Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uAGjmzwewvdQF7_E8B9d1L5uuzQ.roa
File: uAGjmzwewvdQF7_E8B9d1L5uuzQ.roa (raw, json)
Hash identifier: xF5e2cViKNglxzn0sJ31rra/iUUf9Il4Y19TYIa0dwE=
Subject key identifier: B8:01:A3:9B:3C:1E:C2:F7:50:17:BF:C4:F0:1F:5D:D4:BE:6E:BB:34
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: A25F9D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uAGjmzwewvdQF7_E8B9d1L5uuzQ.roa
Signing time: Sun 10 Apr 2022 15:31:34 +0000
ROA not before: Sun 10 Apr 2022 15:31:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 88.216.96.0/21 maxlen: 24
88.216.232.0/21 maxlen: 24
88.216.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10641309 (0xa25f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 10 15:31:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b801a39b3c1ec2f75017bfc4f01f5dd4be6ebb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:df:cc:64:d7:e2:36:8d:21:9a:9d:a4:99:
7f:80:17:4a:de:15:34:d9:27:dd:37:f2:08:99:53:
98:ad:b1:66:f2:50:e1:bb:ec:4f:f6:dc:c3:21:c5:
0d:98:c6:f4:d7:86:6e:ab:a4:7c:ba:d3:fd:20:45:
5e:26:d8:d9:0f:a7:7d:13:00:6b:a4:b9:3b:a2:37:
65:3b:a3:69:58:e8:12:b3:6a:40:1f:7a:f8:75:69:
d7:06:03:f7:ad:dc:35:ba:aa:e0:8c:ce:02:61:aa:
ba:1d:a6:4a:9f:14:42:70:67:ff:67:22:0d:9b:c8:
fe:71:be:c9:8f:06:55:f3:2f:3d:1c:12:36:a0:21:
7b:26:11:69:e8:de:5c:88:27:3b:5f:7f:1b:38:0e:
bf:4a:4c:96:9d:c7:e4:63:28:63:92:01:24:da:46:
13:a5:0a:db:5e:f6:94:df:03:3c:34:16:d8:cf:8f:
2e:e1:b0:39:24:34:83:8c:53:ea:27:c8:12:69:fc:
7a:42:ff:22:03:a8:af:bd:af:fe:bd:ee:d0:4f:f9:
5f:f1:2a:ee:56:5d:82:b2:8e:58:3d:8d:e5:00:23:
6b:e9:b1:46:7d:87:3f:99:cf:e4:aa:ac:45:45:b0:
ee:c6:7b:67:85:8e:d2:4f:93:e4:2b:a7:a3:23:ca:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:A3:9B:3C:1E:C2:F7:50:17:BF:C4:F0:1F:5D:D4:BE:6E:BB:34
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uAGjmzwewvdQF7_E8B9d1L5uuzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.96.0/21
88.216.128.0/21
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
03:62:5f:48:61:12:d4:9c:d2:aa:2f:b9:84:34:d8:a3:99:d5:
04:41:c6:1d:2d:00:3c:20:bd:01:cc:d8:5a:b9:7d:2c:fe:19:
5f:13:ed:a4:46:5e:cd:c8:d2:5d:cf:29:f5:02:ce:a0:92:c0:
a5:ff:8b:43:d2:30:ab:77:ac:5b:21:28:7b:17:fa:ff:ad:b3:
a3:3f:36:c6:7e:15:b5:30:cf:3d:80:7f:ca:b1:f9:a4:a2:fd:
7e:3b:6d:3a:cb:15:6a:39:b4:a5:23:1a:de:e8:4d:42:0f:b0:
c3:81:c9:e8:6a:e9:20:19:f6:96:4a:a9:8e:1d:6e:91:a3:f4:
fc:3e:33:ef:60:fb:dc:7a:0e:30:12:77:d3:5f:b9:42:8f:de:
a8:aa:75:42:13:55:40:e2:d5:b9:dd:d6:c8:0b:fe:dc:1f:28:
4f:11:ca:27:02:7c:d8:3f:71:1b:b4:d6:66:32:ed:89:20:22:
0f:3d:72:f0:a0:ec:a8:a4:ed:26:52:11:dd:90:6f:00:fd:7e:
a3:c6:75:0b:9e:9c:55:66:14:19:c9:3f:fe:13:18:29:bc:a0:
77:14:f9:4e:65:ec:e9:bf:09:53:f1:40:b7:68:b6:e5:d1:15:
11:62:32:bf:d8:e9:97:4d:4d:ca:4a:ef:d5:77:da:1c:1d:fa:
74:10:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org