Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/whjKUtEbR1BA97DKKOHuknAla0w.roa
File: whjKUtEbR1BA97DKKOHuknAla0w.roa (raw, json)
Hash identifier: Akk1i7wY4NRWvzjja331yAvU7N+Lh8t4v/+/ZeWDE74=
Subject key identifier: C2:18:CA:52:D1:1B:47:50:40:F7:B0:CA:28:E1:EE:92:70:25:6B:4C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 2C8807
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/whjKUtEbR1BA97DKKOHuknAla0w.roa
Signing time: Fri 04 Mar 2022 09:06:01 +0000
ROA not before: Fri 04 Mar 2022 09:06:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 88.216.96.0/21 maxlen: 24
88.216.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2918407 (0x2c8807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 4 09:06:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c218ca52d11b475040f7b0ca28e1ee9270256b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:b8:9e:34:52:f0:d3:e9:78:46:8d:20:06:
6a:18:ca:0e:ef:32:c1:49:a2:64:f4:a4:40:fb:d0:
8d:3e:9a:4b:b2:0d:7e:66:5c:ab:e5:ba:90:1d:d9:
8c:4e:cc:70:96:e0:bc:bc:96:a9:0d:9d:45:4a:83:
74:63:95:e9:5f:ae:41:58:17:76:0c:01:dc:da:7a:
ad:2f:c9:f0:97:e7:cc:52:dd:fd:ce:54:0b:2f:f5:
38:34:2f:01:06:92:37:8a:e1:66:92:d7:69:48:bc:
29:bf:a4:9b:98:51:ca:95:8f:25:b0:d9:3d:86:ac:
77:e0:5c:4a:aa:b1:46:6a:9e:cd:54:71:05:67:55:
1f:3f:6e:53:80:4c:84:c7:71:0c:8d:65:80:a5:94:
cf:24:15:7c:f0:f5:29:7e:c9:d9:d1:35:0e:05:6d:
4e:2b:fe:a1:fa:51:42:90:00:10:ea:7f:e9:47:ac:
94:bf:75:11:77:4e:6b:81:18:67:5e:b7:c8:a9:38:
50:5d:30:47:05:c4:5e:ba:e0:38:1b:4a:bd:3d:46:
90:9c:76:73:8f:1b:d6:8f:ce:70:fa:7a:2c:18:f4:
ba:e8:16:e8:0c:05:a7:9e:cb:19:23:d4:a5:b0:ef:
9e:19:a0:1f:14:54:e8:83:f6:03:92:2a:4a:11:3e:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:CA:52:D1:1B:47:50:40:F7:B0:CA:28:E1:EE:92:70:25:6B:4C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/whjKUtEbR1BA97DKKOHuknAla0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.96.0/21
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
37:4b:4f:b0:ba:86:6e:4c:e6:5c:e4:d2:e2:8f:6a:71:c0:d7:
b3:c9:53:25:c3:72:94:bc:ed:83:14:ab:65:9d:42:c2:64:48:
eb:39:bd:be:1a:44:9a:88:d7:a0:70:b6:f7:6e:5e:fa:99:de:
c1:11:10:79:6b:75:33:7c:93:75:52:44:b4:c3:62:c4:88:16:
28:c0:b4:11:e1:55:5b:cf:d2:08:84:6e:6b:e7:fd:9d:7a:a9:
b0:b8:52:67:29:b3:f9:92:75:32:5f:d7:00:0f:6a:84:85:6e:
23:9b:0a:cd:7a:f5:9a:b3:0b:fa:a1:a6:e7:da:29:de:e5:3c:
7a:ca:03:2d:05:ff:1a:fc:af:39:2b:50:cf:f9:e6:dc:51:53:
17:24:9c:1e:fc:88:a7:44:1b:01:ed:28:86:80:a3:a4:31:ea:
31:28:0d:e6:64:a0:ee:13:b8:eb:93:33:c4:83:77:47:b5:0d:
52:23:16:ef:3a:4d:9a:79:0a:6b:53:b6:88:2a:e9:98:5e:51:
56:bc:4a:90:48:70:1b:b3:12:2a:c3:40:e8:b9:14:6c:48:3d:
22:bd:62:69:5f:f0:a0:39:b4:ec:a1:76:7a:46:1d:05:41:66:
4e:21:b8:eb:19:31:a5:8a:50:6d:99:8b:a9:a1:1b:fb:4d:96:
d4:e6:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org