Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/joZZxd4HKEfUCtdoPf1DJ7r6CLk.roa
File: joZZxd4HKEfUCtdoPf1DJ7r6CLk.roa (raw, json)
Hash identifier: t+f4ZAI2W93UQjhtbCy9+Eo7ehbMFw3Y+ZSVNyERsUM=
Subject key identifier: 8E:86:59:C5:DE:07:28:47:D4:0A:D7:68:3D:FD:43:27:BA:FA:08:B9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 9D3192
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/joZZxd4HKEfUCtdoPf1DJ7r6CLk.roa
Signing time: Fri 08 Apr 2022 16:22:31 +0000
ROA not before: Fri 08 Apr 2022 16:22:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 88.216.184.0/23 maxlen: 24
88.216.186.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.216.0/21 maxlen: 24
88.216.34.0/23 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10301842 (0x9d3192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 8 16:22:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e8659c5de072847d40ad7683dfd4327bafa08b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:36:a0:1d:4f:a9:42:06:2c:da:7a:b1:ec:
da:33:a7:45:36:4c:3d:c8:72:b6:cc:1b:ce:d8:a0:
f2:61:b2:15:fe:9b:01:1d:55:a8:9d:c9:73:a0:24:
c2:a4:47:f9:8d:ed:9a:7a:ef:ab:30:83:50:ab:29:
90:03:36:52:d4:21:24:ab:55:76:1c:69:ed:73:95:
3d:e0:76:a4:69:18:ef:49:56:4f:b2:a5:d5:7e:80:
2d:c1:49:e8:72:35:5c:df:b1:68:b2:55:32:ee:99:
50:28:5e:00:96:44:f5:f7:15:a8:6c:ff:a3:2f:cc:
f1:59:43:2d:a4:65:09:2c:0d:8e:05:62:42:f8:50:
f0:a3:ce:19:c3:1d:b5:1d:a3:88:af:75:df:c6:a1:
a8:ca:c2:e7:cd:64:74:5d:6e:b6:ef:df:f1:69:28:
71:09:17:2d:32:84:ed:b2:bd:85:f1:1d:04:37:09:
77:cd:82:93:35:6f:be:2a:ff:86:dc:2a:a3:46:ed:
d4:eb:94:45:bd:b6:dd:c9:8a:31:11:6e:00:4c:9c:
6a:a8:6e:c2:4a:f2:10:79:c5:99:e0:0d:0e:37:7f:
84:ea:e3:08:ca:5f:87:3a:32:ac:fb:ae:9a:ae:fe:
1a:65:6b:13:02:0b:84:a4:f5:9a:30:b4:ec:f4:c5:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:59:C5:DE:07:28:47:D4:0A:D7:68:3D:FD:43:27:BA:FA:08:B9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/joZZxd4HKEfUCtdoPf1DJ7r6CLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/23
88.216.44.0/23
88.216.92.0/22
88.216.184.0/22
88.216.216.0/21
Signature Algorithm: sha256WithRSAEncryption
10:76:cf:67:a4:2a:8d:b4:76:dc:4f:06:b4:de:14:7d:b9:d4:
97:d2:c2:73:e5:b6:c5:22:67:9f:69:a1:b3:fe:e2:71:73:39:
f1:45:fc:c1:84:01:38:70:34:a7:af:1c:55:d3:cc:7b:e0:25:
5e:57:89:0a:29:cf:58:e1:9c:fe:9e:83:28:12:1d:59:39:23:
be:4d:20:25:c8:30:9a:56:ac:e9:60:28:a3:4d:0b:2a:a3:c3:
df:95:f7:61:22:71:78:38:da:32:c6:36:e8:e2:d5:68:84:f4:
4f:d4:bf:e9:86:7f:be:a2:23:37:57:8f:b0:78:bf:4f:e9:8f:
2d:53:6e:7a:0c:7c:09:29:36:86:5b:ab:de:99:38:af:d4:de:
31:7f:42:bf:3e:5d:0c:73:de:5e:6d:94:d0:99:bd:33:95:61:
d5:d1:75:ce:66:40:d0:21:c9:2f:5f:df:59:05:0c:7f:22:35:
2d:23:0e:6e:4f:52:ff:8d:32:50:94:02:14:23:07:b2:96:c3:
5a:bf:94:d8:ad:ab:d4:5d:47:57:64:1d:ac:2b:61:7f:81:c1:
a4:95:d7:64:af:98:96:99:a7:c6:4c:f3:e0:d5:45:d7:18:54:
0b:f7:ac:70:b4:cd:eb:19:2b:40:a6:21:04:99:d7:6e:4e:07:
23:78:35:c8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEAJ0xkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZmJkNDVmY2UzNTZlMmE2NWYxZTRkMWRhZjc4MTRiNmQ2YmRhM2M1MB4XDTIyMDQw
ODE2MjIzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU4NjU5YzVkZTA3
Mjg0N2Q0MGFkNzY4M2RmZDQzMjdiYWZhMDhiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ2nNqAdT6lCBizaerHs2jOnRTZMPchytswbztig8mGyFf6b
AR1VqJ3Jc6AkwqRH+Y3tmnrvqzCDUKspkAM2UtQhJKtVdhxp7XOVPeB2pGkY70lW
T7Kl1X6ALcFJ6HI1XN+xaLJVMu6ZUCheAJZE9fcVqGz/oy/M8VlDLaRlCSwNjgVi
QvhQ8KPOGcMdtR2jiK9138ahqMrC581kdF1utu/f8WkocQkXLTKE7bK9hfEdBDcJ
d82CkzVvvir/htwqo0bt1OuURb223cmKMRFuAEycaqhuwkryEHnFmeANDjd/hOrj
CMpfhzoyrPuumq7+GmVrEwILhKT1mjC07PTFJWMCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSOhlnF3gcoR9QK12g9/UMnuvoIuTAfBgNVHSMEGDAWgBRPvUX841bipl8e
TR2veBS21r2jxTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Q3MUZfT05XNHFaZkhrMGRyM2dVdHRhOW84VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvMzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFjMy8x
L2pvWlp4ZDRIS0VmVUN0ZG9QZjFESjdyNkNMay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
Mzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFjMy8xL1Q3MUZfT05XNHFa
ZkhrMGRyM2dVdHRhOW84VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAVjYIgMEAVjYLAMEAljYXAMEAljY
uAMEA1jY2DANBgkqhkiG9w0BAQsFAAOCAQEAEHbPZ6QqjbR23E8GtN4UfbnUl9LC
c+W2xSJnn2mhs/7icXM58UX8wYQBOHA0p68cVdPMe+AlXleJCinPWOGc/p6DKBId
WTkjvk0gJcgwmlas6WAoo00LKqPD35X3YSJxeDjaMsY26OLVaIT0T9S/6YZ/vqIj
N1ePsHi/T+mPLVNuegx8CSk2hlur3pk4r9TeMX9Cvz5dDHPeXm2U0Jm9M5Vh1dF1
zmZA0CHJL1/fWQUMfyI1LSMObk9S/40yUJQCFCMHspbDWr+U2K2r1F1HV2QdrCth
f4HBpJXXZK+Ylpmnxkzz4NVF1xhUC/escLTN6xkrQKYhBJnXbk4HI3g1yA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org