63:43:58:69:7c:0b:04:09:ce:d9:98:6b:b6:a3:fd:6c:
1e:26:c0:77:66:fc:7e:e5:e8:23:03:ed:08:cc:1b:c5:bc:e2:
8d:bf:35:20:29:75:63:19:3f:c0:82:7c:7b:00:26:82:00:7e:
9b:a1:b3:d0:e4:5b:5d:48:eb:b8:4e:58:7b:f9:0b:02:dc:33:
4f:76:ef:80:04:a7:b6:d8:f2:8c:35:70:b2:13:18:68:b7:2b:
a6:37:7b:ba:f9:3a:c7:53:e0:b5:58:a1:58:7d:a8:9d:65:3a:
1f:5a:78:eb:27:c5:85:e3:1c:1c:95:69:2a:4a:46:20:40:bc:
ec:0a:0e:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKvavdmALbPzYH37KG/YOrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIwODE4MDUyNjM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDVkYjQ4NDA3Yjk3ZmJiNzllYmRlY2ViMjI0YzhkZjc0MGYzMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi//cYsGBOeMApeSbBTgCum6nTHgM
E0g/V5Aw2hZApvwQZPEpfxOf7jV4zP7QNU23rM3qSlhhYrgx6Q+AyByl4y/bN+xL
hmpcZwKYKcePQOyiRiENuwDNKqsgVr43NfNR+hcs8esMUD8J5kYpuPCEyVRd1euX
rH5U9rIYwXqELPZmTat05GnSY89OIEI/FiNcHjxaxj54Gvks1YkPe59g8ZtCMsdK
v/39+0azbPseERTbH5fG9Q/TMrqBJNS0dwpQXyYpcInKN+IKYDDQMV9jdn/ZHNmX
+wtqnno4pzBZvqd68Ljgddy8KdVkS/Ue/xfjIKTiWL2SqnM1D2whj9sYFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1dtIQHuX+7eevezrIkyN90DzJrMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvX1YyMGhBZTVmN3Q1Njk3T3NpVEkzM1FQTW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNiBMA0G
CSqGSIb3DQEBCwUAA4IBAQBvq8BQ1NiXfxrP5WHU9ZFfTEr57akGBslOSlCn99lg
fC7djREaA9IjHKvZ2xR8mvO5xT3LSR+zLzkgZ83YX6qmsoAM8W+Z+uQ1xVZxKcb6
kwZffzeouHS8N4yWRYc2jRuPWfEVeR0aRi6iQ1p71rJ3LVmfwWjnAenUpFVICb47
DmNDWGl8CwQJztmYa7aj/WweJsB3Zvx+5egjA+0IzBvFvOKNvzUgKXVjGT/Agnx7
ACaCAH6bobPQ5FtdSOu4Tlh7+QsC3DNPdu+ABKe22PKMNXCyExhotyumN3u6+TrH
U+C1WKFYfaidZTofWnjrJ8WF4xwclWkqSkYgQLzsCg4V
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org