Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/joICAooFOHTE7ZeJJR8uSsXmzlY.roa
File: joICAooFOHTE7ZeJJR8uSsXmzlY.roa (raw, json)
Hash identifier: ZcHyC/C0r0O3efYn1p+BXT/Vk/F45arvv5bR9m3or/A=
Subject key identifier: 8E:82:02:02:8A:05:38:74:C4:ED:97:89:25:1F:2E:4A:C5:E6:CE:56
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0111FA84
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/joICAooFOHTE7ZeJJR8uSsXmzlY.roa
Signing time: Sat 14 May 2022 10:50:41 +0000
ROA not before: Sat 14 May 2022 10:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 88.216.188.0/22 maxlen: 24
84.32.92.0/22 maxlen: 24
88.216.100.0/22 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17955460 (0x111fa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 14 10:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e8202028a053874c4ed9789251f2e4ac5e6ce56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:2a:b4:12:cb:1b:02:22:89:1d:27:15:47:
5b:3a:93:3c:b8:b2:9f:7d:ef:33:99:ed:02:94:43:
0f:c1:62:3f:7e:0e:82:67:e3:2a:0d:89:f0:f5:8d:
0c:57:13:f6:c0:a1:cb:48:fc:c2:a1:cf:9a:68:73:
6a:a7:3a:7d:05:5d:33:90:d6:60:da:34:76:a2:c4:
a0:9e:61:e6:ee:93:d8:66:8f:7f:6c:03:22:92:c8:
2e:5f:48:97:0e:a6:a2:6e:d9:a5:23:56:4f:c1:b6:
96:46:5e:a6:06:96:f1:17:0a:40:9c:89:b8:73:5e:
59:ee:a9:9d:ef:5c:8d:ed:83:73:70:88:76:df:d6:
72:2c:1f:45:e0:d4:1b:de:0b:03:e7:48:10:35:94:
1a:20:45:18:17:37:c3:79:4a:01:05:58:ce:a3:61:
37:66:08:89:2a:ad:13:ee:37:ad:50:ab:c3:5b:14:
bd:e6:28:35:68:43:34:fd:b0:6a:10:be:f6:e1:bc:
3f:34:72:c8:03:74:67:10:7b:3f:99:ef:4a:95:2c:
88:42:63:59:2f:53:e4:e2:63:8f:8e:2c:3e:e4:e1:
84:86:1a:b2:8c:3a:99:2c:1c:aa:0d:1d:3f:21:6d:
64:c9:46:7d:66:53:45:91:51:7e:09:c1:57:7b:1e:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:02:02:8A:05:38:74:C4:ED:97:89:25:1F:2E:4A:C5:E6:CE:56
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/joICAooFOHTE7ZeJJR8uSsXmzlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.92.0/22
88.216.100.0/22
88.216.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:e8:06:b7:e0:12:c1:b5:14:b9:dc:46:1c:68:53:1e:8f:94:
00:1a:da:1b:50:84:b8:04:b9:31:26:c8:2f:b2:94:40:be:b5:
e3:6d:16:00:e1:b1:88:56:aa:1b:7d:da:ee:61:2b:1c:08:6b:
ab:31:90:c8:95:77:5a:ff:2a:70:70:c4:9c:8e:16:13:da:49:
39:78:ee:97:6d:c5:ad:fb:49:72:51:87:15:a3:0d:e5:b1:0b:
14:ca:04:7c:8c:c9:8b:03:80:ed:f5:6b:48:2a:94:d8:ff:e3:
7f:ad:a8:b5:51:82:1c:a3:a1:e7:f5:a7:b4:e7:13:39:7c:2d:
cf:d0:6f:7e:91:d8:42:7b:6a:2c:41:2e:8f:e5:bd:5d:a2:26:
68:2d:3c:3e:a9:77:3e:5c:85:38:de:dd:d1:15:f2:a9:70:4d:
a2:50:bb:fb:4f:df:70:85:46:9b:28:af:0d:ce:68:d4:b4:20:
1e:39:2a:cf:ca:a6:be:de:6e:63:32:e1:a6:dc:0f:13:58:ce:
cd:42:41:10:4d:a7:2f:95:bd:f2:85:2a:31:35:54:61:83:8a:
44:d9:ed:1d:c7:63:e7:45:c8:72:bc:97:68:51:eb:6b:57:cc:
7b:13:a8:0a:6a:0b:39:fe:51:05:92:f5:ef:f0:0e:ad:09:83:
06:fd:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:32 2023 by rpki-client on console-ams.rpki-client.org