Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dnAK12BHoSQq-iHzWVhwP0vK1Z0.roa
File: dnAK12BHoSQq-iHzWVhwP0vK1Z0.roa (raw, json)
Hash identifier: gniCaq2DwfteHGk1yhqhPfTwsSpKigP+UuOX6KiQNc0=
Subject key identifier: 76:70:0A:D7:60:47:A1:24:2A:FA:21:F3:59:58:70:3F:4B:CA:D5:9D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184E13805D7FC1B9CE5CCE0F23EEEA3D5CE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dnAK12BHoSQq-iHzWVhwP0vK1Z0.roa
Signing time: Mon 05 Dec 2022 07:37:35 +0000
ROA not before: Mon 05 Dec 2022 07:37:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:38:05:d7:fc:1b:9c:e5:cc:e0:f2:3e:ee:a3:d5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 5 07:37:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76700ad76047a1242afa21f35958703f4bcad59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:5e:e0:5e:65:45:78:d5:b4:ab:de:16:ef:
e3:4b:d5:35:ae:02:e1:a1:fd:f4:d9:4a:42:6b:81:
d3:b2:8b:2d:9a:ef:88:a1:28:c4:ff:f9:00:16:4d:
aa:27:c5:9f:03:78:a2:73:8b:dd:70:38:0d:f3:65:
20:34:87:0f:78:a2:28:70:24:1a:a6:57:42:13:e4:
8a:fb:95:d8:5b:51:3e:bb:69:79:f3:ef:81:64:39:
cd:91:dc:9d:98:ba:fe:ec:8a:10:fd:b6:ef:51:fd:
f8:90:7b:a4:03:a1:d4:96:3a:a0:ee:11:87:73:06:
39:06:92:bf:0e:c8:2a:3a:32:51:2e:f0:4b:53:41:
bc:51:c6:4d:1b:9e:7e:8a:43:e7:3b:a7:71:6f:86:
49:74:a0:a3:50:44:14:13:b7:c3:37:8d:53:3c:2d:
a0:05:e0:3b:ba:3f:a3:c2:e6:f6:f3:d6:3a:59:f5:
ab:54:8a:35:64:3a:66:f6:a9:cb:6a:3e:fb:e4:c2:
91:d0:8f:1a:59:41:fb:ce:c7:88:7e:5d:f0:a9:46:
d9:05:d6:03:5d:4f:30:1d:b0:06:b8:4a:ca:ca:7f:
6d:55:59:c7:62:2e:eb:ea:26:c1:49:55:14:dd:a9:
3b:69:b6:5b:02:ae:4f:d8:9c:60:7f:c9:54:b8:3d:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:0A:D7:60:47:A1:24:2A:FA:21:F3:59:58:70:3F:4B:CA:D5:9D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dnAK12BHoSQq-iHzWVhwP0vK1Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.226.0/24
84.32.238.0/23
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/23
88.216.199.0/24
88.216.210.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e9:3b:30:c4:26:15:91:05:72:1f:33:91:9e:2c:04:d8:10:
d7:a4:68:b3:64:b6:58:7e:4f:ee:fd:c1:25:6c:38:6a:9b:49:
92:c1:ca:f8:22:36:8a:83:71:54:c4:2d:00:73:a5:5a:2f:d4:
90:66:90:b3:f9:58:96:d3:d3:a3:38:a6:ff:7b:21:78:36:60:
ff:dd:18:98:81:b8:0e:bd:4c:f9:e0:e6:ad:a5:37:83:d4:7f:
4a:cf:b6:88:18:63:7d:a2:71:88:36:c7:04:cb:ba:6b:6a:95:
00:a8:71:09:55:67:ff:60:08:bf:2e:c4:72:c8:dc:74:c6:aa:
c8:4a:42:7f:a9:22:53:d3:4a:25:e6:67:a3:56:e4:3b:94:8b:
31:11:44:17:e9:ca:d5:bf:29:9a:72:f0:9d:23:5c:61:3b:7b:
66:24:1f:55:ac:88:e0:17:11:4b:9d:76:00:c5:78:d7:b0:5c:
52:6d:73:33:2c:87:35:28:80:27:c4:8c:ec:3b:05:dd:20:aa:
50:bd:bc:1f:ff:be:a5:25:46:c3:c0:b2:16:6b:ef:92:7f:f5:
7f:0f:da:3d:db:28:74:21:74:c7:f6:45:f5:03:59:71:b6:89:
a6:7a:10:11:02:38:c0:de:e7:e1:ee:03:b2:9d:66:94:3b:78:
67:c6:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org