Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i8LWqmQrLFCICK79uA5LJBdcHBg.roa
File: i8LWqmQrLFCICK79uA5LJBdcHBg.roa (raw, json)
Hash identifier: RYpzggG0k4Pwmr4we/fy41EGMyOtcuaW13I1Ow/cQ7Y=
Subject key identifier: 8B:C2:D6:AA:64:2B:2C:50:88:08:AE:FD:B8:0E:4B:24:17:5C:1C:18
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018538A75DE36AC02FAD0914ADBF0B94CC39
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i8LWqmQrLFCICK79uA5LJBdcHBg.roa
Signing time: Thu 22 Dec 2022 07:06:10 +0000
ROA not before: Thu 22 Dec 2022 07:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:a7:5d:e3:6a:c0:2f:ad:09:14:ad:bf:0b:94:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 22 07:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bc2d6aa642b2c508808aefdb80e4b24175c1c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:e5:86:f2:c8:87:c0:7d:a7:69:e1:20:10:
2b:ea:14:9e:55:e6:fe:fa:76:16:92:00:a7:eb:53:
4b:6d:e4:b0:f8:3c:38:8c:3e:79:d1:a5:28:80:22:
ab:2b:c1:34:93:91:2e:89:b9:8f:59:22:db:8e:7a:
13:57:57:86:9e:62:cc:f3:82:ae:88:3a:4b:55:3f:
ad:56:83:a8:61:8f:46:ed:9d:37:6d:10:fe:e2:bf:
55:e1:d2:e4:20:56:ae:c1:9d:1c:d7:c4:34:3e:2d:
02:4a:36:ff:02:71:b1:e6:30:92:40:dd:66:d8:19:
fb:ed:24:69:29:9d:c4:e1:34:c2:7c:01:b8:6f:3b:
4c:45:bc:45:f5:06:69:3d:02:9a:bd:a9:73:70:77:
da:35:81:9e:44:50:5b:05:60:48:6c:f9:11:c4:99:
9c:7b:88:f6:75:37:f5:7c:7d:57:15:13:fc:06:40:
fe:a6:d1:68:82:a8:ac:c3:bb:d9:50:2c:35:b1:98:
01:66:ef:09:a0:d1:68:09:5a:cc:71:e2:2d:77:d7:
9c:a3:d9:d6:5f:cd:6a:a2:53:02:12:2b:85:37:9d:
b5:4c:d4:af:ae:72:fb:ad:96:40:1c:1c:ff:98:b1:
3d:10:6c:c3:a6:b8:e1:65:cb:75:2c:f1:18:1b:bb:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:D6:AA:64:2B:2C:50:88:08:AE:FD:B8:0E:4B:24:17:5C:1C:18
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i8LWqmQrLFCICK79uA5LJBdcHBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.31.0/24
84.32.64.0/24
84.32.89.0/24
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.23.0/24
88.216.45.0/24
88.216.56.0-88.216.65.255
88.216.185.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
03:87:04:e4:8a:33:2e:a6:3b:7b:77:81:f4:1b:37:10:cc:88:
32:b4:28:c7:b1:ba:ea:43:af:e5:57:85:11:5e:9c:d4:b5:5f:
44:5a:f7:e8:6f:64:ef:84:51:fb:d0:44:10:a3:cb:80:b0:98:
71:4a:4f:26:8f:79:04:ef:c7:c5:a4:5d:4d:9e:47:f3:1b:a0:
ed:12:30:f2:2d:71:91:06:52:2d:50:a2:bb:6b:6d:05:fd:b9:
4f:d6:03:b9:bb:9d:25:c5:7f:e9:93:b4:ed:a9:58:4c:04:76:
c1:70:2e:8e:48:38:b3:5e:0a:9e:b4:a8:b9:f7:3c:28:20:cd:
d6:11:0b:f2:52:cf:89:07:40:f0:70:2e:4d:86:03:94:bb:07:
03:31:db:ca:c4:f5:cb:69:d1:5d:97:e4:d8:3c:50:7d:4c:a3:
fc:0e:55:53:98:ba:1c:94:bf:ba:b1:7a:37:b1:dd:b1:c9:51:
10:82:99:9a:87:7b:0c:16:98:95:01:e9:fb:16:5c:23:eb:02:
c1:d2:93:07:94:7a:0e:ab:b3:27:0a:64:d8:76:19:6a:86:9e:
8f:1d:6a:58:16:ad:59:af:06:f7:dc:b9:7d:86:12:0f:e9:fb:
cd:78:e8:bd:60:a0:41:69:95:9a:53:42:1a:4b:5c:6a:0b:7d:
6c:88:e4:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org