Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xebeaV15bW3j2qYpLJcI9nbfl7Q.roa
File: xebeaV15bW3j2qYpLJcI9nbfl7Q.roa (raw, json)
Hash identifier: XcgRpchcLQxE2tIFxX6x77hu7Hzlx4Wwkv1BHWmT8tI=
Subject key identifier: C5:E6:DE:69:5D:79:6D:6D:E3:DA:A6:29:2C:97:08:F6:76:DF:97:B4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184B839DEF154052F23EEF6801C204395CC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xebeaV15bW3j2qYpLJcI9nbfl7Q.roa
Signing time: Sun 27 Nov 2022 08:35:11 +0000
ROA not before: Sun 27 Nov 2022 08:35:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 88.216.187.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.220.0/22 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b8:39:de:f1:54:05:2f:23:ee:f6:80:1c:20:43:95:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 27 08:35:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5e6de695d796d6de3daa6292c9708f676df97b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:78:65:dd:29:f0:55:41:ee:45:0d:02:69:
ac:67:31:43:c2:d5:33:60:4b:c7:04:4b:fd:9d:e6:
84:8e:e3:23:35:26:c3:a0:62:42:14:60:95:4a:76:
50:f2:49:2b:41:c1:56:78:49:4c:9b:6e:a2:93:a2:
15:9b:da:f2:4c:59:80:74:30:04:e3:26:68:9b:11:
32:16:de:16:37:da:0a:49:97:33:a2:bb:1a:49:1e:
66:4e:c6:fb:b0:9f:44:be:6f:8c:a5:1e:a8:ae:8e:
dd:0f:bd:03:c2:78:41:cc:8d:6a:d4:7d:73:e4:44:
8b:3f:bf:50:df:d6:0d:88:47:ad:dd:51:5d:d0:f9:
15:65:b9:4f:b1:43:58:21:19:ec:66:e3:bd:01:bd:
66:3f:f6:de:1d:5e:d7:85:77:9a:80:22:d1:61:8a:
a9:ec:8c:32:4d:f3:63:50:70:50:c7:60:38:e3:3e:
5f:19:b9:0d:df:a4:86:cb:59:f8:4b:07:80:3f:a9:
5e:3a:6f:06:c0:0b:86:05:a2:1e:9d:53:ce:fd:38:
f3:fb:46:cf:c9:d0:66:11:8c:a6:15:c8:db:d1:ba:
ab:ec:93:65:ca:cf:aa:d0:9a:aa:87:3e:cb:2d:85:
3e:b6:32:10:a1:23:12:c2:c1:46:39:75:8e:d2:c1:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:DE:69:5D:79:6D:6D:E3:DA:A6:29:2C:97:08:F6:76:DF:97:B4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xebeaV15bW3j2qYpLJcI9nbfl7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.88.0/24
84.32.220.0-84.32.224.255
84.32.254.0/24
88.216.40.0/24
88.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1c:6b:83:b5:7b:9c:88:2c:ca:dc:3d:d1:16:47:b5:1f:1b:
17:a9:28:e0:5a:3d:c2:9d:4b:ff:21:cf:62:ac:e4:33:2f:7c:
35:e3:98:94:27:76:b1:df:a4:95:58:15:e1:8f:9c:11:03:44:
86:46:61:66:4e:00:57:a7:31:18:bf:48:b0:5a:03:18:35:2a:
70:5c:cd:36:76:9a:ec:86:e4:d9:ba:5b:ad:18:ab:ac:9d:81:
c2:08:58:35:09:04:5e:d6:20:13:6a:bc:fb:f6:4e:0b:83:82:
99:59:cd:d7:eb:5b:50:a7:a4:ac:5d:10:a8:ef:16:43:cd:f3:
7e:29:7e:c8:6d:f9:f5:0f:2e:94:a0:66:05:58:b0:c8:72:7f:
58:10:86:d4:c4:bc:01:91:66:e5:78:56:8c:b2:dd:3a:7c:72:
60:3d:48:ce:f5:ef:fd:2e:cc:37:6f:8f:77:ee:e8:3e:d2:14:
7f:e7:9f:36:8d:cc:11:a6:47:41:98:bd:66:29:45:82:05:01:
a5:fb:69:aa:21:fe:6d:80:7a:c3:ab:ad:10:f6:e4:bd:78:68:
b9:0b:d0:20:04:a1:da:05:c0:96:4b:e5:f7:43:35:de:47:87:
4c:c4:c4:3c:9f:e2:ec:52:02:a9:6a:b7:d5:51:2f:37:2d:1d:
52:ac:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org