Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wtbVv7u650clCcfV3mzHpzhgY2M.roa
File: wtbVv7u650clCcfV3mzHpzhgY2M.roa (raw, json)
Hash identifier: 8nBtaxjvMMBUgB5C5qCL+t4yp2UYGVEfys6Pa2RmoXg=
Subject key identifier: C2:D6:D5:BF:BB:BA:E7:47:25:09:C7:D5:DE:6C:C7:A7:38:60:63:63
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01826881A7AC5518352714BC222565894365
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wtbVv7u650clCcfV3mzHpzhgY2M.roa
Signing time: Thu 04 Aug 2022 10:58:23 +0000
ROA not before: Thu 04 Aug 2022 10:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 88.216.184.0/23 maxlen: 24
88.216.186.0/23 maxlen: 24
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.34.0/23 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:81:a7:ac:55:18:35:27:14:bc:22:25:65:89:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 4 10:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d6d5bfbbbae7472509c7d5de6cc7a738606363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:4c:1b:d1:7e:6f:05:21:2f:cb:8c:b8:a9:
91:0c:81:94:03:9d:f6:b9:e5:44:9a:94:9f:e8:cc:
ed:d1:1a:32:73:14:7b:b1:2f:de:91:d4:c9:64:51:
5e:35:34:d7:3c:12:a7:7c:d3:4f:57:fd:1d:74:e8:
16:34:76:a4:75:a3:47:37:f0:e5:2c:be:df:d2:37:
1a:7d:91:df:28:18:55:9a:a5:d8:c0:50:20:dd:9d:
26:c3:65:18:37:79:35:76:be:5b:ae:8b:de:fc:39:
0c:b4:f5:9c:7e:c6:5c:ee:ba:03:ba:d4:b2:01:e1:
e3:11:7d:c5:53:84:2c:c1:e4:1e:1d:9f:ce:a8:11:
c8:2e:ab:4c:d9:d9:7a:63:de:89:0e:0f:51:79:d2:
45:ec:8a:f4:49:c2:f7:0d:84:d6:31:3c:f1:82:ce:
0d:b7:3b:54:28:e5:e6:40:5d:a8:bb:7f:61:7e:72:
80:70:4a:74:71:14:04:a5:69:22:83:7a:c8:c9:66:
4e:9a:08:e8:05:74:66:81:04:12:98:5b:69:62:0a:
52:e6:08:cc:cb:b7:32:b6:36:ca:4b:2b:87:66:08:
6f:3b:35:a4:7c:cb:97:80:32:cf:b5:24:4c:5e:47:
b6:ae:fa:71:95:6c:a9:d8:c0:36:a1:3d:24:e2:92:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D6:D5:BF:BB:BA:E7:47:25:09:C7:D5:DE:6C:C7:A7:38:60:63:63
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wtbVv7u650clCcfV3mzHpzhgY2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/23
88.216.44.0/23
88.216.92.0/22
88.216.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:2f:88:63:5c:96:38:09:ef:07:fe:c7:2d:f9:0c:3a:86:58:
59:1f:42:f6:d4:67:47:81:2c:51:e5:ae:df:20:9b:a8:8c:dc:
bd:51:ba:80:00:10:df:d9:a4:a5:a8:80:63:fd:ac:a2:c4:33:
c8:da:17:4e:30:02:65:ff:c5:79:f7:4a:f2:39:24:b6:7f:4a:
32:8b:e3:a4:4d:d2:13:5c:c6:ae:4f:e4:29:19:b9:90:b9:8a:
be:13:c8:73:2e:fa:2e:46:61:db:07:b0:99:12:8e:df:e3:07:
e1:c6:35:47:5c:c1:25:ae:a3:34:e3:6e:9f:28:a6:a8:ee:86:
cf:ea:f7:4f:d0:a3:bf:25:29:1d:3a:f5:3f:d4:29:55:bd:0c:
0f:da:88:27:b3:ec:9d:4d:1e:f8:f9:e4:bf:81:36:a7:f6:86:
d9:e4:f4:fd:fc:8b:6e:48:fa:f1:8e:90:c7:73:98:82:49:f6:
b8:69:72:8f:d5:cb:ef:d1:1e:9d:e9:ac:c6:7b:c2:92:ab:94:
8c:c1:d7:cb:cf:97:26:87:c7:ee:0b:5a:a5:b8:44:8f:4f:5d:
c5:60:8c:1e:67:0b:b9:39:fb:3d:0d:4a:d2:3e:88:6d:88:fc:
84:84:95:5b:fa:1d:b9:99:27:14:7f:99:c2:5c:43:8d:00:04:
fa:83:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org