Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/edjtgAq2RdX-Ad1cBQKggr98_po.roa
File: edjtgAq2RdX-Ad1cBQKggr98_po.roa (raw, json)
Hash identifier: c1/NSf23GPGLVg4QpNpEcpcqvBJuQijujX4g1EAMwQg=
Subject key identifier: 79:D8:ED:80:0A:B6:45:D5:FE:01:DD:5C:05:02:A0:82:BF:7C:FE:9A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 246A5C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/edjtgAq2RdX-Ad1cBQKggr98_po.roa
Signing time: Thu 03 Mar 2022 09:56:41 +0000
ROA not before: Thu 03 Mar 2022 09:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 88.216.184.0/23 maxlen: 24
88.216.186.0/23 maxlen: 24
88.216.90.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.216.0/21 maxlen: 24
88.216.34.0/23 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386524 (0x246a5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 3 09:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79d8ed800ab645d5fe01dd5c0502a082bf7cfe9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:3a:cc:a7:6f:30:51:a7:cd:e1:90:d5:8f:
8c:35:b0:e2:0b:43:31:59:6d:9c:d6:22:41:26:b3:
99:a8:4c:fe:f8:06:60:3f:b4:97:90:6d:1c:07:ea:
6f:5b:a2:5b:53:92:ab:75:d8:2b:15:08:28:f1:87:
45:08:5e:50:1a:7b:c5:b8:ce:86:97:0d:08:a4:7a:
e6:5f:ec:9e:50:e1:74:b6:b2:ff:50:72:21:99:bb:
5a:83:81:45:d5:6a:f7:33:fc:2e:56:95:c1:d4:5a:
17:4d:2b:a3:bb:23:10:1f:e6:5d:8f:18:04:6c:22:
bb:59:ee:f0:6c:ea:50:a7:bd:8c:99:71:c4:6b:04:
f2:cc:0c:dd:fc:f5:40:b8:09:1a:dd:e2:2a:05:06:
19:74:98:80:5d:3c:c6:1d:d6:41:1f:95:91:3a:ce:
1f:22:c4:4f:52:a9:f6:61:c8:99:7c:8c:70:ff:a0:
95:7a:ea:96:5d:54:38:bf:18:1f:09:a4:91:1b:b4:
d7:5c:a7:e1:67:d7:14:77:b3:d7:2e:e9:69:63:fe:
55:a9:4f:af:e6:1b:2d:c5:2b:25:3c:2b:ce:a2:35:
7a:8d:13:21:f0:cd:37:c9:d1:03:cf:9e:39:f2:5b:
0e:39:d7:43:29:f3:28:91:49:5b:6b:1b:41:34:22:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:ED:80:0A:B6:45:D5:FE:01:DD:5C:05:02:A0:82:BF:7C:FE:9A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/edjtgAq2RdX-Ad1cBQKggr98_po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/23
88.216.44.0/23
88.216.90.0-88.216.95.255
88.216.184.0/22
88.216.216.0/21
Signature Algorithm: sha256WithRSAEncryption
45:cd:e7:44:aa:dc:57:e7:58:2e:d6:86:6f:35:6d:75:cf:b3:
78:27:06:05:d6:d1:09:59:94:bf:9e:44:ad:7b:e3:d5:82:bf:
03:a9:c7:ba:de:f1:55:17:96:a1:62:fd:fc:57:dd:9b:e9:00:
8e:20:21:3f:dd:b0:df:2a:03:fb:83:43:19:fc:be:06:99:21:
8b:d6:ec:39:f0:34:fb:7a:54:53:4f:c7:64:1d:4c:9c:1a:c6:
b8:d3:6b:b4:a8:90:21:f3:47:99:44:f9:5e:7f:11:ab:63:87:
bb:d4:67:85:5f:32:1d:21:49:91:0e:ca:a2:da:a5:75:87:90:
df:a1:12:62:3d:c0:c8:c5:b6:23:a4:3d:04:7e:6c:e9:c1:97:
d3:13:2c:83:8e:78:41:57:af:35:f0:96:f5:3b:3b:0c:3c:ea:
2d:c5:3a:b9:0b:58:49:ec:40:b4:71:25:2a:b6:b9:e8:1b:f1:
87:5a:1b:f4:8b:dc:c3:de:f4:a5:13:e0:5b:db:63:72:09:a4:
07:7c:10:fd:66:bd:27:87:e4:2f:7a:98:89:a0:e3:64:c5:87:
4d:f1:d2:df:51:96:b0:a8:cd:5f:f2:39:2c:c5:21:1f:ad:3f:
93:e4:04:01:d3:36:8e:f6:d0:25:74:17:9c:d0:e2:cc:cc:03:
b4:ed:ec:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIDJGpcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRm
YmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZiZGEzYzUwHhcNMjIwMzAz
MDk1NjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3OWQ4ZWQ4MDBhYjY0
NWQ1ZmUwMWRkNWMwNTAyYTA4MmJmN2NmZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4dc6zKdvMFGnzeGQ1Y+MNbDiC0MxWW2c1iJBJrOZqEz++AZg
P7SXkG0cB+pvW6JbU5KrddgrFQgo8YdFCF5QGnvFuM6Glw0IpHrmX+yeUOF0trL/
UHIhmbtag4FF1Wr3M/wuVpXB1FoXTSujuyMQH+ZdjxgEbCK7We7wbOpQp72MmXHE
awTyzAzd/PVAuAka3eIqBQYZdJiAXTzGHdZBH5WROs4fIsRPUqn2YciZfIxw/6CV
euqWXVQ4vxgfCaSRG7TXXKfhZ9cUd7PXLulpY/5VqU+v5hstxSslPCvOojV6jRMh
8M03ydEDz5458lsOOddDKfMokUlbaxtBNCLEVQIDAQABo4ICKTCCAiUwHQYDVR0O
BBYEFHnY7YAKtkXV/gHdXAUCoIK/fP6aMB8GA1UdIwQYMBaAFE+9RfzjVuKmXx5N
Ha94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMzLzEv
ZWRqdGdBcTJSZFgtQWQxY0JRS2dncjk4X3BvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8z
OTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMzLzEvVDcxRl9PTlc0cVpm
SGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8G
CCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBWNgiAwQBWNgsMAwDBAFY2FoDBAVY
2EADBAJY2LgDBANY2NgwDQYJKoZIhvcNAQELBQADggEBAEXN50Sq3FfnWC7Whm81
bXXPs3gnBgXW0QlZlL+eRK1749WCvwOpx7re8VUXlqFi/fxX3ZvpAI4gIT/dsN8q
A/uDQxn8vgaZIYvW7DnwNPt6VFNPx2QdTJwaxrjTa7SokCHzR5lE+V5/Eatjh7vU
Z4VfMh0hSZEOyqLapXWHkN+hEmI9wMjFtiOkPQR+bOnBl9MTLIOOeEFXrzXwlvU7
Oww86i3FOrkLWEnsQLRxJSq2uegb8YdaG/SL3MPe9KUT4FvbY3IJpAd8EP1mvSeH
5C96mImg42TFh03x0t9RlrCozV/yOSzFIR+tP5PkBAHTNo720CV0F5zQ4szMA7Tt
7BA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org