Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pEEV5ayfNnIHLg4vmBHEFzJ6tCQ.roa
File: pEEV5ayfNnIHLg4vmBHEFzJ6tCQ.roa (raw, json)
Hash identifier: /MXxl3dMPcHCP8iZcaaHMNIfA6G2u6OoXDCwqQbJB+0=
Subject key identifier: A4:41:15:E5:AC:9F:36:72:07:2E:0E:2F:98:11:C4:17:32:7A:B4:24
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01845B0E248DE7F250449C15063CBD989175
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pEEV5ayfNnIHLg4vmBHEFzJ6tCQ.roa
Signing time: Wed 09 Nov 2022 06:22:44 +0000
ROA not before: Wed 09 Nov 2022 06:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.90.0/23 maxlen: 24
84.32.88.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.132.0/23 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.232.0/21 maxlen: 24
88.216.16.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:0e:24:8d:e7:f2:50:44:9c:15:06:3c:bd:98:91:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 9 06:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a44115e5ac9f3672072e0e2f9811c417327ab424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:57:9e:e3:15:7f:ec:d5:f1:9c:fe:10:9e:
57:47:b8:d2:29:0f:1c:de:eb:91:e2:28:b8:a7:06:
35:b8:4a:50:39:90:da:0f:f5:a8:db:6d:3c:ef:11:
e2:06:90:16:e0:8b:bd:37:92:37:df:99:07:d3:b0:
51:fa:95:bc:97:b9:25:d5:aa:9d:78:a3:72:bb:7d:
1d:bb:e3:d8:79:7f:96:96:e0:d2:e8:8c:10:1e:30:
10:c7:55:73:7a:ee:04:0f:de:ce:c7:1a:a2:ed:e0:
a6:ef:91:17:22:94:13:a8:80:d8:68:4f:95:5f:13:
c1:43:17:15:a7:33:38:54:09:93:84:6a:bd:d3:bd:
10:10:3b:aa:61:cb:a9:a2:29:25:ed:63:6d:60:e5:
4d:3b:9a:63:3e:cc:82:7c:7a:75:e1:3f:d4:d3:85:
4c:96:ab:cd:aa:63:7d:93:20:5c:bf:d5:a6:22:9c:
a1:9f:a7:22:c9:41:9b:7a:e4:a9:0f:0b:2d:94:b3:
5d:7d:31:3b:12:8a:71:45:aa:7d:97:fd:67:84:f8:
f8:a6:36:5d:2f:59:22:66:24:78:e3:1b:e0:81:9f:
d8:d6:1e:8d:c2:9e:1d:df:e9:e7:91:9b:d7:bf:d7:
b9:2d:85:15:a5:95:d0:ec:8a:7a:38:df:b8:f9:02:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:41:15:E5:AC:9F:36:72:07:2E:0E:2F:98:11:C4:17:32:7A:B4:24
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pEEV5ayfNnIHLg4vmBHEFzJ6tCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
84.32.88.0/22
88.216.16.0/23
88.216.33.0/24
88.216.41.0/24
88.216.43.0-88.216.45.255
88.216.92.0/22
88.216.128.0/24
88.216.131.0-88.216.135.255
88.216.224.0/22
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
45:a2:c0:d2:98:84:bd:a3:93:ed:00:43:67:6a:5c:ce:84:f5:
9b:9e:a7:c5:3e:76:db:f8:29:d2:d8:90:08:87:f0:4d:fb:39:
b9:ea:21:95:87:10:77:dd:4a:c8:c9:0f:2c:dd:39:ad:41:2d:
9f:68:45:96:21:b6:91:57:81:6a:c5:33:52:ad:04:fa:f8:d1:
8a:95:28:d8:de:37:e3:ea:de:b8:5a:8f:a5:d7:4a:51:0f:bb:
50:e7:8d:ba:7c:44:02:96:a2:b3:df:27:a9:af:d0:31:96:00:
5e:2f:fe:14:58:37:39:a0:03:e3:d4:8d:76:bb:ac:ed:a7:be:
31:be:ce:cb:57:0f:b8:41:b8:e8:c3:c6:04:f1:80:6d:61:ed:
a0:c6:9b:77:b2:95:ec:b5:99:d6:4e:9b:23:f8:ca:ba:26:2f:
ad:de:ae:3b:1d:ca:b1:df:0c:63:ea:93:84:5c:23:ab:76:d3:
57:e5:cd:2e:9f:08:b1:49:e3:e1:de:da:c0:5c:69:69:a4:b2:
55:ce:2a:5c:88:61:c6:ed:e9:63:0e:ac:09:a7:2d:41:a1:19:
90:49:93:d2:3a:e2:a1:46:a4:05:15:5b:53:de:ad:6f:8d:ce:
4d:74:d4:24:34:b0:88:59:ef:3d:ed:47:d5:e9:f7:10:26:a9:
93:c7:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org