Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cdZVh4smvymqX6xGEi2o9DKohFs.roa
File: cdZVh4smvymqX6xGEi2o9DKohFs.roa (raw, json)
Hash identifier: 6EkBFP608UmkjMBTW4C3CHz859WZr+3oenHk979c74Y=
Subject key identifier: 71:D6:55:87:8B:26:BF:29:AA:5F:AC:46:12:2D:A8:F4:32:A8:84:5B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018388BA35F8A33BD7A0397A92A1BBB9986E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cdZVh4smvymqX6xGEi2o9DKohFs.roa
Signing time: Thu 29 Sep 2022 10:10:48 +0000
ROA not before: Thu 29 Sep 2022 10:10:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.90.0/23 maxlen: 24
84.32.88.0/23 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/23 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.134.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.16.0/23 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:ba:35:f8:a3:3b:d7:a0:39:7a:92:a1:bb:b9:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 29 10:10:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71d655878b26bf29aa5fac46122da8f432a8845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:31:da:3b:63:01:d2:fd:ab:06:54:03:5d:
b9:35:f1:59:32:0f:2c:e3:4e:0c:07:2c:39:6d:01:
04:7b:05:7e:6f:d5:d0:46:4b:ba:71:2c:67:fc:2e:
39:49:51:5f:66:38:f5:cc:4a:43:89:bd:47:7e:30:
50:86:62:88:63:cd:0d:bf:0d:92:c5:55:e4:21:2f:
cd:4e:c5:0a:1e:ee:0d:71:22:de:62:4b:b8:4e:1f:
47:a1:d2:80:da:2f:02:a0:55:38:2f:76:8d:6f:ff:
a6:18:20:99:24:b7:56:c5:2a:f3:b3:15:32:a8:f4:
1b:19:02:3a:8f:23:63:f1:b7:ea:0c:c0:f7:83:c2:
1b:7b:ea:fb:04:ed:87:21:fc:25:c3:d7:47:80:60:
01:97:01:7f:92:b1:c7:4a:85:98:f6:0f:02:52:d7:
55:49:2c:6c:11:35:cd:79:41:45:bd:a5:60:cf:22:
bf:76:22:00:72:38:b2:09:98:e2:7f:0a:fe:29:b2:
18:fb:ec:40:11:7c:d9:a3:3d:37:ca:31:01:d6:f9:
34:c8:8a:20:9a:cd:40:ae:0b:42:33:35:82:88:d0:
54:51:4b:ca:d6:b4:01:fc:6e:47:cc:82:07:c7:fd:
c0:b6:21:7d:77:8f:de:ac:00:f4:92:9c:64:3f:1c:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:55:87:8B:26:BF:29:AA:5F:AC:46:12:2D:A8:F4:32:A8:84:5B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cdZVh4smvymqX6xGEi2o9DKohFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
84.32.88.0/22
88.216.16.0/23
88.216.33.0/24
88.216.44.0/23
88.216.92.0/22
88.216.128.0/23
88.216.131.0-88.216.134.255
88.216.224.0/22
88.216.232.0/22
Signature Algorithm: sha256WithRSAEncryption
22:41:ae:1a:33:6b:1f:52:67:53:be:88:77:71:f1:17:91:92:
53:4f:4f:d8:f8:0f:98:d0:cd:b3:79:fe:32:22:c5:0b:d7:24:
35:6a:5b:98:9c:97:6d:c5:40:c4:1d:22:94:fa:9c:35:29:c1:
e1:8b:2a:29:cf:42:03:a9:1b:da:ff:0a:4a:d7:e2:de:e8:c9:
75:1d:46:e1:78:30:84:2c:6d:32:07:2d:28:f4:9d:09:61:0e:
a8:d9:fd:4e:c2:57:ba:80:98:2c:f5:33:59:a8:2e:38:c7:1a:
1c:c2:f2:73:bf:f7:21:f5:a7:a4:1c:7d:02:dd:77:cc:a7:de:
d8:c5:76:bb:ae:be:4d:5f:cf:75:e6:69:6a:15:c9:34:64:69:
f8:ca:cf:e1:46:3d:49:71:17:b9:7b:77:7a:5e:8c:02:96:88:
01:d2:e0:d2:0a:b1:c4:ed:39:bf:b2:27:f4:d8:d7:2e:5f:da:
58:60:2c:e0:40:ac:17:cd:3c:a1:50:2c:5b:6f:d5:b1:bf:f2:
71:0e:3c:d0:d5:75:a1:8a:54:11:3f:f5:ec:86:4c:04:00:4d:
35:f3:14:c0:2e:ed:12:8b:1f:8f:90:72:43:4c:58:a3:f3:7e:
99:e7:9c:ab:3c:7c:93:77:aa:99:0e:a9:72:d6:77:dd:e0:a7:
b2:82:04:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org