Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gDpYTT4TO0RcUfcxVdL_jEc4z90.roa
File: gDpYTT4TO0RcUfcxVdL_jEc4z90.roa (raw, json)
Hash identifier: DdSfuNiAppbBiS7Fvw2pD4epujjiGImDQK4JLzopHnE=
Subject key identifier: 80:3A:58:4D:3E:13:3B:44:5C:51:F7:31:55:D2:FF:8C:47:38:CF:DD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01823FD1DC1B2E357AEE004F1378290EF6B6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gDpYTT4TO0RcUfcxVdL_jEc4z90.roa
Signing time: Wed 27 Jul 2022 13:21:34 +0000
ROA not before: Wed 27 Jul 2022 13:21:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.59.0/24 maxlen: 24
88.216.90.0/24 maxlen: 24
88.216.100.0/22 maxlen: 24
88.216.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:d1:dc:1b:2e:35:7a:ee:00:4f:13:78:29:0e:f6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 27 13:21:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=803a584d3e133b445c51f73155d2ff8c4738cfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:e1:d5:7e:c8:e8:54:c0:e1:b3:23:82:b1:
eb:91:d3:f8:50:3f:28:6b:28:25:23:c6:d3:73:d9:
b9:a1:88:bd:15:66:e7:17:31:b8:75:b0:0f:d6:9b:
14:32:84:e9:07:95:44:71:93:4a:48:ab:99:d5:74:
ed:bc:da:17:9b:03:3b:ce:65:45:97:96:9a:3b:35:
87:40:9b:33:28:0c:f1:56:d4:94:e3:8e:51:5c:39:
0d:02:c1:53:c6:4f:63:02:23:1a:cc:d0:f4:ba:22:
de:9a:fa:34:b3:ef:33:77:ac:58:e9:94:60:db:3f:
4c:eb:c9:d5:43:cc:c3:24:ab:de:b0:03:83:30:3b:
5f:a3:95:94:7b:14:e6:22:e4:a0:ab:b8:ae:00:8a:
5b:51:ad:d5:13:b9:55:89:b4:f2:c4:f1:5b:d7:12:
5d:b7:6e:02:40:64:0e:71:4f:9b:82:6c:1b:20:9d:
b9:41:bb:8b:01:8d:2b:28:9c:17:e3:ca:db:a1:77:
55:0c:ea:b0:52:bc:c7:dc:e1:4d:e4:e9:20:d4:db:
8a:7c:7c:70:a2:74:72:fb:5c:5c:74:ed:2e:b9:5a:
8e:a6:68:5b:a2:92:9a:19:99:f1:e6:2d:6a:24:ab:
ab:60:9d:64:11:82:15:49:98:61:b1:3d:11:c4:78:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3A:58:4D:3E:13:3B:44:5C:51:F7:31:55:D2:FF:8C:47:38:CF:DD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gDpYTT4TO0RcUfcxVdL_jEc4z90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
88.216.33.0/24
88.216.90.0/24
88.216.100.0/22
Signature Algorithm: sha256WithRSAEncryption
78:43:08:78:0f:67:45:12:69:9c:94:34:2a:67:bd:8b:15:0b:
48:a2:48:c8:0d:7b:0c:f2:25:04:f1:3b:c2:90:59:18:8f:da:
a9:af:bc:85:57:44:27:31:76:e2:44:c3:3f:4b:09:18:b3:9d:
d4:8e:13:2c:f3:87:03:99:1e:00:95:73:69:28:48:63:61:0d:
73:45:d6:ed:73:8c:5a:f6:8f:d9:eb:56:c4:33:93:6d:14:39:
26:c7:d3:02:f8:a2:ba:eb:5f:ae:1c:dd:46:84:5b:84:a1:a6:
57:40:22:99:96:b3:7a:a7:ba:63:b9:4e:b8:75:03:43:33:d9:
ff:27:f9:22:4c:e9:e5:db:99:b3:e7:d1:52:c9:cb:94:b5:07:
86:4d:12:ac:9f:3f:24:28:77:5e:04:a5:4d:6a:ce:37:4c:77:
0c:5e:81:11:1c:39:47:57:c7:d7:0e:12:83:39:8b:5f:b6:a6:
53:ec:b8:95:33:32:6b:55:6f:9c:19:33:bc:72:2d:72:7a:89:
ac:e2:ce:14:d0:11:4b:e6:2b:cb:72:c5:09:0e:87:2a:87:a1:
10:e9:da:38:46:df:e8:01:2b:b4:e0:9a:89:1d:26:ed:1e:70:
73:95:21:9b:df:17:9d:10:e2:ff:20:65:20:4a:9c:95:c1:e0:
ca:e7:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org