Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uqHfeGWs1uXJHyxD6DIgCRH6MV0.roa
File: uqHfeGWs1uXJHyxD6DIgCRH6MV0.roa (raw, json)
Hash identifier: RS4MscFvRws/8+8AdaISg+CuIKFCEkSCRdQFv0VAEQ8=
Subject key identifier: BA:A1:DF:78:65:AC:D6:E5:C9:1F:2C:43:E8:32:20:09:11:FA:31:5D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184CA3FAACCD3C098F75F4EA062DFAA9284
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uqHfeGWs1uXJHyxD6DIgCRH6MV0.roa
Signing time: Wed 30 Nov 2022 20:34:40 +0000
ROA not before: Wed 30 Nov 2022 20:34:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 88.216.222.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ca:3f:aa:cc:d3:c0:98:f7:5f:4e:a0:62:df:aa:92:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 30 20:34:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baa1df7865acd6e5c91f2c43e832200911fa315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:89:6e:5e:b6:98:29:f3:b8:43:7f:13:52:
dd:1c:02:9c:5e:9c:8e:a7:3b:af:bb:7d:00:d2:4c:
11:d1:f2:ea:8a:36:d2:d0:6d:64:e3:95:28:86:94:
be:11:e5:c4:61:85:20:06:5c:5f:72:e9:bf:fb:dd:
19:0c:6a:2b:e0:6a:37:79:61:07:26:88:2e:4f:b0:
61:74:48:4f:e3:89:43:40:16:ef:0a:6d:9c:14:69:
86:c9:cd:89:d3:39:35:38:bf:94:56:c7:9b:48:d9:
05:a9:86:d5:31:24:a8:79:51:2b:c3:8a:cd:73:ab:
46:81:e8:d5:5b:c1:e9:55:c4:73:03:a6:45:13:92:
84:65:8d:78:a2:16:7f:80:a3:a7:18:2c:a9:91:cb:
3e:42:49:68:66:3a:9c:4a:1a:a8:8d:a7:d5:b2:e5:
33:02:ce:27:76:c1:f3:95:5c:23:de:56:f3:30:24:
e7:9d:49:cf:45:41:70:6d:2a:5c:59:2a:da:da:8c:
7f:a5:a1:8e:42:be:f8:4d:fc:75:29:8b:2a:0d:68:
67:6a:08:bd:99:6a:4d:4f:10:6e:a2:72:06:c4:13:
49:c6:59:18:2a:dc:8e:c4:0a:99:77:30:6e:8e:f1:
f8:e5:08:76:f5:30:81:48:fc:21:7e:cc:a5:bf:9e:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:DF:78:65:AC:D6:E5:C9:1F:2C:43:E8:32:20:09:11:FA:31:5D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uqHfeGWs1uXJHyxD6DIgCRH6MV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.51.0/24
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:17:b5:97:6a:bb:8a:56:2a:a8:38:ee:70:56:ea:5e:f2:34:
a2:f9:72:fd:a7:67:f4:b0:aa:ba:05:c9:94:69:9f:bc:aa:e9:
7e:89:8c:71:c3:82:89:3d:57:a1:0a:1d:b9:b0:39:3e:14:7d:
fa:30:9a:2b:5e:4e:84:e6:86:e1:5e:23:62:32:d9:1a:5e:3b:
c9:83:8d:97:64:9f:a0:81:64:2a:cf:34:c7:aa:52:82:57:5f:
e3:7e:d0:fd:6e:4f:76:bb:04:92:c8:be:57:5e:83:21:d8:57:
aa:35:03:ec:fe:03:e8:11:c5:5a:5f:ee:fd:99:68:b2:69:bb:
0e:fd:61:97:eb:89:03:15:63:eb:df:d5:c7:4c:4f:73:27:9f:
93:fd:99:1b:10:8e:47:0b:18:0b:0d:87:ed:48:8d:11:89:c0:
0d:ed:cc:75:b9:18:7b:0e:8f:37:07:5e:dd:7c:cf:53:8d:78:
16:d1:cd:f3:87:45:ec:65:b3:e5:13:4d:1a:10:0d:d4:6b:38:
44:b6:9f:d2:4b:2c:f2:74:16:d2:f8:60:a7:74:b7:c8:d5:95:
f3:e2:0c:49:57:84:b2:1b:3a:03:71:b2:89:af:12:5e:89:8f:
e7:7a:6a:c3:95:9d:ce:73:3d:24:5d:94:ff:7d:50:0f:2d:5e:
4f:fd:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org