Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f5SLzz1E5fsEPAgweGUJwqah3TE.roa
File: f5SLzz1E5fsEPAgweGUJwqah3TE.roa (raw, json)
Hash identifier: 9+T54N4XW13yknYh5xB3wTt4RK+w3OsRWgFlPzp+7V4=
Subject key identifier: 7F:94:8B:CF:3D:44:E5:FB:04:3C:08:30:78:65:09:C2:A6:A1:DD:31
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 1A06F5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f5SLzz1E5fsEPAgweGUJwqah3TE.roa
Signing time: Tue 01 Mar 2022 21:00:30 +0000
ROA not before: Tue 01 Mar 2022 21:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.180.0/22 maxlen: 24
88.216.196.0/22 maxlen: 24
84.32.4.0/22 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705717 (0x1a06f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 1 21:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f948bcf3d44e5fb043c0830786509c2a6a1dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:8e:f4:a9:ff:de:66:33:8c:31:e3:f3:0d:
8b:eb:d5:cb:43:80:87:0c:a1:77:2b:7d:14:5e:a1:
c8:6a:bf:4a:7c:55:a6:b1:d4:8d:a0:ba:0c:16:c5:
56:ae:28:0e:37:f8:d1:3a:e9:45:91:8f:41:18:78:
42:4f:45:2c:f4:73:40:ca:c6:95:77:68:e0:ce:19:
0b:97:16:ea:74:b0:6f:47:fb:6e:21:40:b3:64:f2:
41:e8:22:cd:aa:38:2e:d0:62:17:6a:fd:47:db:2f:
95:87:46:d1:7b:e1:d3:f6:6b:a1:a7:e2:26:41:af:
99:e4:85:00:8c:5f:b0:f2:b6:ba:95:aa:be:d2:b1:
5f:be:a4:c3:28:53:ef:c9:26:b1:63:54:2d:b4:b6:
51:6d:9c:a9:64:eb:05:ff:2e:27:ea:63:0a:a1:79:
61:18:22:6e:12:43:f5:94:ca:e4:6f:f5:fa:89:b6:
26:d7:70:a8:9c:c3:8d:e6:d6:f4:bc:e0:b7:b3:d0:
14:f7:18:52:d6:9f:41:e0:52:c0:ff:ee:1d:16:75:
06:0b:7e:32:db:b6:fb:fd:c4:69:32:fd:9b:a3:19:
67:67:4d:82:a2:ba:61:93:77:42:d2:7c:1c:ba:df:
4c:9b:e3:a3:84:02:79:84:58:89:f0:55:52:0c:06:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:8B:CF:3D:44:E5:FB:04:3C:08:30:78:65:09:C2:A6:A1:DD:31
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f5SLzz1E5fsEPAgweGUJwqah3TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/22
88.216.32.0/24
88.216.47.0/24
88.216.180.0/22
88.216.196.0/22
Signature Algorithm: sha256WithRSAEncryption
12:db:13:11:65:81:2d:6f:2a:85:d8:8e:7b:dc:5d:d8:e0:41:
e7:aa:a1:fe:49:f1:b2:bf:e8:82:23:79:f8:75:b5:a4:b3:6c:
b1:52:d0:bd:37:c9:9f:d7:04:9a:d8:b3:86:c8:90:c9:b7:16:
ea:db:b2:f0:1b:91:a1:60:26:ef:bf:ae:f6:b4:e5:d8:56:7a:
d9:43:2a:47:d5:ca:8c:07:2e:23:e9:34:f4:cc:6b:7d:c9:92:
ec:ac:49:1c:ea:35:73:dd:4b:5c:61:46:dc:14:d7:3c:73:f8:
27:69:66:36:ac:6e:0a:e9:3c:30:3e:3b:cd:04:7b:4d:04:45:
1d:5f:66:6d:70:b7:d9:6d:91:ec:14:f8:d8:3d:e5:89:0b:aa:
9f:99:01:89:39:69:0d:3d:6c:94:cb:88:a1:fb:45:7d:29:f9:
40:63:9d:2d:a9:4f:e6:5b:55:f3:74:f6:62:37:19:d8:6b:04:
d4:70:ec:d9:46:df:57:a4:0f:86:d1:1a:5e:9c:d5:5c:b3:ca:
b8:c3:ba:1e:e6:69:da:79:50:66:47:e5:13:ec:94:93:34:dd:
0b:15:f4:35:35:e2:97:7c:d3:ce:13:3a:50:d3:c5:18:f1:6b:
66:ac:29:9c:0a:ea:cf:7b:6d:d5:0d:99:a0:64:fb:e6:23:71:
f9:a8:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org