Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wtCIvhzfS_SlHJjOrrnNod0rCjc.roa
File: wtCIvhzfS_SlHJjOrrnNod0rCjc.roa (raw, json)
Hash identifier: oxdXss2g8jkrzbm2ZR4oM9NIA9qssuhoJTHP0vSKlLI=
Subject key identifier: C2:D0:88:BE:1C:DF:4B:F4:A5:1C:98:CE:AE:B9:CD:A1:DD:2B:0A:37
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01827CFABBF9EE87A7078C9EE0AB24562CF2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wtCIvhzfS_SlHJjOrrnNod0rCjc.roa
Signing time: Mon 08 Aug 2022 10:23:03 +0000
ROA not before: Mon 08 Aug 2022 10:23:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 84.32.52.0/22 maxlen: 24
88.216.180.0/22 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.216.0/22 maxlen: 24
88.216.220.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
84.32.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:fa:bb:f9:ee:87:a7:07:8c:9e:e0:ab:24:56:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 8 10:23:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d088be1cdf4bf4a51c98ceaeb9cda1dd2b0a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:7c:c8:a9:25:fd:04:78:78:39:15:0a:05:
67:57:a9:ab:bb:0b:91:74:9c:c9:f5:ee:60:95:43:
52:7a:e9:cd:4a:70:1c:9d:ba:28:87:1a:f3:5e:c0:
76:0d:51:d6:ea:b0:3a:c2:72:38:6d:41:95:3a:a8:
13:3e:3b:5b:04:22:9b:08:a4:9a:33:e5:0c:dc:8d:
94:03:f3:d0:66:af:9f:d2:b4:db:97:9a:eb:e4:58:
ee:47:85:dc:99:d7:db:b0:bc:a3:0c:8c:35:f1:7f:
a2:ff:97:15:a7:42:df:57:48:b6:52:c0:8e:fd:5f:
9f:d2:4c:7b:e2:43:2a:d0:76:62:8a:dc:ea:f8:1a:
50:3d:18:90:0a:fb:5e:c4:63:82:84:b8:6b:60:e3:
07:66:44:98:0b:b4:48:53:72:27:33:1d:0f:8c:c4:
58:fd:25:7e:0f:7e:3c:cc:dc:59:a1:e0:58:41:c8:
0f:23:fd:d7:3c:8b:40:b9:c1:a6:de:3c:7b:04:9c:
9a:f8:c6:ea:00:16:41:4a:26:e6:0f:8e:c7:8a:7e:
93:eb:44:04:6f:d9:2a:6e:88:db:51:fe:ff:a4:83:
1a:3a:06:28:b6:40:ae:3f:34:c4:ea:27:0f:e6:bb:
23:fb:bc:06:e2:cb:63:69:00:13:b2:6a:18:e6:5c:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:88:BE:1C:DF:4B:F4:A5:1C:98:CE:AE:B9:CD:A1:DD:2B:0A:37
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wtCIvhzfS_SlHJjOrrnNod0rCjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.44.0/22
84.32.52.0/22
88.216.180.0/22
88.216.212.0-88.216.223.255
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
1a:2e:35:fb:ea:4a:1e:83:d7:a7:8e:1c:8a:27:02:ab:fb:5c:
97:b5:24:56:d8:d9:ef:eb:2a:20:19:18:a3:ff:76:15:3b:3c:
8d:4a:fd:48:e9:c3:fb:ec:0f:a5:63:d1:f7:ee:e9:c1:2a:7a:
0b:77:6f:ac:dd:42:8e:5b:db:a4:91:88:ea:cc:d9:a0:1e:71:
28:70:43:c1:35:49:dd:2f:d2:ac:49:43:66:5d:86:b1:34:08:
3c:fc:70:05:4a:6c:e8:03:cb:79:b5:bb:02:eb:a0:7e:d2:d3:
2d:b4:c0:d8:c8:50:65:d6:14:74:2e:17:9b:df:b0:c8:ee:a1:
21:78:77:a4:64:d2:72:ab:4c:87:b4:55:3e:42:89:56:e9:45:
0a:1d:e4:dc:d1:cf:3b:8d:0a:94:d1:1d:1b:7d:06:6a:5d:f2:
f9:2c:57:b2:1b:14:07:6d:98:a7:ef:09:fe:f9:e0:d7:b6:50:
e4:4e:a0:c9:39:cb:db:98:d7:df:91:48:7b:9f:5a:0e:3f:f4:
f9:5a:77:9d:28:ac:f1:35:22:1d:75:65:ca:20:09:4c:6a:60:
fb:28:6d:9f:49:6d:01:ac:73:96:05:30:4c:2f:8e:ff:b9:2c:
2d:0d:e1:bf:8c:ac:dd:c4:18:3a:a8:a8:b8:16:98:8d:b0:d5:
aa:54:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org