Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cuHJyiLPOdbbypE_BxHdULzgZgI.roa
File: cuHJyiLPOdbbypE_BxHdULzgZgI.roa (raw, json)
Hash identifier: eP2Kg/s+zliwmiONYh+9B8MfzDf23DFJu2Mxbk0HzHw=
Subject key identifier: 72:E1:C9:CA:22:CF:39:D6:DB:CA:91:3F:07:11:DD:50:BC:E0:66:02
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018354BA216A2C26E220759BB0DA2B9A42AC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cuHJyiLPOdbbypE_BxHdULzgZgI.roa
Signing time: Mon 19 Sep 2022 07:50:27 +0000
ROA not before: Mon 19 Sep 2022 07:50:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 88.216.129.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/23 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.134.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.16.0/23 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:ba:21:6a:2c:26:e2:20:75:9b:b0:da:2b:9a:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 19 07:50:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72e1c9ca22cf39d6dbca913f0711dd50bce06602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:41:a5:5a:df:10:da:72:cb:a7:70:34:8f:
1c:d3:a0:fe:26:8f:33:91:7d:ef:5c:ad:60:0a:83:
1f:b3:c5:c9:51:2a:2c:69:d4:e5:f8:f8:86:5d:0c:
32:98:31:10:eb:e0:f4:d0:cd:59:b0:6c:75:8c:60:
69:25:aa:43:83:bc:3f:2d:3f:05:0f:d3:fc:8d:21:
06:82:fc:a0:88:fc:31:0e:60:85:b6:89:92:31:8f:
01:62:9f:18:41:e2:1a:79:97:2f:36:ff:05:1b:8f:
e1:b2:c2:cd:9f:e8:c6:5e:4b:30:96:63:ab:28:a8:
ce:ae:b7:d1:55:c1:3e:d4:ab:0b:c7:9c:c5:81:2c:
0c:8e:c5:2b:72:87:92:26:6a:0b:89:29:12:59:dd:
39:09:44:d1:76:fa:19:6d:a2:8c:8a:fe:43:61:c2:
17:d1:de:95:d3:10:d0:07:97:33:fb:77:06:f7:7b:
67:8a:1b:49:dd:46:d0:85:fe:ba:b8:35:51:5e:45:
65:6c:83:be:97:d9:ba:44:f8:95:8b:0f:62:04:8c:
e6:41:c4:18:9a:35:d9:e7:41:94:5c:e7:46:b6:d8:
b0:45:4a:c8:5e:b9:2b:d6:74:fe:c3:bb:82:98:b1:
57:9e:ea:b5:ae:0f:2f:1b:a7:78:b0:af:16:fd:8b:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E1:C9:CA:22:CF:39:D6:DB:CA:91:3F:07:11:DD:50:BC:E0:66:02
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cuHJyiLPOdbbypE_BxHdULzgZgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
88.216.16.0/23
88.216.33.0/24
88.216.44.0/23
88.216.92.0/22
88.216.128.0/23
88.216.132.0-88.216.134.255
88.216.224.0/22
88.216.232.0/22
Signature Algorithm: sha256WithRSAEncryption
10:dc:9d:93:15:6d:5a:67:a4:64:5e:19:92:27:7a:ef:fc:b2:
12:14:c4:83:49:d6:f6:8b:4f:00:ba:62:15:ce:e7:70:dc:32:
9c:fc:3b:97:3f:7f:c6:76:db:c8:2e:aa:ea:18:d3:a2:e3:07:
da:85:92:e4:42:3c:3f:46:01:f7:1c:5e:e6:bc:6a:da:d7:07:
fe:3d:44:18:bb:45:54:f8:1b:9c:37:35:9b:24:f4:dd:17:06:
43:41:fc:a6:2c:0e:6f:a6:75:3f:f9:31:e4:a8:d5:f5:d1:07:
81:d5:d9:ef:ab:26:79:ed:af:af:01:a5:9d:70:79:e8:84:6e:
5a:c4:c2:42:4e:b1:93:8a:21:85:ed:15:92:d3:cd:a1:f0:e7:
ec:15:d8:7c:c1:c2:fc:82:b0:d3:a8:3d:c6:ef:3a:bf:0e:ad:
4b:22:84:92:1a:42:d2:27:ac:4e:fe:1a:dc:b9:42:51:33:f0:
41:ae:56:02:49:6f:bf:5a:e5:e5:68:37:e7:7a:19:ac:b7:47:
dc:62:db:16:26:95:88:10:b3:27:20:66:57:ac:a3:69:a5:a2:
1b:cf:e8:ea:ba:9a:b6:54:2f:e3:60:82:41:7e:79:91:a3:29:
0a:8a:ef:d7:c5:99:a6:31:19:0f:f4:7b:58:f5:6e:88:45:93:
2c:5f:24:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org