Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cfGvT5x76bSCVHMbE7IdhfRVUdg.roa
File: cfGvT5x76bSCVHMbE7IdhfRVUdg.roa (raw, json)
Hash identifier: qXqCDlHB3mA60vsZD882SMJV41T/18z0o0vYRaSXLGY=
Subject key identifier: 71:F1:AF:4F:9C:7B:E9:B4:82:54:73:1B:13:B2:1D:85:F4:55:51:D8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01851492F5DB41C9BD60CA0139F0B0C0F821
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cfGvT5x76bSCVHMbE7IdhfRVUdg.roa
Signing time: Thu 15 Dec 2022 06:57:33 +0000
ROA not before: Thu 15 Dec 2022 06:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.52.0/22 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.6.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:92:f5:db:41:c9:bd:60:ca:01:39:f0:b0:c0:f8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 15 06:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71f1af4f9c7be9b48254731b13b21d85f45551d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:32:8a:b5:e3:73:bd:c0:11:04:0c:da:06:
2c:8b:5b:1c:fc:20:96:98:3c:ae:e2:aa:f3:10:1c:
8e:dd:a1:a2:c5:8b:f1:eb:7c:f7:73:35:14:22:92:
56:3f:43:7d:b6:b9:cf:00:cf:a5:a1:11:ff:58:7f:
a5:9c:4d:88:4b:23:d6:af:41:01:bc:ea:93:c0:25:
50:fa:2f:6f:7e:61:f3:8b:a5:67:ab:cd:23:de:bd:
9d:e2:cc:f9:4c:22:22:d1:e4:f4:41:19:ea:9f:61:
4b:24:42:fe:8b:d0:40:d2:2d:23:81:01:af:3c:29:
f6:a5:94:81:4d:c3:24:85:75:82:b2:5e:c2:7e:c1:
4e:d8:3d:44:60:34:ab:ac:3f:8b:33:6a:30:46:61:
46:5b:c4:29:77:d7:75:5b:9e:38:12:d3:e0:15:25:
d0:d1:bf:ac:a7:b1:eb:b0:e7:81:4c:d2:aa:78:01:
fc:85:e4:cf:52:0d:10:aa:c7:9a:ec:06:08:6e:f7:
ab:92:84:a1:a5:7c:3a:bd:0c:ed:aa:a3:45:21:95:
c9:52:42:de:25:5d:30:5d:21:39:6d:8f:c9:ff:0a:
d2:7b:75:b5:40:46:4a:fe:96:a4:a7:d9:16:a8:f4:
80:40:d1:6d:34:bd:ab:95:17:fb:a0:ad:eb:6d:a9:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:AF:4F:9C:7B:E9:B4:82:54:73:1B:13:B2:1D:85:F4:55:51:D8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cfGvT5x76bSCVHMbE7IdhfRVUdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.42.0/24
84.32.52.0/22
84.32.76.0/23
88.216.17.0/24
88.216.36.0/24
88.216.40.0/24
88.216.43.0/24
88.216.98.0/24
88.216.132.0/23
88.216.214.0/24
88.216.228.0-88.216.247.255
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
58:f2:e3:25:0d:1a:03:46:73:0f:bf:bd:90:77:b4:ce:a2:d2:
ac:15:60:86:9a:eb:56:3a:8c:13:62:05:5b:62:8a:29:36:9d:
84:41:84:43:31:25:8e:99:b5:9c:5b:1c:45:f7:b6:4a:98:0d:
3a:2a:31:34:d7:d8:27:6d:d8:9a:b5:8e:e0:9b:11:15:d4:c1:
75:0a:65:60:d0:60:ae:4c:d7:d3:49:7f:20:5f:69:b4:01:60:
34:12:ed:f4:aa:e5:dd:84:3b:7d:6a:89:ca:ae:89:03:19:2f:
2a:6a:41:98:8b:7e:ca:19:55:0b:f5:06:8e:c1:ef:b7:dd:dd:
19:23:8e:38:09:9b:f5:10:8e:60:e1:09:5e:a2:2b:8e:53:0c:
cf:5f:38:df:7e:8c:a0:33:bd:6d:21:0c:73:fa:f2:63:7f:d3:
59:a5:b5:bd:30:ec:7d:b0:fd:7a:48:87:44:c1:f9:7c:cb:1c:
7a:b2:5a:56:6e:6c:e1:fe:1a:61:fd:e9:8a:5b:e7:98:04:52:
96:9d:08:7b:9b:06:83:a4:7c:91:f1:e6:49:8f:46:1a:db:b4:
43:41:00:23:e7:95:c9:e3:fc:96:43:94:09:9d:21:6b:20:5e:
95:d7:a7:15:ed:0c:ad:30:5c:0b:33:52:ca:66:94:fd:fc:94:
85:93:b4:21
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYUUkvXbQcm9YMoBOfCwwPghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMjE1MDY1NzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWYxYWY0ZjljN2JlOWI0ODI1NDczMWIxM2IyMWQ4NWY0NTU1MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAoyirXjc73AEQQM2gYsi1sc/CCW
mDyu4qrzEByO3aGixYvx63z3czUUIpJWP0N9trnPAM+loRH/WH+lnE2ISyPWr0EB
vOqTwCVQ+i9vfmHzi6Vnq80j3r2d4sz5TCIi0eT0QRnqn2FLJEL+i9BA0i0jgQGv
PCn2pZSBTcMkhXWCsl7CfsFO2D1EYDSrrD+LM2owRmFGW8Qpd9d1W544EtPgFSXQ
0b+sp7HrsOeBTNKqeAH8heTPUg0Qqsea7AYIbverkoShpXw6vQztqqNFIZXJUkLe
JV0wXSE5bY/J/wrSe3W1QEZK/pakp9kWqPSAQNFtNL2rlRf7oK3rbakXkwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFHHxr0+ce+m0glRzGxOyHYX0VVHYMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvY2ZHdlQ1eDc2YlNDVkhNYkU3SWRoZlJWVWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAVCAGAwQA
VCAqAwQCVCA0AwQBVCBMAwQAWNgRAwQAWNgkAwQAWNgoAwQAWNgrAwQAWNhiAwQB
WNiEAwQAWNjWMAwDBAJY2OQDBANY2PADBAJY2PwwDQYJKoZIhvcNAQELBQADggEB
AFjy4yUNGgNGcw+/vZB3tM6i0qwVYIaa61Y6jBNiBVtiiik2nYRBhEMxJY6ZtZxb
HEX3tkqYDToqMTTX2Cdt2Jq1juCbERXUwXUKZWDQYK5M19NJfyBfabQBYDQS7fSq
5d2EO31qicquiQMZLypqQZiLfsoZVQv1Bo7B77fd3RkjjjgJm/UQjmDhCV6iK45T
DM9fON9+jKAzvW0hDHP68mN/01mltb0w7H2w/XpIh0TB+XzLHHqyWlZubOH+GmH9
6Ypb55gEUpadCHubBoOkfJHx5kmPRhrbtENBACPnlcnj/JZDlAmdIWsgXpXXpxXt
DK0wXAszUspmlP38lIWTtCE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org