Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tF-jJp1XPgpgmpwO82Sc8WDzTNc.roa
File: tF-jJp1XPgpgmpwO82Sc8WDzTNc.roa (raw, json)
Hash identifier: 0PoXzNCJf/Pfu2tOzLFLVU2mtjUdokrc869T6nHEBmg=
Subject key identifier: B4:5F:A3:26:9D:57:3E:0A:60:9A:9C:0E:F3:64:9C:F1:60:F3:4C:D7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 027C17
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tF-jJp1XPgpgmpwO82Sc8WDzTNc.roa
Signing time: Wed 23 Feb 2022 13:31:49 +0000
ROA not before: Wed 23 Feb 2022 13:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 88.216.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162839 (0x27c17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 23 13:31:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b45fa3269d573e0a609a9c0ef3649cf160f34cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:b1:99:91:d5:ac:ff:97:c0:6c:62:f2:a3:
6f:d8:1e:7c:b9:68:52:06:c3:0c:37:67:63:cf:6f:
6e:78:87:c4:f9:ad:94:71:e8:08:c6:b9:70:44:78:
50:da:e7:c0:4f:8c:01:f2:75:ef:7d:97:04:22:e8:
fe:a4:2d:a3:38:fb:12:a4:e8:29:a0:92:1f:8c:c0:
31:18:7d:b6:41:60:47:6c:63:85:27:8f:af:ac:65:
d7:a4:c2:0c:fe:87:16:63:ef:fe:4e:d2:97:35:f0:
64:6e:75:ec:d3:a7:68:c3:9f:37:2f:2d:3b:73:c2:
5e:c4:6a:c1:1a:d8:e6:6d:e8:9f:1c:da:78:5b:cf:
64:4e:85:7b:9b:db:b6:e1:82:ec:9e:75:95:1b:50:
b6:ea:f5:d2:46:27:43:94:6b:34:65:be:a6:34:2e:
ef:3b:f1:23:ed:ca:5b:7c:0a:23:da:65:82:90:e8:
3f:7b:ae:5e:db:74:ff:c7:70:fc:26:28:56:48:11:
b7:7e:91:46:65:20:3d:f5:42:d8:e2:55:0d:88:3d:
9d:0a:d4:98:6c:55:8b:07:1d:78:16:85:d2:0b:1b:
ec:6b:0c:fc:82:94:84:18:c1:ec:0e:60:f8:36:73:
4a:0d:9f:47:de:c3:f2:d8:2d:58:79:41:8b:c2:59:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:A3:26:9D:57:3E:0A:60:9A:9C:0E:F3:64:9C:F1:60:F3:4C:D7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tF-jJp1XPgpgmpwO82Sc8WDzTNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ed:4d:e5:ce:ff:7c:22:09:90:6d:a9:3a:d2:bd:1e:f1:2d:
69:9a:d2:07:d7:73:b3:ef:ea:db:e4:6b:ac:f9:3d:0c:e1:16:
81:a2:8d:e7:e7:2f:1a:38:1b:86:9b:9f:60:80:22:a4:22:d2:
e7:fa:42:09:d4:f0:de:b1:b5:6c:67:69:64:4d:64:f4:c0:d8:
79:0e:90:78:0e:33:e7:3c:04:8b:94:11:7a:cb:dc:18:ec:46:
d8:87:da:82:8b:ff:80:05:96:46:80:b5:db:18:8a:fa:ab:6d:
99:95:41:dc:f1:70:0f:59:b4:be:51:c6:5e:e5:06:cc:47:e9:
92:c1:af:32:51:4b:46:cd:cd:ef:14:67:56:cd:22:c7:13:a1:
e8:52:1b:02:3b:6d:13:bc:01:e4:83:9a:a1:8e:02:75:b7:8c:
7d:06:1d:a5:e5:76:f9:50:bf:dc:51:9e:1e:c3:eb:14:6f:c0:
22:9b:8f:6b:5c:b8:ed:67:68:00:c6:80:8c:08:3d:e7:dc:cb:
6e:20:21:06:a5:d5:3c:b5:63:f5:f4:a8:ca:b3:2c:79:fe:10:
fd:96:8c:12:ec:d9:37:f4:b1:dc:68:ee:0d:66:bb:92:26:2d:
19:f3:e9:30:c7:8b:60:f9:f6:09:dc:00:09:51:f6:c8:63:d8:
98:b6:8c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org