Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eSSq73YEKrhCOWGSAdtMJ7E7mmA.roa
File: eSSq73YEKrhCOWGSAdtMJ7E7mmA.roa (raw, json)
Hash identifier: +x7nIywzWN2MRWAz/1kMJdHpSjk6LdnsVDSPX8NyTeU=
Subject key identifier: 79:24:AA:EF:76:04:2A:B8:42:39:61:92:01:DB:4C:27:B1:3B:9A:60
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184D2F2F554A50F2B113540E75BB3CE7B2C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eSSq73YEKrhCOWGSAdtMJ7E7mmA.roa
Signing time: Fri 02 Dec 2022 13:07:28 +0000
ROA not before: Fri 02 Dec 2022 13:07:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.79.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
88.216.132.0/23 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.232.0/21 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:f2:f5:54:a5:0f:2b:11:35:40:e7:5b:b3:ce:7b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 2 13:07:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7924aaef76042ab84239619201db4c27b13b9a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ac:03:14:d4:f1:d3:ea:9b:e0:1f:84:3e:fc:
ba:72:20:33:4c:dc:49:df:33:d3:fa:ad:82:32:0d:
56:bc:e7:c2:08:65:31:a6:ca:ef:15:64:e8:e4:ee:
e8:e2:2d:31:ec:83:98:68:4b:9c:86:5c:b2:91:57:
a4:20:c8:2a:09:96:c9:30:0b:a9:32:bc:d3:0f:56:
3b:ea:36:e9:8b:23:dd:be:bf:7c:11:93:c8:b8:62:
1e:7b:19:f5:67:99:93:3a:66:11:f2:9c:74:bf:ce:
dd:ba:60:58:0d:28:10:4c:39:ef:56:9d:ff:41:5f:
4e:4b:72:5d:7d:82:2a:17:fc:13:79:82:fb:d2:3d:
e5:07:a6:d3:fb:88:f0:b1:e2:95:f9:aa:4e:18:97:
d6:06:fa:7f:48:38:79:fe:26:a9:f1:9b:43:12:9a:
ee:8e:98:10:8c:90:62:98:e9:f0:eb:be:e7:43:04:
7b:7c:fe:d7:60:b5:7b:ae:e4:39:ea:bc:e6:7d:67:
53:15:27:bd:83:f4:15:dd:e7:be:1c:95:d7:2e:7b:
43:c2:6b:0e:00:89:6f:62:ae:21:87:2e:9d:f9:4b:
12:4b:41:4f:4b:7d:e3:77:c1:fb:a8:3a:15:9c:0b:
df:91:38:3a:29:7a:c5:e2:eb:e7:d0:0b:45:36:69:
a7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:24:AA:EF:76:04:2A:B8:42:39:61:92:01:DB:4C:27:B1:3B:9A:60
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eSSq73YEKrhCOWGSAdtMJ7E7mmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.79.0/24
84.32.90.0/23
84.32.212.0/24
88.216.44.0/23
88.216.128.0/24
88.216.131.0-88.216.135.255
88.216.224.0/22
88.216.232.0/21
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
16:86:4f:8d:ec:ee:eb:95:20:90:18:8b:92:80:4f:aa:00:2a:
42:73:3a:98:2e:55:11:95:4c:3f:8c:a0:da:08:0c:5a:af:09:
07:3a:c4:8f:c2:ab:21:24:a2:75:e0:fe:ca:90:de:d0:31:fe:
16:ed:65:25:f1:22:30:97:43:74:1a:8c:0c:7a:b2:f7:4b:ef:
74:aa:ae:b5:d1:36:3d:ab:e5:a2:fb:22:6e:6c:ac:ee:e0:99:
a0:e1:12:94:d2:7e:6e:ba:c8:c4:1d:7b:32:2b:02:44:69:55:
dd:c0:9a:5d:e0:62:55:71:19:2f:d1:8f:22:6c:88:62:d9:cc:
9b:e6:8b:2f:89:9d:34:55:46:69:0e:f4:95:42:3c:0d:e3:ed:
64:8a:11:64:fe:e6:ce:3b:ff:eb:66:a0:5c:20:18:cd:be:61:
c5:53:29:50:f9:26:63:a6:fd:6e:6b:c7:2e:c2:81:82:da:06:
44:9d:b6:5c:09:38:b0:c5:0d:32:1d:9e:ac:90:39:c7:37:e3:
98:1d:05:77:a1:40:20:38:51:07:22:f7:12:c8:de:19:8f:5f:
23:c7:86:8e:b0:c3:39:b9:70:59:67:52:96:0a:00:80:1b:80:
e5:67:55:ff:c4:33:5b:d8:34:1a:bb:ed:62:25:40:1f:dc:de:
b5:b9:8c:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org