Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pl3JGRp9BF0OhtZx8EPte1Yx9hY.roa
File: pl3JGRp9BF0OhtZx8EPte1Yx9hY.roa (raw, json)
Hash identifier: CtawgEIsR1bEinwx+gA+b0UXp1+c+TfsimqfrnfOjt8=
Subject key identifier: A6:5D:C9:19:1A:7D:04:5D:0E:86:D6:71:F0:43:ED:7B:56:31:F6:16
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01841080E208070A61CF084759A8B306DD6D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pl3JGRp9BF0OhtZx8EPte1Yx9hY.roa
Signing time: Tue 25 Oct 2022 18:56:32 +0000
ROA not before: Tue 25 Oct 2022 18:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:80:e2:08:07:0a:61:cf:08:47:59:a8:b3:06:dd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 25 18:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a65dc9191a7d045d0e86d671f043ed7b5631f616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:86:61:b4:fb:26:25:2d:06:d0:1b:27:64:
92:3f:eb:80:0d:aa:89:b1:b6:e8:e4:fe:c8:41:18:
f6:8f:da:d7:e0:6d:15:4a:16:18:01:82:d3:97:86:
02:53:da:b1:08:e6:f0:a6:5c:0f:11:1a:b2:82:75:
09:22:6a:de:80:6e:06:c4:c4:28:a0:a2:43:5a:c1:
fa:10:ce:b8:ba:04:bb:79:c2:28:9c:73:02:1b:78:
4f:fe:24:c2:b1:aa:f9:95:a0:fa:e9:e4:a2:8d:40:
16:b0:30:9b:bf:b0:d9:b0:29:21:6d:bc:0d:be:61:
a8:01:64:ef:8d:e1:02:46:95:c1:71:b5:96:64:82:
92:02:62:eb:80:90:4e:ff:a4:c9:c8:95:86:dd:d4:
bf:a5:a5:47:6d:8e:f4:3a:df:44:92:c3:65:b0:02:
a8:01:03:79:a6:61:a0:0a:60:42:3e:04:50:7e:73:
16:2e:32:9f:20:ee:9a:30:ac:22:6a:28:8a:a1:3a:
36:8f:db:f4:79:5c:78:4a:b5:6b:d0:4e:b6:8c:da:
f8:ec:da:33:51:a0:9f:7e:c4:6a:c2:b2:8e:ab:17:
ea:86:d8:e4:bd:e5:4a:eb:7f:d5:d3:d9:f9:1e:98:
7c:57:4f:11:4d:81:cc:fc:4c:86:28:a5:0e:d0:7d:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5D:C9:19:1A:7D:04:5D:0E:86:D6:71:F0:43:ED:7B:56:31:F6:16
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pl3JGRp9BF0OhtZx8EPte1Yx9hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/24
88.216.46.0/24
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
0b:df:47:0b:54:1f:57:62:59:c9:db:a4:98:bd:f4:cc:f3:ef:
17:f3:e8:77:bb:6d:2b:83:1b:7f:5d:24:93:18:0f:89:fd:be:
38:5a:46:73:be:36:87:67:72:d5:9d:5d:25:82:47:12:49:c6:
9b:8a:19:59:b3:67:5e:4b:ef:62:89:3d:21:3b:05:0b:36:85:
20:3f:20:c2:9e:8c:47:92:70:fc:6e:e6:07:8e:d0:69:98:37:
48:d1:6a:ac:d0:08:f5:df:e9:85:2c:c1:29:85:19:2d:96:03:
ea:a2:78:79:46:d1:df:86:29:cb:39:1f:c4:62:89:84:a7:9d:
70:82:78:27:04:c0:75:bb:9f:ba:ae:14:e7:21:19:ac:19:50:
98:f2:91:60:e6:0a:47:93:0f:b4:f6:54:95:6c:23:fb:f5:2c:
5a:fe:02:e0:e8:cb:85:41:1b:7f:27:c0:23:b1:f7:7e:98:62:
8e:0a:c1:4c:eb:0e:4d:95:7f:76:1c:e4:1f:06:54:41:67:18:
ad:4e:53:e0:26:83:61:26:b5:5a:92:e3:5a:75:48:59:31:2e:
49:d7:42:d3:d4:a5:41:c2:26:b7:19:41:a8:72:69:68:1d:ff:
01:15:f3:f9:ea:4d:23:77:57:5f:9e:42:06:b2:44:05:5a:4d:
56:0b:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org