Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tV5iaCk535V0fXZSeW8yySvgFgg.roa
File: tV5iaCk535V0fXZSeW8yySvgFgg.roa (raw, json)
Hash identifier: fdgi0Q30orHffyvqytjFGhpu7xzgjcwSU1pqX2LOxvw=
Subject key identifier: B5:5E:62:68:29:39:DF:95:74:7D:76:52:79:6F:32:C9:2B:E0:16:08
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01841FA66C2E8FCAF09C7046FD8F1FC08C5A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tV5iaCk535V0fXZSeW8yySvgFgg.roa
Signing time: Fri 28 Oct 2022 17:31:51 +0000
ROA not before: Fri 28 Oct 2022 17:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.87.0/24 maxlen: 24
88.216.196.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.37.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:a6:6c:2e:8f:ca:f0:9c:70:46:fd:8f:1f:c0:8c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 28 17:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b55e62682939df95747d7652796f32c92be01608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b6:f0:58:a2:f2:91:33:2c:33:7e:d9:be:84:
85:5f:02:01:4e:e1:39:76:c8:3b:bf:ed:a6:ec:18:
f0:ce:d6:30:86:a6:3c:f5:a7:20:d1:1b:55:2c:81:
e0:5f:56:a1:93:73:4c:24:5a:79:fb:6b:b0:33:f5:
93:44:8c:f9:a7:11:f9:d8:cd:b2:b3:37:ed:be:a8:
2b:92:09:15:7f:aa:08:c1:90:f7:b5:34:a1:92:ce:
a8:60:9c:99:dc:e5:8a:51:6c:26:d7:a8:c7:52:c1:
ba:41:37:74:92:0f:2e:20:14:cd:18:ef:75:f4:a5:
48:43:42:ee:7c:b5:93:57:eb:99:a6:e7:44:eb:36:
43:3a:00:0b:15:8b:69:33:b2:f4:6c:c9:9b:55:a3:
7f:34:19:40:17:ee:4f:18:38:ee:1b:02:44:0b:59:
29:ed:10:5c:f9:e4:80:3b:5e:d1:a2:b3:ae:f3:8d:
57:b9:af:5a:90:e6:3b:b5:75:48:16:a3:04:55:dd:
f8:84:b2:65:7e:e2:1f:a2:67:52:55:ef:c9:ca:98:
90:be:b4:a8:63:0d:e9:22:04:0a:40:0b:95:f1:bf:
85:80:94:c7:5b:3b:a0:63:05:09:e5:bb:d9:f3:b1:
c2:77:93:c4:76:d9:44:d5:54:1d:9f:7a:2f:ad:4b:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5E:62:68:29:39:DF:95:74:7D:76:52:79:6F:32:C9:2B:E0:16:08
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tV5iaCk535V0fXZSeW8yySvgFgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.57.0/24
84.32.67.0/24
84.32.87.0/24
88.216.37.0/24
88.216.100.0/24
88.216.130.0/24
88.216.187.0/24
88.216.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a7:8a:75:1d:5a:9f:cc:01:75:fa:58:bb:ad:cb:68:3b:86:
3b:45:96:a8:6f:4c:8e:f6:05:92:c1:37:ff:57:2a:72:57:5f:
bb:c2:b1:25:47:ac:71:da:4a:48:f1:e8:ca:fe:f4:b5:ed:28:
00:db:6f:1e:f6:77:a2:8f:81:6d:b9:9d:67:89:51:29:4b:64:
a9:01:cf:7c:ad:ba:69:e4:ff:ee:76:03:f1:58:92:f7:82:d5:
af:a7:0c:80:18:3f:16:c8:1e:44:05:0b:16:cb:12:ef:89:79:
a3:12:af:8e:81:e5:2e:9a:41:e2:0b:e2:49:35:b2:f5:b4:21:
25:67:b5:1f:59:c7:22:59:ba:94:b0:51:4e:81:86:19:c7:b3:
3f:c7:83:c8:a5:82:9a:02:b7:12:cf:75:60:d5:f1:2b:57:3f:
b7:d1:05:62:df:98:08:18:bb:0b:7b:3d:5e:9c:9c:e9:a0:cb:
d6:8d:3b:5b:6f:49:0a:42:22:9b:68:32:16:4f:99:0e:a5:e9:
b1:87:61:3f:c5:98:05:03:0a:c9:21:b3:fb:3b:e5:98:ed:7f:
4b:c9:5e:9f:98:ca:be:97:d8:fa:4c:e3:07:f2:97:60:e9:35:
ef:42:c2:29:fc:5e:7d:21:b8:ac:df:9d:f5:f7:05:58:41:6d:
b9:93:22:1f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYQfpmwuj8rwnHBG/Y8fwIxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMDI4MTczMTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTVlNjI2ODI5MzlkZjk1NzQ3ZDc2NTI3OTZmMzJjOTJiZTAxNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrbwWKLykTMsM37ZvoSFXwIBTuE5
dsg7v+2m7BjwztYwhqY89acg0RtVLIHgX1ahk3NMJFp5+2uwM/WTRIz5pxH52M2y
szftvqgrkgkVf6oIwZD3tTShks6oYJyZ3OWKUWwm16jHUsG6QTd0kg8uIBTNGO91
9KVIQ0LufLWTV+uZpudE6zZDOgALFYtpM7L0bMmbVaN/NBlAF+5PGDjuGwJEC1kp
7RBc+eSAO17RorOu841Xua9akOY7tXVIFqMEVd34hLJlfuIfomdSVe/JypiQvrSo
Yw3pIgQKQAuV8b+FgJTHWzugYwUJ5bvZ87HCd5PEdtlE1VQdn3ovrUuYqwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFLVeYmgpOd+VdH12UnlvMskr4BYIMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvdFY1aWFDazUzNVYwZlhaU2VXOHl5U3ZnRmdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAVCAnAwQA
VCA5AwQAVCBDAwQAVCBXAwQAWNglAwQAWNhkAwQAWNiCAwQAWNi7AwQAWNjEMA0G
CSqGSIb3DQEBCwUAA4IBAQAep4p1HVqfzAF1+li7rctoO4Y7RZaob0yO9gWSwTf/
VypyV1+7wrElR6xx2kpI8ejK/vS17SgA228e9neij4FtuZ1niVEpS2SpAc98rbpp
5P/udgPxWJL3gtWvpwyAGD8WyB5EBQsWyxLviXmjEq+OgeUumkHiC+JJNbL1tCEl
Z7UfWcciWbqUsFFOgYYZx7M/x4PIpYKaArcSz3Vg1fErVz+30QVi35gIGLsLez1e
nJzpoMvWjTtbb0kKQiKbaDIWT5kOpemxh2E/xZgFAwrJIbP7O+WY7X9LyV6fmMq+
l9j6TOMH8pdg6TXvQsIp/F59Ibis35319wVYQW25kyIf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org