Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sTKQExYWUuZEU0S2oWfYn1FcB5U.roa
File: sTKQExYWUuZEU0S2oWfYn1FcB5U.roa (raw, json)
Hash identifier: 1um3lgjNXX5kszbiyH2QLFI6+2BeC8g1i8jQwK3uGTI=
Subject key identifier: B1:32:90:13:16:16:52:E6:44:53:44:B6:A1:67:D8:9F:51:5C:07:95
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183C849B200EE572FCCB9597B10BBB3A396
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sTKQExYWUuZEU0S2oWfYn1FcB5U.roa
Signing time: Tue 11 Oct 2022 18:23:36 +0000
ROA not before: Tue 11 Oct 2022 18:23:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 84.32.68.0/22 maxlen: 24
84.32.82.0/23 maxlen: 24
88.216.209.0/24 maxlen: 24
88.216.210.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:49:b2:00:ee:57:2f:cc:b9:59:7b:10:bb:b3:a3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 11 18:23:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1329013161652e6445344b6a167d89f515c0795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:df:b9:35:b5:7b:b8:69:eb:cf:0f:91:c1:
a6:fa:e1:79:1a:11:d6:43:b9:34:03:eb:71:10:97:
19:4b:48:49:46:9b:95:e9:46:2c:f9:4b:51:dd:6f:
1c:e3:6c:08:b0:78:d9:ed:13:9e:9c:73:9b:29:4a:
18:fb:2c:df:04:94:a9:bc:14:a2:55:97:25:2e:08:
22:8f:75:4f:90:cf:c1:c0:55:71:a9:4a:a2:18:99:
b8:29:2f:49:7b:15:04:fd:fe:af:8a:3e:54:55:1f:
dc:b0:8b:29:e4:f5:4b:bd:58:4b:a3:74:25:62:a4:
43:64:cf:01:85:97:ad:7f:85:2b:a1:12:08:05:77:
14:fd:2d:f0:7c:31:fa:96:17:84:5e:d8:e4:4e:28:
d4:76:be:f0:75:e9:61:fe:ce:3d:44:b9:42:4d:e3:
c1:b7:57:00:e8:a9:0c:63:0c:73:f0:45:06:7d:31:
3f:e9:76:38:c1:5c:ad:60:b8:14:a5:fa:1a:42:a1:
7b:cb:41:ee:68:cd:22:09:ab:34:c7:c3:ec:d9:bf:
38:f3:aa:03:bb:a0:9c:20:1a:31:2c:53:6c:7f:1a:
cc:b3:88:31:69:31:08:e1:24:57:0b:d7:a8:41:12:
b5:57:b4:09:fb:43:4e:e7:56:fa:31:52:1c:54:62:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:90:13:16:16:52:E6:44:53:44:B6:A1:67:D8:9F:51:5C:07:95
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sTKQExYWUuZEU0S2oWfYn1FcB5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.68.0/22
84.32.82.0/23
88.216.16.0/24
88.216.19.0-88.216.23.255
88.216.32.0/24
88.216.46.0/24
88.216.209.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
21:5b:1f:98:de:8d:2e:52:16:f2:c1:d7:4a:a4:1d:64:82:f2:
18:9e:38:16:53:93:7f:76:32:51:3e:9f:ae:34:1e:80:c5:b7:
27:09:66:23:fc:a2:ae:30:49:e1:2f:03:20:b9:3a:6c:05:56:
93:ee:fd:37:24:99:b4:dd:88:14:29:f7:22:da:6d:9e:45:40:
3f:19:60:c0:6d:51:4d:8a:06:96:a2:21:04:7d:ab:d7:93:b4:
0f:82:b5:2c:bb:a4:ac:c0:31:81:5d:e1:fe:44:67:f8:f2:9d:
eb:ad:57:e9:f7:1a:28:56:c0:77:07:b0:fb:f8:87:0a:06:46:
6b:2c:a1:c6:5c:6e:44:09:ce:6f:f0:a3:20:cf:41:dc:76:68:
11:77:73:25:03:10:b0:87:56:f1:c3:0a:25:c2:2b:a1:e0:1b:
91:68:16:6c:da:98:6c:c0:cf:59:a5:71:bb:dc:04:2d:d5:c0:
7d:25:50:27:53:6e:e2:f3:a4:69:7e:a0:87:c0:84:d0:f1:a7:
c7:30:c7:60:0d:ec:11:32:db:e3:93:7d:de:15:72:65:5a:cf:
bf:96:b3:d6:fe:3a:ac:b9:6c:c8:28:65:fe:33:39:6d:84:71:
bd:fa:12:18:92:b4:06:7d:b9:6a:2e:2b:d1:d5:91:4e:da:58:
c5:d0:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org