Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kHNBBsIW87j5IczqiUMbeboWiUE.roa
File: kHNBBsIW87j5IczqiUMbeboWiUE.roa (raw, json)
Hash identifier: +UQJvLgp9nnp3VPyWriBNC/khUZVF9wPveWZBpJRMII=
Subject key identifier: 90:73:41:06:C2:16:F3:B8:F9:21:CC:EA:89:43:1B:79:BA:16:89:41
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018352100ECB7B00791201D2F6172BD40EFB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kHNBBsIW87j5IczqiUMbeboWiUE.roa
Signing time: Sun 18 Sep 2022 19:25:27 +0000
ROA not before: Sun 18 Sep 2022 19:25:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 88.216.92.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:52:10:0e:cb:7b:00:79:12:01:d2:f6:17:2b:d4:0e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 18 19:25:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90734106c216f3b8f921ccea89431b79ba168941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:5c:71:bc:ae:be:bb:d4:94:fd:d7:99:45:
f9:d7:6b:f6:2b:db:e8:2a:27:e7:eb:75:f8:d8:d8:
a1:3e:c3:1d:9a:6d:79:54:1f:e1:53:82:bc:51:82:
0b:17:56:fc:df:9b:00:9f:cf:68:f2:c5:c5:f9:68:
9a:fd:d0:56:4c:73:43:74:05:0f:70:4f:1a:76:20:
a5:b2:e6:91:fa:15:c1:57:ca:34:a4:3b:70:4d:3e:
96:2e:b8:f7:72:a0:c4:43:55:17:bd:f0:a1:72:d1:
22:8f:0a:39:26:f9:53:43:fb:d2:29:ac:06:d4:88:
2e:f3:f8:0f:b8:c1:a5:60:b8:c2:8c:5d:f3:d5:09:
61:0a:dd:35:be:58:0d:a9:02:57:cc:4e:5e:a2:62:
bd:b9:30:41:b9:a4:89:ed:3c:cc:ee:7e:23:78:93:
c1:9c:21:24:f1:8b:b2:49:30:de:fe:52:cc:e4:3e:
82:34:09:80:85:60:d2:22:86:35:6a:b6:28:9c:33:
b5:84:8b:91:c3:71:ab:86:f0:ce:bd:86:2b:36:18:
d0:6e:df:4c:8c:1c:1e:83:69:02:10:33:66:21:26:
30:fc:f0:39:53:87:e7:0d:3f:c2:60:05:7c:5e:b4:
37:00:2e:f9:64:3e:9e:cb:ee:7e:a6:e2:07:39:7f:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:73:41:06:C2:16:F3:B8:F9:21:CC:EA:89:43:1B:79:BA:16:89:41
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kHNBBsIW87j5IczqiUMbeboWiUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:8c:c4:4c:94:10:b1:9b:95:87:2a:45:97:7d:97:82:f0:af:
e9:9c:97:7b:11:ca:85:77:0d:38:79:ef:8f:dd:0f:52:5a:d5:
6a:08:94:66:0a:f3:85:12:83:dc:27:9a:4b:64:5e:61:30:83:
ae:16:ef:ac:3d:fc:0a:0a:0f:45:96:93:ef:96:b4:d7:f7:a1:
3d:c5:04:06:43:a1:f0:ac:bf:74:26:49:7e:8e:5d:fd:07:7d:
17:a1:bd:de:9c:41:21:9a:f4:a6:9d:d2:cc:d4:7a:16:55:5b:
ec:fa:13:0c:9f:55:72:c2:c1:9a:5a:51:c5:e0:e6:d8:fe:82:
d5:20:75:49:de:61:ba:7b:6d:00:6b:05:65:05:07:67:c3:36:
5c:61:a8:3a:81:52:97:8a:04:f0:26:2e:28:e0:dd:1a:09:c9:
4b:5f:48:46:c5:6b:eb:1f:8d:fb:dc:a6:fa:2f:bc:1a:87:af:
59:bd:0b:f8:f3:11:24:f4:cb:2a:fc:18:df:cd:11:d7:3a:38:
db:ad:f1:7e:24:dc:ae:fc:92:a7:d0:62:51:e1:39:d4:de:e4:
9a:1a:f2:86:45:05:75:d9:e0:02:8c:23:a5:f6:57:a7:31:20:
9f:1e:a7:02:0a:64:cc:3b:8f:f5:2e:81:a4:3a:e1:08:7c:58:
49:72:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org