Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vDAt4I47xDk1F6qLqsk_W0FE64w.roa
File: vDAt4I47xDk1F6qLqsk_W0FE64w.roa (raw, json)
Hash identifier: CwUn1dLNW6A5Fbn1wXNciuc9kEcagMRtbxZZ16fZPaU=
Subject key identifier: BC:30:2D:E0:8E:3B:C4:39:35:17:AA:8B:AA:C9:3F:5B:41:44:EB:8C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0182261EB762D41AE7E7DB6245D44057B116
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vDAt4I47xDk1F6qLqsk_W0FE64w.roa
Signing time: Fri 22 Jul 2022 13:35:23 +0000
ROA not before: Fri 22 Jul 2022 13:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 88.216.92.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:1e:b7:62:d4:1a:e7:e7:db:62:45:d4:40:57:b1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 22 13:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc302de08e3bc4393517aa8baac93f5b4144eb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:7e:99:7d:14:30:ee:c0:a2:bc:ea:43:8c:
40:73:0e:23:f8:12:08:eb:26:c8:2d:7e:a0:4a:6a:
02:da:ef:02:5f:67:99:bd:67:3f:0f:d1:2a:e9:24:
b8:e3:f9:43:5d:71:22:4a:78:eb:92:3b:bb:b8:21:
b6:8f:96:c5:ab:f4:7d:5d:4f:20:a8:60:91:57:54:
4b:2e:6b:6c:49:89:cb:f9:db:1d:b2:23:2c:da:0e:
d3:83:76:b8:05:4a:27:25:72:de:58:6f:67:f2:56:
c7:68:d8:cf:1d:37:0a:c7:10:b8:35:c3:2e:f9:14:
8b:26:ac:17:4d:e6:55:ed:fd:68:97:ac:9a:fd:c0:
90:59:71:f5:23:21:06:4e:1c:2e:be:94:c4:66:75:
f6:b2:bc:02:de:73:46:42:b9:ed:dc:bb:ba:de:a8:
8f:e7:be:16:37:97:49:4f:a3:84:97:9d:27:27:32:
3f:49:3f:7a:36:d5:b0:f5:a7:c8:58:c0:2b:ef:49:
9f:4e:16:24:59:5e:c1:eb:b1:46:b9:94:6b:be:04:
0c:9f:50:95:46:6c:2b:6d:1d:57:5e:40:3d:3f:94:
d1:4d:27:bd:4f:03:c0:28:40:7c:b4:c3:28:76:e2:
c1:93:6e:4c:b9:24:2a:5c:c4:99:ef:e0:12:b7:c4:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:30:2D:E0:8E:3B:C4:39:35:17:AA:8B:AA:C9:3F:5B:41:44:EB:8C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vDAt4I47xDk1F6qLqsk_W0FE64w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.44.0/23
88.216.92.0/22
Signature Algorithm: sha256WithRSAEncryption
79:ac:a6:01:7d:00:aa:9f:74:be:cc:4b:00:2b:ee:48:00:af:
f6:fa:e9:d1:be:23:08:a6:fe:ed:70:a9:47:56:58:08:86:19:
e4:66:79:eb:9d:51:4f:4a:1a:a9:67:65:52:58:20:a3:e4:ee:
6b:12:08:cd:18:ce:4b:41:c8:b9:18:fe:05:42:93:7c:15:ed:
c3:0c:a7:4a:38:4e:4f:e4:59:7d:06:e9:15:a3:8f:1a:6f:72:
0b:92:49:3e:8a:64:04:4c:28:07:c3:4c:0b:df:02:67:08:fd:
53:ac:15:f1:74:b4:e1:2b:58:9f:79:b5:2e:f6:1a:36:b2:cc:
19:df:41:09:29:ab:19:77:51:78:2b:c2:23:9a:96:a9:f2:66:
a9:a5:96:30:bd:c8:59:92:81:d0:5b:2a:4e:5d:8c:f9:3b:b5:
a7:70:b8:83:78:a4:fb:2b:4b:63:7e:92:4f:00:c4:ab:ac:b8:
b7:fb:ef:09:af:6d:d6:41:41:55:e6:c8:08:03:d0:c9:9f:5d:
a9:d2:08:53:85:b3:94:55:89:3d:2b:ae:0f:ab:58:9d:ec:30:
03:ce:98:bf:58:54:5b:64:c0:6a:68:55:12:cb:ac:20:61:9a:
45:2e:c2:a9:7c:4a:43:b1:5d:3c:1d:79:e0:98:2e:4e:fe:08:
5d:ef:84:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org