Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v9znguyRFwcfCxRcF3yK4Il31qE.roa
File: v9znguyRFwcfCxRcF3yK4Il31qE.roa (raw, json)
Hash identifier: qOFpQHVC16Lc1pdGqv4+YKaqX4ePCW/DN5bHdxZgZN4=
Subject key identifier: BF:DC:E7:82:EC:91:17:07:1F:0B:14:5C:17:7C:8A:E0:89:77:D6:A1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0181E23305B064299B966B65498E6789DB8D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v9znguyRFwcfCxRcF3yK4Il31qE.roa
Signing time: Sat 09 Jul 2022 09:03:23 +0000
ROA not before: Sat 09 Jul 2022 09:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.60.0/22 maxlen: 24
88.216.188.0/22 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/22 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.40.0/22 maxlen: 24
88.216.90.0/23 maxlen: 24
88.216.100.0/22 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.18.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.36.0/22 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e2:33:05:b0:64:29:9b:96:6b:65:49:8e:67:89:db:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 9 09:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfdce782ec9117071f0b145c177c8ae08977d6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:35:33:7d:11:47:1c:fd:ae:ae:59:9f:6d:
4c:6d:2f:67:cb:3c:1d:4f:ab:01:e7:70:5a:16:ad:
45:82:cb:84:a9:ba:c0:e5:d8:be:7f:87:b8:98:f3:
09:9f:25:2d:e4:44:a1:1f:9b:ff:39:51:31:1c:fe:
f5:bb:c2:19:71:1d:d8:6c:0f:d4:20:b4:9e:ec:3b:
e6:3f:4f:96:0b:c8:bb:db:cb:c7:a5:94:7b:88:45:
45:3b:b4:01:a4:d5:44:e2:d2:19:13:22:63:d0:c1:
5a:6f:dc:9d:4c:f5:e9:cc:f1:de:a7:2b:d5:b5:68:
ca:58:e8:c2:87:df:99:22:e8:b1:f3:0b:17:69:ff:
64:22:a1:98:5f:3d:43:61:2e:f3:1e:e2:40:13:81:
06:1f:db:b7:09:c7:31:c0:19:a6:b0:9c:5b:f8:32:
89:16:eb:91:ce:7b:cd:f5:6f:04:7c:16:f5:09:4d:
81:e9:d0:cf:d8:eb:9f:41:a4:ae:72:b3:a3:8b:2f:
5a:60:9c:e5:c6:41:e0:df:ff:14:66:a8:35:4b:b7:
70:59:38:8d:a8:17:56:63:84:8b:9c:14:f5:c4:7a:
af:e4:46:7f:47:af:7d:c0:cf:2d:17:7a:e8:e9:64:
3d:d7:24:56:11:d0:b2:4b:17:29:b0:f9:c7:88:3b:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DC:E7:82:EC:91:17:07:1F:0B:14:5C:17:7C:8A:E0:89:77:D6:A1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v9znguyRFwcfCxRcF3yK4Il31qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.40.0/22
84.32.60.0/22
84.32.88.0/24
84.32.92.0/22
88.216.16.0-88.216.18.255
88.216.35.0-88.216.41.255
88.216.43.0/24
88.216.90.0/23
88.216.100.0/22
88.216.187.0-88.216.191.255
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:96:f4:83:0e:b6:3e:8f:de:53:a0:d5:8c:fe:16:98:f9:dc:
b9:cd:ff:a4:bf:ff:9b:92:ba:90:1f:9c:f8:90:15:59:fb:4e:
da:da:f4:42:21:44:58:6c:86:7d:42:31:16:ca:e2:68:36:ca:
13:47:80:7f:5f:20:9f:e0:0a:ad:d5:54:34:45:3e:65:3f:1b:
60:c6:3b:be:50:3c:59:98:11:ae:74:fc:36:b9:23:a5:d6:a0:
38:10:b8:54:45:a4:26:da:e0:1e:5b:d7:86:f5:80:0e:06:fb:
ce:87:cc:42:74:63:98:9e:4e:7a:11:e3:2b:74:1c:b3:5b:8b:
51:59:b6:06:8a:83:47:fd:20:c3:df:58:18:be:a0:7e:36:b3:
64:c8:3c:05:2f:a6:b5:3f:41:13:f6:b8:37:b1:75:37:90:3a:
d9:07:ed:02:6c:50:d7:c7:c6:ee:2b:5c:6b:ae:3d:44:0e:f7:
1e:00:76:8d:1f:7f:08:1b:be:81:a9:99:83:85:0c:ea:bb:0f:
f1:fd:e7:44:fd:ef:ce:9d:57:8f:64:f8:cb:35:74:9f:c2:70:
8b:d1:2b:c6:28:76:d6:c4:46:83:e5:47:0b:6a:a3:01:e1:9a:
18:6b:39:2f:79:e2:85:9c:4a:93:95:a4:b7:00:ba:7c:50:b3:
4d:b0:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org