Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eX6Ce9l1voOVzc12h7V5S1KFUJU.roa
File: eX6Ce9l1voOVzc12h7V5S1KFUJU.roa (raw, json)
Hash identifier: 2eOpDiGf8snjENpepuxY1obRssL8acfC4vWevn5JhrM=
Subject key identifier: 79:7E:82:7B:D9:75:BE:83:95:CD:CD:76:87:B5:79:4B:52:85:50:95
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01826881A5DA6A9BAA020F6543D77C1EE602
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eX6Ce9l1voOVzc12h7V5S1KFUJU.roa
Signing time: Thu 04 Aug 2022 10:58:23 +0000
ROA not before: Thu 04 Aug 2022 10:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 88.216.186.0/23 maxlen: 24
88.216.184.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.34.0/23 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:81:a5:da:6a:9b:aa:02:0f:65:43:d7:7c:1e:e6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 4 10:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=797e827bd975be8395cdcd7687b5794b52855095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:b5:39:04:8b:c1:20:c0:54:ec:15:60:7b:
3f:b6:5a:00:f7:5f:48:0d:65:21:16:b4:a3:03:79:
e8:31:97:5c:b0:06:cb:f6:99:0f:d2:e5:ec:c0:c5:
b7:29:9b:3c:9c:7c:03:76:ff:91:30:14:7a:e8:22:
01:25:ba:d8:56:cc:cb:e7:bf:0c:77:36:51:73:16:
6a:01:f7:f5:5e:2b:cf:8a:47:8c:f1:b3:e2:68:6d:
f5:21:74:5b:8c:c1:fb:b6:40:cf:22:25:ee:66:16:
3d:a4:16:31:00:9f:ec:ad:40:ac:23:d7:70:c9:af:
fe:36:95:c5:70:68:9e:20:de:17:95:a1:25:e4:ce:
39:4b:97:5f:4a:5f:b0:44:69:61:82:7c:52:d1:e3:
13:81:ed:1e:9a:ce:7f:4a:89:5a:51:50:c7:72:11:
ab:43:21:f6:70:c5:bb:02:08:7e:97:a1:80:2b:1c:
dc:5e:bc:5b:44:5a:66:b9:bc:cd:0d:af:57:4b:8e:
69:4e:2a:25:28:13:24:8b:e7:3f:be:1c:e2:5d:24:
30:78:7d:1c:8c:3c:f9:4e:d7:fe:5f:36:97:3c:a8:
49:f8:ab:f4:25:3f:be:7c:17:4d:e4:14:31:12:d0:
ad:3d:45:9e:e9:70:9e:4d:b1:4e:9e:89:39:bd:77:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7E:82:7B:D9:75:BE:83:95:CD:CD:76:87:B5:79:4B:52:85:50:95
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eX6Ce9l1voOVzc12h7V5S1KFUJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/23
88.216.44.0/23
88.216.92.0/22
88.216.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:a3:7d:92:c6:53:78:d9:66:52:cf:f1:13:1e:64:e5:ab:d1:
8a:b0:7b:07:f5:3d:92:66:c9:f9:29:5e:ee:a6:04:73:19:4c:
46:cc:09:63:a5:2b:82:26:03:24:62:b7:29:cd:0b:8d:a4:bf:
d7:99:37:67:41:10:d4:c8:a4:9e:d9:22:fc:80:7d:95:f6:fe:
3e:97:de:5c:5d:9a:78:e5:55:b4:cb:80:31:ed:fb:96:0d:c3:
c4:ff:b1:71:c3:00:4a:c9:8d:61:2d:00:02:3c:17:65:05:f4:
ba:97:82:d6:98:c3:11:fa:00:67:9f:6f:5d:88:bc:1c:3d:77:
19:95:c5:94:dd:02:62:bf:28:08:ee:a2:b4:c9:f1:08:dc:4d:
d1:a0:e1:f7:ef:48:98:a7:88:fd:f3:09:a5:a0:c7:0e:d5:75:
c5:cd:73:70:02:70:af:2b:1b:fd:e9:da:8a:40:55:9f:7a:8e:
08:3d:0e:72:05:c8:3f:44:f7:ef:be:50:98:cd:00:53:37:00:
fb:c4:62:28:32:7c:b0:54:8c:ca:7b:15:17:ea:36:af:42:97:
13:88:74:3b:bc:19:26:dc:9a:8a:50:cf:e6:a8:bf:16:89:4e:
29:ed:ec:f8:3e:47:b9:a0:14:79:04:98:d3:41:5d:76:40:b4:
0a:f7:49:bc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYJogaXaapuqAg9lQ9d8HuYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIwODA0MTA1ODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTdlODI3YmQ5NzViZTgzOTVjZGNkNzY4N2I1Nzk0YjUyODU1MDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcS1OQSLwSDAVOwVYHs/tloA919I
DWUhFrSjA3noMZdcsAbL9pkP0uXswMW3KZs8nHwDdv+RMBR66CIBJbrYVszL578M
dzZRcxZqAff1XivPikeM8bPiaG31IXRbjMH7tkDPIiXuZhY9pBYxAJ/srUCsI9dw
ya/+NpXFcGieIN4XlaEl5M45S5dfSl+wRGlhgnxS0eMTge0ems5/SolaUVDHchGr
QyH2cMW7Agh+l6GAKxzcXrxbRFpmubzNDa9XS45pTiolKBMki+c/vhziXSQweH0c
jDz5Ttf+XzaXPKhJ+Kv0JT++fBdN5BQxEtCtPUWe6XCeTbFOnok5vXfLxQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHl+gnvZdb6Dlc3Ndoe1eUtShVCVMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZVg2Q2U5bDF2b09WemMxMmg3VjVTMUtGVUpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBWNgiAwQB
WNgsAwQCWNhcAwQCWNi4MA0GCSqGSIb3DQEBCwUAA4IBAQBbo32SxlN42WZSz/ET
HmTlq9GKsHsH9T2SZsn5KV7upgRzGUxGzAljpSuCJgMkYrcpzQuNpL/XmTdnQRDU
yKSe2SL8gH2V9v4+l95cXZp45VW0y4Ax7fuWDcPE/7FxwwBKyY1hLQACPBdlBfS6
l4LWmMMR+gBnn29diLwcPXcZlcWU3QJivygI7qK0yfEI3E3RoOH370iYp4j98wml
oMcO1XXFzXNwAnCvKxv96dqKQFWfeo4IPQ5yBcg/RPfvvlCYzQBTNwD7xGIoMnyw
VIzKexUX6javQpcTiHQ7vBkm3JqKUM/mqL8WiU4p7ez4Pke5oBR5BJjTQV12QLQK
90m8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org