Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tV_g5JSUTukX7RJC1eaDyQnbAwg.roa
File: tV_g5JSUTukX7RJC1eaDyQnbAwg.roa (raw, json)
Hash identifier: qiLfWt1Ys6mtLp44XVB5u7N5wqoq/O9W9IBBkeHyq08=
Subject key identifier: B5:5F:E0:E4:94:94:4E:E9:17:ED:12:42:D5:E6:83:C9:09:DB:03:08
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018352100F73B9C134F59078C8A68AC1EFEC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tV_g5JSUTukX7RJC1eaDyQnbAwg.roa
Signing time: Sun 18 Sep 2022 19:25:27 +0000
ROA not before: Sun 18 Sep 2022 19:25:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 88.216.186.0/23 maxlen: 24
88.216.184.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.34.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:52:10:0f:73:b9:c1:34:f5:90:78:c8:a6:8a:c1:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 18 19:25:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b55fe0e494944ee917ed1242d5e683c909db0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:03:91:d4:81:fa:d3:be:61:a9:6c:a2:cd:
cf:36:da:66:a2:c1:f9:4f:2c:34:2a:b2:2e:74:27:
9e:4a:0a:d8:3c:30:87:d1:51:16:f9:72:d4:55:0d:
d7:44:76:36:1e:fb:7d:20:f6:f0:e0:e3:e8:67:ed:
4e:a1:5d:71:a1:ab:4f:6b:97:3f:b7:ff:75:c7:ee:
c8:53:10:99:e7:c7:e1:c2:1a:ce:5a:36:e7:ae:e5:
69:35:8c:65:7e:f4:e7:16:56:1a:99:01:b6:46:7d:
35:9a:e2:10:4f:84:41:f7:75:b6:aa:68:4d:63:01:
af:32:ff:3b:87:bc:3c:3a:d3:55:ac:fb:4f:eb:73:
08:21:c0:55:78:cd:b1:0c:a3:3c:1f:2b:c9:78:0d:
d7:bc:a9:b2:bd:92:e2:bd:79:b7:e1:2c:31:2c:22:
bd:a8:70:da:0e:29:4f:09:c2:9c:57:36:e2:26:86:
b3:66:89:3f:3a:7f:19:9f:bf:5a:b0:fb:ec:5e:dc:
58:c5:10:01:7e:12:b8:63:d8:ca:73:a6:b6:18:56:
05:e1:dd:00:ec:e1:76:30:38:8a:19:92:95:2a:2b:
23:99:cf:46:34:03:4d:fb:76:4c:85:40:f3:bf:83:
96:5b:d4:e2:3d:0f:c0:2b:6d:68:a0:cd:01:80:a7:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5F:E0:E4:94:94:4E:E9:17:ED:12:42:D5:E6:83:C9:09:DB:03:08
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tV_g5JSUTukX7RJC1eaDyQnbAwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/23
88.216.92.0/22
88.216.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:8a:f7:2e:3c:60:14:41:f6:6c:8b:38:fe:44:4e:dc:70:e7:
be:9e:0c:99:e9:1a:b4:cc:38:d3:51:29:81:10:f6:90:3f:bf:
24:97:1b:8e:8b:06:c7:de:0e:7a:ee:01:b8:b2:06:8e:ae:26:
6a:1c:06:17:82:0a:7e:88:35:59:2c:14:64:33:af:81:88:15:
d2:86:3c:2d:fd:c0:eb:20:88:26:69:73:cb:80:cf:51:3b:ed:
70:09:1f:86:e9:4f:60:e6:82:8c:68:52:00:71:73:5e:31:a3:
52:0a:0c:51:0c:75:ab:56:5d:3c:d1:a3:f2:1c:54:bc:b3:c8:
26:48:7c:24:b1:6b:5d:6e:d9:b3:bd:9a:a3:2c:4d:e9:bf:46:
5b:e4:e3:df:16:0f:59:ae:31:55:1f:51:2e:8f:c5:24:6f:43:
7d:29:9a:b0:9b:85:96:1b:18:36:b3:ec:0b:68:5f:ab:68:47:
b5:69:62:74:50:61:58:de:f6:65:4b:88:d7:01:f4:66:1f:d9:
23:c8:a3:1c:99:06:f7:82:0a:56:6b:14:26:23:32:a7:86:e3:
60:b1:01:16:04:7a:ec:25:84:b8:cd:d3:ce:b8:fb:92:8f:23:
ea:86:e6:5b:17:48:e7:8b:df:cd:da:c1:bf:ae:af:6b:2a:38:
dc:99:d0:0d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYNSEA9zucE09ZB4yKaKwe/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIwOTE4MTkyNTI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTVmZTBlNDk0OTQ0ZWU5MTdlZDEyNDJkNWU2ODNjOTA5ZGIwMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm40DkdSB+tO+Yalsos3PNtpmosH5
Tyw0KrIudCeeSgrYPDCH0VEW+XLUVQ3XRHY2Hvt9IPbw4OPoZ+1OoV1xoatPa5c/
t/91x+7IUxCZ58fhwhrOWjbnruVpNYxlfvTnFlYamQG2Rn01muIQT4RB93W2qmhN
YwGvMv87h7w8OtNVrPtP63MIIcBVeM2xDKM8HyvJeA3XvKmyvZLivXm34SwxLCK9
qHDaDilPCcKcVzbiJoazZok/On8Zn79asPvsXtxYxRABfhK4Y9jKc6a2GFYF4d0A
7OF2MDiKGZKVKisjmc9GNANN+3ZMhUDzv4OWW9TiPQ/AK21ooM0BgKdgJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLVf4OSUlE7pF+0SQtXmg8kJ2wMIMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvdFZfZzVKU1VUdWtYN1JKQzFlYUR5UW5iQXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWNgiAwQC
WNhcAwQCWNi4MA0GCSqGSIb3DQEBCwUAA4IBAQBvivcuPGAUQfZsizj+RE7ccOe+
ngyZ6Rq0zDjTUSmBEPaQP78klxuOiwbH3g567gG4sgaOriZqHAYXggp+iDVZLBRk
M6+BiBXShjwt/cDrIIgmaXPLgM9RO+1wCR+G6U9g5oKMaFIAcXNeMaNSCgxRDHWr
Vl080aPyHFS8s8gmSHwksWtdbtmzvZqjLE3pv0Zb5OPfFg9ZrjFVH1Euj8Ukb0N9
KZqwm4WWGxg2s+wLaF+raEe1aWJ0UGFY3vZlS4jXAfRmH9kjyKMcmQb3ggpWaxQm
IzKnhuNgsQEWBHrsJYS4zdPOuPuSjyPqhuZbF0jni9/N2sG/rq9rKjjcmdAN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org