Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fb3s9e2zzevdkQuiYY81qslTdrY.roa
File: fb3s9e2zzevdkQuiYY81qslTdrY.roa (raw, json)
Hash identifier: 4UnOIiTeQvbuxTtehyVci3m6PBS5L4+CujyUPkgwLZs=
Subject key identifier: 7D:BD:EC:F5:ED:B3:CD:EB:DD:91:0B:A2:61:8F:35:AA:C9:53:76:B6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018474DCE0EBF5EE7F01470798C2FF790242
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fb3s9e2zzevdkQuiYY81qslTdrY.roa
Signing time: Mon 14 Nov 2022 06:39:03 +0000
ROA not before: Mon 14 Nov 2022 06:39:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 88.216.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:dc:e0:eb:f5:ee:7f:01:47:07:98:c2:ff:79:02:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 14 06:39:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dbdecf5edb3cdebdd910ba2618f35aac95376b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:29:5e:26:d3:5a:0f:51:64:00:2d:b9:7c:
22:1b:ba:22:27:85:4a:88:f5:0f:bf:d8:b3:18:6d:
4e:f0:7f:81:44:e9:3c:99:4e:f6:84:47:69:b1:6d:
61:7f:ac:9c:f4:00:fe:82:c1:66:b3:5e:53:90:e1:
79:52:2c:89:7d:ef:fe:0d:67:62:11:53:4b:a4:87:
db:ca:65:61:69:c2:87:99:77:21:07:f7:56:df:d5:
b6:21:3b:19:9c:b1:97:ea:c8:47:4d:c5:5b:00:c1:
38:c1:93:31:97:99:38:98:2b:ec:e9:68:98:ac:97:
bd:1b:3d:69:78:6e:2c:a8:a0:f8:c4:f5:cf:29:83:
32:3f:70:4a:2b:ab:b0:d2:9b:e3:f4:46:21:3b:cb:
09:77:ad:07:ac:7c:b2:43:02:4f:79:f8:63:5a:fe:
46:27:8b:f8:d6:d4:1f:9a:ba:e8:0e:da:48:d1:49:
fd:43:da:36:47:b1:e5:a9:0c:c5:19:23:82:56:e9:
58:33:29:1b:0d:54:00:49:cf:ae:b0:0b:9d:81:1d:
81:3c:40:fd:bb:bc:e8:90:b1:58:40:20:9f:7a:35:
43:71:26:c2:46:9a:96:19:61:b6:f0:34:98:eb:cd:
0c:ba:e1:f7:b7:86:62:c1:46:c9:cd:70:21:4d:04:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:EC:F5:ED:B3:CD:EB:DD:91:0B:A2:61:8F:35:AA:C9:53:76:B6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fb3s9e2zzevdkQuiYY81qslTdrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c1:c7:5a:d5:0a:1d:c8:ca:c3:51:32:03:b6:49:fc:16:79:
6a:9b:88:ac:cb:e1:ad:04:ba:c2:a7:af:dd:78:74:d6:d3:8e:
10:75:68:8a:21:65:ac:d3:86:e0:f0:df:65:52:66:3d:97:4c:
a7:e0:fb:d4:ef:86:da:87:41:31:27:35:99:2a:1b:ec:8e:13:
6b:d5:66:9c:f3:31:c3:b8:1f:52:6c:3e:6f:40:25:a8:5e:70:
04:03:a3:13:df:f1:80:a4:a7:88:e6:ed:31:ff:a9:11:17:b4:
c4:8d:66:8a:1a:2f:97:e2:a2:78:8d:63:97:33:fd:38:ea:7e:
30:df:84:7e:21:ee:3a:d4:33:2d:ab:2a:6e:2e:5c:fc:6c:9e:
e3:e1:e6:26:e3:59:5a:f0:8c:4d:0f:58:57:8c:cf:a0:a2:42:
5d:a7:ba:0c:c0:d2:c6:d3:7f:e3:e3:3b:8e:c8:f0:bc:35:aa:
bd:58:b5:90:59:97:76:38:cb:97:70:9f:3b:51:da:9f:21:9a:
e2:99:75:91:97:1e:d0:f7:13:57:5e:9f:11:ed:25:f2:30:1f:
de:57:8a:b9:2d:65:0a:cf:07:05:fc:54:67:1f:0b:9b:28:ed:
c8:ff:77:45:9f:5d:81:ed:1b:6f:9b:18:03:73:c9:fc:a9:d4:
f0:15:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org