Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rzfbG58QNvAnW1JHagVsLkT8SIQ.roa
File: rzfbG58QNvAnW1JHagVsLkT8SIQ.roa (raw, json)
Hash identifier: i3EaVf/262AK33NGgXZwJ1kqVazdqyBRMvy6r0g/G+w=
Subject key identifier: AF:37:DB:1B:9F:10:36:F0:27:5B:52:47:6A:05:6C:2E:44:FC:48:84
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01824B9E0696DD96DB790315A81C0A7E7784
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rzfbG58QNvAnW1JHagVsLkT8SIQ.roa
Signing time: Fri 29 Jul 2022 20:20:23 +0000
ROA not before: Fri 29 Jul 2022 20:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4b:9e:06:96:dd:96:db:79:03:15:a8:1c:0a:7e:77:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 29 20:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af37db1b9f1036f0275b52476a056c2e44fc4884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:56:e4:d3:39:69:f8:47:91:d1:c5:99:05:47:
e7:de:c6:ca:c2:cc:16:d3:cf:a6:b1:73:37:68:05:
37:bc:d0:99:58:40:eb:9a:44:d6:a6:db:b9:c0:ca:
23:28:5c:51:5d:1d:af:4f:c7:8f:4f:bf:1c:af:5f:
6e:9c:11:87:f5:35:37:42:28:55:f4:f2:5a:b3:a6:
5c:3f:c4:47:bc:30:fe:2e:04:8e:a0:a8:14:2b:62:
c1:7d:3a:76:a8:e1:8a:04:a8:2e:31:26:38:0a:91:
2d:65:5d:62:0d:27:04:a1:dc:33:d4:5d:7a:f2:70:
fb:c4:d1:6d:53:76:65:bc:c4:41:cf:3d:50:b3:f9:
f9:8b:df:86:7f:73:30:9f:29:c8:55:6a:5c:0f:28:
d1:a3:06:6c:8e:16:b6:fd:3d:18:97:23:20:8a:06:
2f:57:1c:0f:b5:90:89:90:48:57:be:ab:80:ec:2e:
45:e4:82:a3:02:a6:9f:1f:2d:42:88:25:94:38:1c:
02:95:47:36:48:91:32:de:ee:78:4c:88:9a:ef:f6:
21:87:3d:01:9c:d2:cf:66:4c:3a:b4:bb:80:59:02:
6e:46:e8:c9:7e:21:b5:44:89:93:a7:d6:a2:cd:93:
d1:35:0c:e4:c2:b6:92:ca:2c:f2:a4:62:11:79:6f:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:37:DB:1B:9F:10:36:F0:27:5B:52:47:6A:05:6C:2E:44:FC:48:84
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rzfbG58QNvAnW1JHagVsLkT8SIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0f:c8:63:4c:bb:6a:bd:8b:c2:34:c2:d1:e8:61:37:d3:a4:
1a:30:ef:69:cf:37:ee:a1:c4:24:87:aa:5d:88:a9:0f:86:b8:
60:fd:70:b4:50:b6:49:9d:ae:7a:de:44:c6:e9:39:6b:54:bc:
5b:6c:0b:9f:fa:d6:bf:32:33:64:7f:b0:1e:39:88:07:a9:8a:
85:b8:ca:45:6d:47:2c:95:a1:8d:22:15:d4:6d:42:d9:16:fd:
23:55:af:cf:b4:a7:18:dc:d9:58:9e:93:6c:a9:95:47:9d:e9:
ca:c7:d4:36:2a:23:b2:2d:40:ff:bc:3e:a0:c2:b7:d7:1e:91:
3a:b6:d4:57:90:96:78:4d:45:52:cb:73:84:e5:6c:bd:c1:fe:
d7:10:29:10:18:45:06:6c:9f:ed:4d:3b:21:d7:64:7f:49:4d:
22:af:be:c7:71:5d:17:d2:c1:24:9b:34:97:74:51:42:2c:fb:
cc:54:8b:51:da:27:46:98:b3:aa:ef:3b:5a:d8:6f:eb:56:46:
32:c2:45:77:83:df:0c:85:79:51:b2:6f:79:cc:b8:34:3a:f9:
a7:10:19:f0:33:09:8f:1a:bd:03:fa:d9:4a:25:aa:5b:09:f3:
28:fb:82:94:45:43:09:7c:0a:4a:9c:d1:1e:f6:be:47:04:1a:
ad:72:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org