Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xV85-NOzv8r4GjQ0ALMkb8HM36E.roa
File: xV85-NOzv8r4GjQ0ALMkb8HM36E.roa (raw, json)
Hash identifier: cShYxtgb6WRtSC/poxi7lslZ2RiEKf7MAtBpCfrWUwM=
Subject key identifier: C5:5F:39:F8:D3:B3:BF:CA:F8:1A:34:34:00:B3:24:6F:C1:CC:DF:A1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01847AA72455FF008B805FD5C610925088F4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xV85-NOzv8r4GjQ0ALMkb8HM36E.roa
Signing time: Tue 15 Nov 2022 09:38:04 +0000
ROA not before: Tue 15 Nov 2022 09:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 88.216.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:a7:24:55:ff:00:8b:80:5f:d5:c6:10:92:50:88:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 15 09:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c55f39f8d3b3bfcaf81a343400b3246fc1ccdfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:79:14:43:b2:8e:bc:01:92:be:c1:1a:31:
be:aa:0a:38:62:89:9e:86:36:f2:05:3e:b2:00:8a:
86:b4:28:39:d5:b9:6b:8f:f5:dc:91:ca:7a:d8:0f:
c9:67:62:4c:83:9b:98:00:36:62:e3:b1:f3:dd:80:
cb:c2:f7:83:37:07:e7:e7:2d:79:9f:58:91:1c:58:
2a:50:a7:fb:2a:79:26:37:35:06:3a:d6:37:44:e3:
cd:3f:8c:9a:5f:02:d4:88:07:aa:4b:9f:33:2a:c2:
7a:0e:56:3c:23:2c:c9:8e:53:33:98:9f:3b:df:e6:
78:dd:a5:6b:41:37:34:da:4f:42:a1:22:b1:2d:05:
3a:9a:3b:80:2c:86:70:5f:40:cd:44:59:f0:d3:40:
89:3a:5d:16:b4:8c:4a:a4:8c:fd:ff:ee:73:a0:c7:
31:6c:9f:32:6e:0b:98:c0:bb:6b:8b:4b:6a:d4:19:
8d:ab:fe:73:75:7f:7a:39:89:5f:23:88:39:4c:3a:
93:38:a9:0a:30:60:3d:4f:23:bd:c5:15:83:11:b6:
3e:13:a8:8d:72:0c:85:e8:1f:7d:83:4b:b0:db:4b:
5e:00:1b:b8:fc:b9:cc:2b:09:2c:bd:4f:e6:9b:d8:
a1:ed:bd:03:7f:2b:1e:f3:fd:ad:70:8a:dc:97:a3:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:39:F8:D3:B3:BF:CA:F8:1A:34:34:00:B3:24:6F:C1:CC:DF:A1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xV85-NOzv8r4GjQ0ALMkb8HM36E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e1:dc:46:95:6d:7a:45:a0:a3:d9:74:fc:c3:f4:70:eb:25:
c4:26:f8:0d:f3:63:d6:e8:29:88:b6:ae:a3:08:99:69:09:83:
f0:75:5e:85:02:bb:6d:ab:67:24:c8:d4:27:d1:67:c0:83:26:
44:7d:d7:84:f4:64:6a:75:c6:11:e5:4a:24:38:84:5e:2a:6a:
34:4b:1b:2e:cd:cc:98:5b:ed:ec:64:89:09:82:e7:76:f6:21:
e5:01:8d:aa:bc:1b:bf:02:a2:61:ad:c9:fa:e9:c9:9d:6d:61:
39:27:19:96:23:af:46:a5:37:02:61:38:1b:5c:63:bf:fa:69:
67:57:5b:bf:4e:ad:36:4e:32:bd:a3:01:85:e9:37:70:8f:35:
f6:67:e0:6f:b6:9f:c8:58:d3:6b:cf:e4:34:c4:4f:03:2e:d2:
35:03:0a:66:9b:11:07:f8:dd:f0:76:f8:d8:ca:1f:79:cd:fb:
6a:aa:53:a4:71:7e:49:15:56:51:b3:f4:fa:13:07:bc:35:c7:
6e:af:06:c3:1d:d6:7a:ee:1d:1b:c0:3a:a5:4d:a2:42:92:c5:
60:f5:1b:a2:6a:62:26:10:9f:5e:ac:d9:97:53:48:19:84:fa:
72:63:3c:71:64:dc:6f:a5:80:2f:36:40:be:c1:30:1e:a6:fe:
13:04:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org