Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eAg3OtfOWtPHfpvZz-8yVfWvlzo.roa
File: eAg3OtfOWtPHfpvZz-8yVfWvlzo.roa (raw, json)
Hash identifier: AsRfULDjzQFHXqqU3BFSdSDPnE7RroIlhbukdxmC/dE=
Subject key identifier: 78:08:37:3A:D7:CE:5A:D3:C7:7E:9B:D9:CF:EF:32:55:F5:AF:97:3A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 010AD3F3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eAg3OtfOWtPHfpvZz-8yVfWvlzo.roa
Signing time: Fri 13 May 2022 06:52:02 +0000
ROA not before: Fri 13 May 2022 06:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63213
IP address blocks: 88.216.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17486835 (0x10ad3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 13 06:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7808373ad7ce5ad3c77e9bd9cfef3255f5af973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:eb:11:88:eb:50:d1:3a:78:a4:8f:60:f4:
70:cf:ea:02:76:99:a6:50:57:b5:38:1c:94:9d:a1:
ed:a7:a6:4e:ae:af:c2:84:dc:47:9a:d2:53:8e:ef:
79:ea:3c:7e:05:ff:88:55:ec:3b:1b:55:84:f0:74:
44:d8:6b:67:0a:00:3f:74:0f:af:d8:e3:46:78:9e:
e7:ea:23:a2:6c:ba:46:11:c5:6f:60:38:1b:65:28:
d4:ee:11:a8:dc:ce:ee:0e:5d:d7:72:3b:dc:1f:dc:
61:f4:49:b4:6e:62:52:1f:38:6e:cb:2a:e0:1b:c8:
7e:1a:49:0f:11:d0:8d:61:be:bb:11:5e:c2:c6:6d:
26:ff:93:9e:9e:d4:fe:e7:d2:47:dd:7a:2d:93:b0:
47:3e:a7:3d:9a:28:fb:c4:57:5e:bc:41:34:24:ec:
8a:0e:ff:ae:90:5f:d9:9b:25:2c:65:2a:d3:bd:8a:
37:00:e3:91:5d:6d:9d:35:9c:29:1c:73:40:e7:dc:
9e:b2:97:e9:f3:8b:2d:41:69:44:ef:73:11:54:8f:
88:5f:80:b5:7d:98:3d:ef:9b:73:91:89:d8:9f:62:
28:e0:c7:ef:5e:84:fb:f8:02:dd:8e:0c:c7:ae:82:
3b:51:8d:f2:d9:a6:69:a5:eb:ac:09:e3:d6:cc:7f:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:37:3A:D7:CE:5A:D3:C7:7E:9B:D9:CF:EF:32:55:F5:AF:97:3A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eAg3OtfOWtPHfpvZz-8yVfWvlzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
85:27:ac:5b:da:d5:38:14:71:ca:59:21:c5:ab:70:ea:c5:3f:
86:b8:da:7d:af:4d:f2:19:2c:44:a4:24:53:e3:63:1f:f1:a8:
d5:f2:65:9f:81:9e:27:3f:68:a6:4f:c8:dc:ef:88:6d:c7:52:
b4:a2:0e:ef:6a:dc:7a:26:cc:f6:a0:1c:7c:a5:be:29:cd:ef:
f4:be:5a:15:1c:3f:c1:6f:88:0f:04:c4:55:77:0e:a3:d7:2b:
9e:5d:c1:53:07:28:3d:eb:b9:92:30:4f:fd:2a:bb:af:c9:78:
08:32:4d:15:aa:98:e6:5e:d8:6f:0b:cf:f2:fb:82:24:0f:04:
bc:6b:d4:6d:09:37:ae:77:b0:58:b3:5d:b2:36:c0:27:36:1b:
5d:7e:98:d0:42:2e:ab:0e:67:eb:b3:b6:e7:ad:45:af:ec:c5:
ed:c3:a8:23:91:6e:15:a9:31:2c:d6:c2:35:8f:7c:19:d2:88:
eb:0b:0b:71:a3:35:de:57:77:fe:91:25:f6:c0:a6:d3:0c:25:
89:8b:20:5c:7b:86:de:2c:9d:a4:0c:c5:47:26:6e:ea:42:52:
43:81:dd:5c:c9:25:be:c1:8b:9d:ee:52:2e:3b:a5:ce:e8:96:
c9:b7:4c:19:a8:76:78:82:13:da:75:42:26:9d:42:90:ab:5a:
d9:fb:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org