Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vHMsiSjIlhKS1FitsO3EV0EurfM.roa
File: vHMsiSjIlhKS1FitsO3EV0EurfM.roa (raw, json)
Hash identifier: yopWEjm/VFD4JNYfCGCd0MnieIOUha0zmT1g+NjvdTo=
Subject key identifier: BC:73:2C:89:28:C8:96:12:92:D4:58:AD:B0:ED:C4:57:41:2E:AD:F3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018441AF7BFEE73F8C392469CFDCFFE56598
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vHMsiSjIlhKS1FitsO3EV0EurfM.roa
Signing time: Fri 04 Nov 2022 08:08:50 +0000
ROA not before: Fri 04 Nov 2022 08:08:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.90.0/23 maxlen: 24
84.32.88.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.132.0/23 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.16.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:af:7b:fe:e7:3f:8c:39:24:69:cf:dc:ff:e5:65:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 4 08:08:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc732c8928c8961292d458adb0edc457412eadf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:90:d7:ec:eb:4f:b6:9f:84:1d:db:75:b6:
06:fe:ee:f3:8f:37:cf:f1:ff:25:db:c4:37:0e:60:
17:78:2a:c9:c2:13:57:42:cc:d5:27:06:b6:f0:c1:
64:e0:5d:d5:0a:84:35:57:10:33:82:18:36:79:91:
0f:51:00:6c:17:ea:35:56:b0:8f:08:c4:fe:71:a0:
d9:77:98:35:36:6f:44:04:27:1b:ee:a5:62:90:fe:
81:67:94:02:a2:c8:63:3f:16:f3:b6:d8:e5:7c:50:
4d:81:1a:60:db:05:1d:1f:11:f2:d1:0f:97:45:b1:
9a:37:9f:00:83:b2:e5:a4:2c:c7:8a:8d:8b:35:c8:
40:4c:86:18:ee:8a:6e:5b:03:77:86:55:1e:85:55:
56:6b:df:39:a1:01:41:cc:d7:be:42:d0:8f:3a:9e:
00:a1:8c:58:26:c6:65:05:07:a2:01:43:90:30:14:
52:6c:b0:5a:ee:8d:4e:ee:e2:78:8c:82:1e:8b:3f:
9b:e6:f8:17:f0:74:60:d0:d1:ae:03:6b:b1:60:35:
68:6a:86:8f:8b:9b:5f:cc:00:e1:7a:d1:62:af:23:
f7:9b:81:b0:3a:e6:25:80:cf:15:ef:b9:df:b3:4e:
90:01:4c:1e:77:b0:7c:b8:ea:f0:0d:a9:02:d0:bb:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:2C:89:28:C8:96:12:92:D4:58:AD:B0:ED:C4:57:41:2E:AD:F3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vHMsiSjIlhKS1FitsO3EV0EurfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
84.32.88.0/22
88.216.16.0/23
88.216.33.0/24
88.216.41.0/24
88.216.43.0-88.216.45.255
88.216.92.0/22
88.216.128.0/24
88.216.131.0-88.216.135.255
88.216.224.0/22
Signature Algorithm: sha256WithRSAEncryption
70:b6:4e:4f:65:47:7f:77:ec:f2:6b:65:5e:8d:68:9c:b7:2e:
bc:21:6f:2a:30:b3:86:96:9d:ed:17:d4:e6:64:fc:a9:0e:13:
b2:f3:32:6e:cb:f9:cb:0a:0b:5b:fc:95:81:0e:33:44:af:a0:
c2:ad:83:d2:3e:96:d3:80:47:01:df:79:f2:32:17:ef:94:34:
a8:db:61:9d:a7:f9:22:85:23:42:8c:f9:c9:03:27:93:17:39:
d3:c0:9f:40:09:09:b2:39:55:73:64:c0:20:77:0d:02:3d:9a:
67:a6:a7:13:6c:5d:94:c7:9f:99:6e:5d:ac:1d:0e:5f:1a:c6:
5a:a7:d0:7f:8b:9a:d1:25:18:bd:83:9f:a3:58:89:a0:d5:3b:
9e:6e:03:db:ee:cf:c8:24:a6:7f:ed:1b:17:77:72:40:e3:ef:
75:54:98:15:f6:a9:6d:33:0b:80:90:9a:b0:95:de:39:e7:4c:
7c:ac:01:a2:b4:cf:b8:49:2a:3a:fc:5f:39:8c:6e:a4:72:88:
0e:ae:e8:c4:8c:4d:93:47:34:ee:e9:7e:f1:78:20:81:b7:5e:
be:83:bf:af:f4:98:13:b2:f7:ad:a2:fb:e8:30:a0:d8:fc:af:
ed:a2:72:24:97:ed:e4:a5:7a:8e:04:da:43:35:6d:ee:72:4d:
c7:e3:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org