Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eNnCl2jz5V45r5PKD1UXWfJyqjo.roa
File: eNnCl2jz5V45r5PKD1UXWfJyqjo.roa (raw, json)
Hash identifier: EjnGtME0y45iJRjVtUC1IUC5y+8s4wVINejZkN3QN9U=
Subject key identifier: 78:D9:C2:97:68:F3:E5:5E:39:AF:93:CA:0F:55:17:59:F2:72:AA:3A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018507A2953BE57F3ECE5CB5384048B9ACDD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eNnCl2jz5V45r5PKD1UXWfJyqjo.roa
Signing time: Mon 12 Dec 2022 18:39:33 +0000
ROA not before: Mon 12 Dec 2022 18:39:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 88.216.131.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:a2:95:3b:e5:7f:3e:ce:5c:b5:38:40:48:b9:ac:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 12 18:39:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78d9c29768f3e55e39af93ca0f551759f272aa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:a6:63:05:48:5f:88:77:c2:02:c5:e6:81:
68:f4:60:cd:b9:6c:19:69:1e:9b:db:42:39:84:00:
bb:8c:33:49:9b:72:f8:aa:be:01:0e:07:26:b1:3b:
fd:e5:f6:2c:70:a3:1f:73:f6:fe:bd:37:bf:7a:a7:
93:49:a3:bc:33:fe:f1:d3:31:d5:ae:aa:dc:5b:df:
f7:f5:76:dc:20:a5:a7:bf:37:21:03:53:b0:b6:2b:
d5:96:bd:b5:a9:98:b9:15:6e:de:fe:d4:65:87:d4:
a7:8c:58:ab:5e:06:cd:d9:96:4a:d1:fd:b0:3f:0c:
fc:8d:24:f2:a3:93:d8:7d:7e:6b:2e:ee:24:20:59:
4e:b1:1f:43:37:30:b4:39:12:31:3a:6c:72:7f:13:
0a:c4:3d:c7:a5:dc:2c:55:94:f8:83:d3:bb:36:d7:
68:1b:79:c9:81:f2:43:88:af:80:b2:99:2a:14:e1:
8f:a0:9f:5d:6d:c9:d2:34:57:ad:d6:7f:aa:0f:36:
2f:aa:a4:e3:05:01:ef:ca:12:85:bf:fe:a8:b1:87:
0f:14:a3:0b:6c:4f:87:c3:39:df:d7:ab:8a:6e:9d:
98:1c:1d:a1:dd:82:54:0b:ff:17:25:e5:ef:82:fd:
dc:a7:0e:3c:b8:ff:5d:c8:24:52:82:30:33:a4:d6:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D9:C2:97:68:F3:E5:5E:39:AF:93:CA:0F:55:17:59:F2:72:AA:3A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eNnCl2jz5V45r5PKD1UXWfJyqjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.130.0/23
Signature Algorithm: sha256WithRSAEncryption
15:3b:57:d9:1c:d9:25:3a:29:66:4d:bd:7b:47:8f:c2:e4:19:
22:47:05:01:6c:97:44:65:08:d3:cc:f0:5c:d6:de:32:d1:32:
0f:7d:20:cb:76:07:e4:8c:75:2b:81:27:a6:ac:76:0a:bd:da:
b4:cf:97:5c:62:e0:78:d8:bb:a0:ab:5b:7c:9f:f4:06:9c:3e:
69:82:6a:dd:0e:d5:00:24:81:9b:67:3d:95:f0:3a:b9:06:7b:
ef:e3:7e:5e:75:bb:ea:a5:7e:f2:ae:8c:36:30:fb:75:4b:c9:
70:4d:1f:53:a8:ee:b7:e6:dd:e7:cd:19:0f:ca:c7:1c:a0:6b:
97:87:06:64:be:bc:4e:ca:ce:34:84:f8:46:02:e4:de:24:9f:
ae:10:db:c4:22:8e:0c:33:9d:10:30:46:fc:66:f9:c6:90:e6:
25:a3:d6:f0:aa:1f:6f:54:60:b2:42:1c:54:cf:a6:a9:98:d9:
5b:0d:8e:d5:24:cd:18:b5:71:32:7d:4e:84:10:63:b6:20:0c:
a5:b3:a0:e9:9a:97:08:79:6e:bf:da:9d:eb:7d:59:fe:66:99:
a3:1e:95:32:62:e1:3b:c0:e3:13:fa:64:b2:47:f7:e5:c9:8c:
e4:51:4b:6e:0b:69:dc:03:ca:fd:3c:7f:ea:a7:7c:89:c8:56:
c2:85:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org