Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mV-G0Njo-nD6avztmJq3S1OjOTE.roa
File: mV-G0Njo-nD6avztmJq3S1OjOTE.roa (raw, json)
Hash identifier: mYPpQzJQnD+mlAQqG4iCzEGEbMnf5g+36nLAnx3Nt0E=
Subject key identifier: 99:5F:86:D0:D8:E8:FA:70:FA:6A:FC:ED:98:9A:B7:4B:53:A3:39:31
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: FFF990
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mV-G0Njo-nD6avztmJq3S1OjOTE.roa
Signing time: Sun 08 May 2022 19:07:52 +0000
ROA not before: Sun 08 May 2022 19:07:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 88.216.188.0/22 maxlen: 24
84.32.92.0/22 maxlen: 24
88.216.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16775568 (0xfff990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 8 19:07:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=995f86d0d8e8fa70fa6afced989ab74b53a33931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:af:25:8e:3a:e3:9d:ed:a7:34:95:49:4a:
ec:8f:76:7f:84:11:26:18:03:06:49:4b:07:fd:cd:
17:c0:f1:9a:a7:6d:34:ce:53:69:d4:d5:41:8a:d9:
20:9d:cf:3c:32:dd:a7:f9:96:74:eb:6d:88:65:2a:
b2:c4:71:66:bc:2a:b6:46:5d:f2:38:e1:04:dd:f9:
10:23:8c:a4:fe:75:b3:84:01:9d:a9:44:d5:04:26:
d3:16:0a:ec:e7:84:9c:ee:31:52:91:ef:db:15:fb:
17:6f:d7:61:ca:c7:2d:e1:0f:b9:13:21:89:c6:7b:
c3:c5:4c:3f:0c:0a:e1:c5:48:44:66:4c:98:8d:0a:
2c:ed:89:a1:85:d6:0f:dd:aa:63:36:19:98:6d:15:
d4:76:5a:9a:c2:51:4f:1a:2c:74:46:cb:21:50:bb:
f6:44:d4:1c:f6:f6:86:b8:b3:4b:48:75:65:40:96:
83:6f:21:b4:cd:ef:6d:ee:3e:05:73:a1:b7:c9:d1:
d3:bb:7b:88:05:c5:fa:c9:12:6f:6c:d9:cc:69:7e:
71:81:ad:68:09:ce:e6:6e:e9:94:8f:c7:5b:6e:1f:
18:56:51:bd:ed:5c:91:e2:77:9b:7d:83:a0:19:09:
3d:d2:f3:a4:cb:71:f4:44:7d:d8:d7:99:28:f8:57:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:86:D0:D8:E8:FA:70:FA:6A:FC:ED:98:9A:B7:4B:53:A3:39:31
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mV-G0Njo-nD6avztmJq3S1OjOTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.92.0/22
88.216.100.0/22
88.216.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:42:0c:2f:31:31:1f:8f:b0:41:e7:79:7a:32:b8:2a:9c:0c:
0e:e4:e0:d8:a5:3e:aa:15:f2:25:32:ec:dd:93:9b:19:2e:82:
8a:0c:dd:f0:5f:84:ba:44:2b:f1:cc:f9:aa:08:d1:d2:c4:b6:
bc:07:c1:2e:e6:95:7c:06:3e:f0:12:1e:fc:df:96:63:62:cd:
48:82:09:b1:1b:cf:79:2f:c5:03:e7:00:44:dc:3a:25:01:54:
cb:5b:d6:17:34:58:e3:9b:91:4c:eb:1a:ec:c7:00:52:a6:8a:
d7:b0:63:dd:22:80:28:8d:da:0f:c3:29:2b:f1:cd:f9:89:7e:
63:e6:ea:9f:80:30:b5:8e:61:3b:58:2d:bf:07:eb:16:44:74:
f9:0e:dc:c4:c7:5f:ce:fe:bd:ec:f0:bd:ef:4f:13:a8:0c:f3:
2e:40:7d:bb:50:87:43:21:64:07:43:4a:b2:13:a1:42:9d:81:
1f:69:67:e4:36:00:0a:87:2c:05:b4:6e:40:10:45:77:86:e1:
8f:49:e6:a4:6c:fb:74:3e:57:79:4d:e6:ba:72:17:68:f1:4f:
ab:95:81:13:cd:3a:b3:a6:fa:fb:9b:59:d3:7d:32:e1:b2:87:
ab:81:b1:1c:4a:92:76:9a:db:36:f0:c8:e0:2b:6f:4a:e5:90:
43:98:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org