Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oOUzX4jeny0rs1eW1X6umTCYSpc.roa
File: oOUzX4jeny0rs1eW1X6umTCYSpc.roa (raw, json)
Hash identifier: OE5W4INTzSAG6RqGVTXoce9KR+V00GMZD8hxuRA4PdQ=
Subject key identifier: A0:E5:33:5F:88:DE:9F:2D:2B:B3:57:96:D5:7E:AE:99:30:98:4A:97
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 49F1D2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oOUzX4jeny0rs1eW1X6umTCYSpc.roa
Signing time: Mon 14 Mar 2022 15:26:32 +0000
ROA not before: Mon 14 Mar 2022 15:26:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 88.216.184.0/23 maxlen: 24
88.216.186.0/23 maxlen: 24
88.216.90.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.216.0/21 maxlen: 24
88.216.34.0/23 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4846034 (0x49f1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 14 15:26:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0e5335f88de9f2d2bb35796d57eae9930984a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:47:c6:12:bc:a8:73:8c:76:39:58:77:1d:
a6:e2:01:07:9a:2d:4b:00:ff:dd:f5:b0:4d:45:18:
0d:29:79:2d:dc:ad:af:62:e5:05:83:63:d1:fa:e5:
32:93:12:ea:fe:92:de:a2:9c:36:51:e8:13:e4:82:
7a:c2:af:f8:1b:96:08:74:c0:0a:0d:b8:8f:b3:0d:
9e:e3:5a:03:15:b7:43:5d:9e:1a:c3:81:f0:14:30:
4b:58:15:2a:7d:2a:ca:2c:6f:38:58:fa:28:bf:05:
e3:ca:5b:ca:f3:6f:cb:76:85:30:bf:16:fe:cc:ee:
61:a6:16:60:94:4b:bd:5b:00:66:57:6e:97:ee:65:
4c:13:95:6b:3b:ce:4c:2c:4d:40:8f:59:15:54:64:
30:b8:fd:f4:08:71:9e:d5:89:99:5a:cf:51:18:d1:
26:7c:08:45:7f:ec:c9:dd:b1:03:59:09:47:6f:c3:
f8:cf:1a:46:25:f1:00:55:d2:9f:da:43:7e:bd:50:
8f:50:72:94:e8:a2:3b:53:f1:43:4e:e0:90:dd:bd:
55:13:b1:dc:c9:28:c9:06:9f:43:6e:11:87:73:6b:
03:17:a4:42:57:87:cb:c1:04:39:50:70:72:31:06:
4a:e7:58:93:43:6a:38:10:2a:bd:07:46:9b:18:65:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:33:5F:88:DE:9F:2D:2B:B3:57:96:D5:7E:AE:99:30:98:4A:97
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oOUzX4jeny0rs1eW1X6umTCYSpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/23
88.216.44.0/23
88.216.90.0-88.216.95.255
88.216.184.0/22
88.216.216.0/21
Signature Algorithm: sha256WithRSAEncryption
36:f7:08:65:33:eb:da:d7:17:9e:98:61:89:d7:a0:fb:2e:38:
58:9f:bb:20:fb:fc:62:d3:13:93:8d:18:b3:94:f8:c1:b9:44:
1c:f8:40:0a:05:9f:dd:21:28:f6:02:07:c8:20:09:7c:40:49:
7e:f4:8a:6e:63:30:53:d6:46:e1:69:94:e8:5e:3f:91:53:7c:
42:84:8a:03:e5:e0:24:51:60:a3:a2:83:5a:cd:44:c6:78:03:
13:58:9e:69:02:23:ed:5b:dc:f9:37:43:5a:d0:82:d2:8f:25:
12:07:0d:b4:d4:d0:1f:b0:c0:6b:01:44:a2:24:98:58:1e:c6:
ee:6e:97:a7:ab:cd:7b:1a:9f:af:13:a6:57:a7:97:2b:69:60:
5f:93:92:27:77:11:fc:a1:3c:2d:dc:d2:d5:88:2f:f7:ae:f5:
96:f1:88:a4:bd:2c:e5:24:c0:58:02:88:ef:8c:b2:41:e4:73:
91:67:44:77:e0:af:75:dc:9f:53:1f:18:f7:04:ab:f1:33:60:
aa:1a:e9:a3:7c:18:ad:c9:53:15:93:2b:72:db:5e:85:ad:64:
de:c9:e4:59:32:f9:10:ca:17:df:9e:c6:c7:9d:f3:b8:2c:49:
c3:18:f8:4e:e6:9e:eb:4a:67:45:60:2c:93:2b:91:8d:99:db:
fd:17:47:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org