Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mQbFSWENOtoOcKuTqy87DI4Xg80.roa
File: mQbFSWENOtoOcKuTqy87DI4Xg80.roa (raw, json)
Hash identifier: EeczOCj83dYNzgDP+iQhspE1BoccwAgwEr2dgodTozk=
Subject key identifier: 99:06:C5:49:61:0D:3A:DA:0E:70:AB:93:AB:2F:3B:0C:8E:17:83:CD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01846687713CD96B70C3F38B594F76D6D26D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mQbFSWENOtoOcKuTqy87DI4Xg80.roa
Signing time: Fri 11 Nov 2022 11:51:03 +0000
ROA not before: Fri 11 Nov 2022 11:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 88.216.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:87:71:3c:d9:6b:70:c3:f3:8b:59:4f:76:d6:d2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 11 11:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9906c549610d3ada0e70ab93ab2f3b0c8e1783cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:8c:75:e3:91:fc:e5:ca:78:02:40:ee:c7:
72:88:c9:a1:cb:0f:6a:58:db:0a:b6:18:37:ca:d9:
6c:6b:92:a0:43:49:df:cb:05:59:ee:42:88:f6:26:
c8:48:ce:a0:1a:96:26:d1:7d:42:f5:db:1e:12:aa:
c7:a7:53:86:f2:4d:23:82:f6:ef:ab:03:0b:9f:76:
6b:4a:2f:62:3c:f7:da:03:d3:c9:f2:b7:1e:b0:66:
de:a3:1b:7d:22:c7:56:ed:33:0b:6d:8f:23:bb:b3:
23:7f:f1:47:a0:ff:bf:d3:d7:aa:09:17:4f:b1:14:
72:21:9a:05:1b:5e:c5:41:f7:7f:f8:07:d2:2e:03:
e9:d2:f7:7c:2c:7a:7c:55:55:bc:cc:0f:5c:99:21:
f2:d5:40:aa:95:84:63:94:f1:a3:ad:50:55:50:11:
82:1f:0b:18:ae:e2:fa:9c:90:d3:e4:f4:df:4e:65:
9a:90:5e:13:65:7a:1b:65:86:d9:9d:e8:ba:a7:8e:
9e:e0:47:71:a0:cb:6a:20:76:cd:71:b7:d5:f1:05:
65:45:b5:da:0d:c5:37:f6:85:1f:25:5d:17:50:6d:
2d:33:34:b4:eb:68:da:f0:63:96:35:30:25:8c:91:
af:0d:82:02:3c:97:ed:43:8c:8e:6c:4a:a7:cf:fa:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:06:C5:49:61:0D:3A:DA:0E:70:AB:93:AB:2F:3B:0C:8E:17:83:CD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mQbFSWENOtoOcKuTqy87DI4Xg80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.18.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8d:d5:eb:4c:89:71:e8:64:9f:4a:5c:a8:70:9c:6b:3d:b6:
8c:b4:79:4a:be:30:3f:0e:d3:fa:0b:57:33:ff:f4:08:fb:9d:
6d:62:8c:14:b7:1f:09:29:be:d5:93:cb:c0:b2:0c:e7:9c:1c:
79:aa:4e:37:e9:d4:6a:76:35:17:b1:32:cc:45:bb:94:f9:c2:
a5:9c:22:4d:1f:e7:3c:65:3c:b1:82:60:67:82:9a:5f:70:a9:
88:e1:c7:1c:24:f9:24:63:e8:9f:18:9f:6b:13:16:4b:0b:24:
a2:87:d4:33:98:22:f9:f0:1e:30:b0:48:c3:fe:68:05:eb:5c:
ec:65:da:50:03:01:12:7a:fb:23:66:c0:40:28:5c:cb:fc:8b:
dd:f7:a3:da:8f:69:b4:81:5c:bf:38:e6:8d:34:74:e6:65:cd:
80:46:4f:10:d1:1a:dc:8d:af:05:a9:5d:88:a9:02:d8:6f:e1:
09:a1:35:c1:e3:e0:86:92:27:58:e7:c3:41:13:9c:d3:65:f8:
6c:0b:1c:8f:0c:69:76:6e:3f:d4:d8:22:73:80:50:45:4e:49:
3f:84:64:9e:10:25:20:37:4a:93:91:6b:4f:3c:1e:d9:59:49:
46:9c:41:f7:f9:b6:20:c6:bf:e3:a2:e9:4d:25:83:69:2c:66:
6a:8d:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org