Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lMF-jG9V7erDwn-r0VKmILQnRcc.roa
File: lMF-jG9V7erDwn-r0VKmILQnRcc.roa (raw, json)
Hash identifier: a+1OC4AH25K+Hi/GckZ5VVAJUtfFB3jabsYxt6FOQq4=
Subject key identifier: 94:C1:7E:8C:6F:55:ED:EA:C3:C2:7F:AB:D1:52:A6:20:B4:27:45:C7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01843995CF1EFF7F41DEBF23CED701A9839D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lMF-jG9V7erDwn-r0VKmILQnRcc.roa
Signing time: Wed 02 Nov 2022 18:23:49 +0000
ROA not before: Wed 02 Nov 2022 18:23:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 88.216.188.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
88.216.91.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:95:cf:1e:ff:7f:41:de:bf:23:ce:d7:01:a9:83:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 2 18:23:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94c17e8c6f55edeac3c27fabd152a620b42745c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ca:7c:83:59:6e:fb:ce:31:19:43:48:13:49:
42:25:6d:53:5b:ba:d8:30:2e:0d:7f:5d:fc:89:6b:
ec:c8:bc:ff:7f:51:54:dd:27:14:41:1d:97:d7:f0:
d4:16:02:03:36:4a:03:e2:cf:8f:e8:7f:10:56:da:
d3:51:47:81:2f:2d:03:09:a3:75:16:57:54:2a:09:
08:5b:f3:a0:0e:21:33:8a:a8:ee:0b:aa:65:a3:ad:
ed:04:b1:b5:cc:34:f1:c5:36:4a:7e:9c:3b:71:57:
bd:aa:e6:87:13:cb:f6:c6:e1:68:93:0e:a9:08:2e:
95:48:47:4e:4b:ee:a7:68:e4:e0:a6:8b:25:df:be:
a7:c8:1f:ab:d2:ec:60:b2:90:78:09:76:b2:c1:10:
96:c2:9d:89:55:2c:42:1d:d8:93:ad:e5:8d:7d:9d:
a5:e4:00:68:93:cc:b7:a4:64:8d:27:32:5d:35:20:
84:8e:6a:84:7d:ed:4e:db:9d:91:2d:ac:e3:93:7a:
ed:28:9c:ed:d2:de:41:93:0b:73:04:dd:c4:00:a2:
5e:05:b6:e2:e2:ef:f8:6c:f8:c8:80:7f:2b:b2:29:
ce:9a:08:29:a2:f7:5e:a0:c9:40:d4:00:c3:33:e0:
28:37:fa:82:cc:1e:28:65:94:d9:38:98:e2:05:a8:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:7E:8C:6F:55:ED:EA:C3:C2:7F:AB:D1:52:A6:20:B4:27:45:C7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lMF-jG9V7erDwn-r0VKmILQnRcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0/24
84.32.15.0/24
84.32.42.0/24
84.32.44.0/24
84.32.46.0/23
84.32.49.0/24
84.32.60.0/24
84.32.63.0/24
84.32.65.0-84.32.66.255
84.32.68.0/24
84.32.77.0/24
84.32.86.0/24
84.32.90.0/24
84.32.92.0/24
84.32.94.0/24
88.216.2.0/24
88.216.35.0/24
88.216.40.0/24
88.216.91.0/24
88.216.102.0/24
88.216.188.0/24
88.216.190.0/24
88.216.198.0/24
Signature Algorithm: sha256WithRSAEncryption
49:19:8a:8b:39:e2:f6:b7:52:41:fb:aa:6a:b4:21:99:9b:e8:
d5:b7:ec:cf:67:6c:41:f5:fd:a2:ea:53:32:ee:54:68:da:c5:
97:6b:70:67:85:59:b7:a5:9f:1e:f6:5a:ed:76:2b:d1:54:10:
8d:69:17:4f:bb:cd:0c:5f:b8:d6:2f:d1:d5:fe:a7:4e:b4:dd:
91:13:db:f8:52:46:a5:38:56:67:5a:74:e7:02:17:90:cb:cf:
52:7d:1e:2b:1d:a6:0e:8e:39:24:a0:04:0e:06:ad:02:ca:fe:
32:7c:a2:c2:08:ef:8b:94:76:c0:db:41:13:4a:7a:17:66:f6:
88:b1:b1:a8:f7:83:78:a2:cf:cf:3d:ec:25:45:96:d3:f8:da:
4e:fe:69:c3:46:cc:88:c1:4d:f2:b1:7c:c2:d0:f3:b6:8d:3a:
97:12:06:95:d9:79:2a:ae:d8:8c:d4:aa:6b:91:d5:30:c1:89:
70:e7:da:df:38:1a:69:be:aa:b3:85:d4:74:ee:e2:b7:32:22:
ed:34:47:8c:29:10:85:a2:49:66:e5:40:90:c7:9f:55:25:d9:
17:ee:ac:41:93:2a:65:36:5b:e2:e1:69:37:c9:d0:96:1e:8a:
a4:bb:cd:7a:88:ee:2a:b4:98:f8:c3:01:1e:50:d2:2a:f4:ba:
ba:b4:c3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org