Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f-hUbNbGRMEbVAYsDuWGt0gt_dE.roa
File: f-hUbNbGRMEbVAYsDuWGt0gt_dE.roa (raw, json)
Hash identifier: fPcd3KidPW78YtGLUECyaXRD92W+PY59YevBj0ujeFY=
Subject key identifier: 7F:E8:54:6C:D6:C6:44:C1:1B:54:06:2C:0E:E5:86:B7:48:2D:FD:D1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018410A493AEA0089AA9E2C3EFB521791B9E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f-hUbNbGRMEbVAYsDuWGt0gt_dE.roa
Signing time: Tue 25 Oct 2022 19:35:31 +0000
ROA not before: Tue 25 Oct 2022 19:35:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56876
IP address blocks: 88.216.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:a4:93:ae:a0:08:9a:a9:e2:c3:ef:b5:21:79:1b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 25 19:35:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe8546cd6c644c11b54062c0ee586b7482dfdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:2d:4f:7a:d1:44:b7:9f:65:83:dd:82:53:
3e:5b:1b:ee:93:0a:dd:a3:d7:dc:10:8f:dd:1f:6c:
ba:da:db:4d:5f:0c:ae:a6:e1:63:39:69:f6:85:42:
68:87:36:c5:37:cd:9e:47:24:ba:dc:ee:de:2a:2c:
88:73:9e:dd:79:43:d1:30:3b:77:7b:b9:b4:ad:22:
07:a7:6a:e7:fa:ef:2c:a9:57:76:cb:f6:db:67:3b:
68:31:7f:f0:c8:73:cd:d3:c4:90:02:e6:99:fa:76:
4a:dc:3a:42:46:3e:ef:74:d6:dd:da:e9:a0:2b:c2:
1c:aa:2f:34:36:5c:f8:a0:74:a5:66:11:48:b4:38:
59:23:ea:1f:71:69:1f:0f:6e:08:d5:81:40:5c:37:
74:d2:89:e8:c1:54:ca:ca:96:dd:ff:0e:92:1f:84:
29:3a:69:70:91:78:12:8c:5e:37:61:9f:eb:94:e3:
bf:73:83:16:aa:f5:37:37:82:36:9e:f4:65:dd:0e:
e1:36:30:90:42:3a:22:d6:f4:fa:cc:a6:bd:42:36:
2e:94:06:6f:7f:85:83:bc:8b:62:74:b7:89:c3:b3:
10:7f:07:04:dc:aa:8e:e6:ff:47:a2:70:32:0c:4c:
e8:35:6d:a4:a8:98:49:72:b8:57:86:8d:8d:5f:3d:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:54:6C:D6:C6:44:C1:1B:54:06:2C:0E:E5:86:B7:48:2D:FD:D1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f-hUbNbGRMEbVAYsDuWGt0gt_dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.216.0/22
Signature Algorithm: sha256WithRSAEncryption
82:c4:ba:24:75:a9:f9:6b:96:c0:34:e2:df:3d:f9:b4:33:45:
57:9f:00:1c:40:96:ea:22:5a:ee:81:15:d3:4d:0a:40:78:2c:
03:16:cd:fd:ed:50:bd:b8:c1:71:1e:7c:7c:6f:69:6d:5f:55:
ac:89:a0:b9:cd:d4:8f:52:17:61:67:78:c6:ce:c1:21:0e:46:
0d:bd:70:77:66:d9:80:2e:eb:bf:eb:e2:c6:ce:bd:d2:57:5d:
41:ae:7d:9c:7a:3b:44:cd:c6:f0:8b:ca:0d:47:65:6c:e1:e1:
a2:eb:3d:95:2e:4c:1d:f4:98:ce:64:c7:be:e8:97:70:8e:9c:
22:cb:17:a8:e7:84:fe:c6:c1:a5:1f:b8:c9:93:03:c7:78:fc:
d5:e9:a7:f2:f9:3f:81:05:05:bd:e4:97:d6:99:76:9b:06:a1:
56:81:5a:07:ee:64:a5:0e:fc:48:9d:f7:9b:da:bd:58:94:e5:
df:63:3a:be:fd:d1:96:19:40:0d:2e:41:bc:e4:02:0d:8e:da:
91:de:76:78:d1:bf:19:9a:1f:d9:ba:77:fb:9f:c4:46:7b:e8:
27:07:a6:d8:0f:cf:ec:1e:29:c7:50:98:a8:0e:69:3e:13:e7:
b2:4f:ea:78:d3:9c:6c:9c:ab:bc:c3:0f:b8:77:0a:71:ac:f7:
5e:a4:7c:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQQpJOuoAiaqeLD77UheRueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMDI1MTkzNTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmU4NTQ2Y2Q2YzY0NGMxMWI1NDA2MmMwZWU1ODZiNzQ4MmRmZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrAtT3rRRLefZYPdglM+Wxvukwrd
o9fcEI/dH2y62ttNXwyupuFjOWn2hUJohzbFN82eRyS63O7eKiyIc57deUPRMDt3
e7m0rSIHp2rn+u8sqVd2y/bbZztoMX/wyHPN08SQAuaZ+nZK3DpCRj7vdNbd2umg
K8Icqi80Nlz4oHSlZhFItDhZI+ofcWkfD24I1YFAXDd00onowVTKypbd/w6SH4Qp
OmlwkXgSjF43YZ/rlOO/c4MWqvU3N4I2nvRl3Q7hNjCQQjoi1vT6zKa9QjYulAZv
f4WDvItidLeJw7MQfwcE3KqO5v9HonAyDEzoNW2kqJhJcrhXho2NXz1qnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/oVGzWxkTBG1QGLA7lhrdILf3RMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZi1oVWJOYkdSTUViVkFZc0R1V0d0MGd0X2RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWNjYMA0G
CSqGSIb3DQEBCwUAA4IBAQCCxLokdan5a5bANOLfPfm0M0VXnwAcQJbqIlrugRXT
TQpAeCwDFs397VC9uMFxHnx8b2ltX1WsiaC5zdSPUhdhZ3jGzsEhDkYNvXB3ZtmA
Luu/6+LGzr3SV11Brn2cejtEzcbwi8oNR2Vs4eGi6z2VLkwd9JjOZMe+6Jdwjpwi
yxeo54T+xsGlH7jJkwPHePzV6afy+T+BBQW95JfWmXabBqFWgVoH7mSlDvxInfeb
2r1YlOXfYzq+/dGWGUANLkG85AINjtqR3nZ40b8Zmh/Zunf7n8RGe+gnB6bYD8/s
HinHUJioDmk+E+eyT+p405xsnKu8ww+4dwpxrPdepHwZ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org