Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xulGUkhl09GzLe7mIguKezafCG0.roa
File: xulGUkhl09GzLe7mIguKezafCG0.roa (raw, json)
Hash identifier: 8QDheRtXKCC1tehLHFFG02SH0NntDGkM4M6nym/iayo=
Subject key identifier: C6:E9:46:52:48:65:D3:D1:B3:2D:EE:E6:22:0B:8A:7B:36:9F:08:6D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018267591B596DE2466CE9E7E9B232B4BBF2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xulGUkhl09GzLe7mIguKezafCG0.roa
Signing time: Thu 04 Aug 2022 05:34:28 +0000
ROA not before: Thu 04 Aug 2022 05:34:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 88.216.180.0/22 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.216.0/22 maxlen: 24
88.216.220.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:59:1b:59:6d:e2:46:6c:e9:e7:e9:b2:32:b4:bb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 4 05:34:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6e946524865d3d1b32deee6220b8a7b369f086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:a7:b5:cf:4c:a4:96:4e:a2:ae:78:f8:3d:
35:c3:8e:8e:1d:d1:b1:f2:4b:39:d9:da:25:b4:32:
b6:23:4f:be:09:57:1f:32:e5:b4:f4:87:b9:69:54:
c5:47:d9:bf:2e:58:48:eb:f6:c4:46:ef:9d:1d:19:
31:77:2f:ee:82:14:af:b4:f9:b1:61:c8:bb:8f:cc:
60:aa:7b:84:7b:a0:97:45:16:2e:24:0b:78:93:46:
41:9c:5d:19:4b:1b:77:4a:17:2b:56:72:07:d5:89:
eb:ff:21:ae:4b:3a:16:46:7b:e2:41:ba:f0:ee:89:
4f:b7:e2:cd:35:c1:2c:5e:18:c8:45:8c:10:d4:31:
2f:da:be:97:7a:38:56:a9:85:e3:e7:f6:b9:2d:8c:
f4:0e:95:eb:1d:58:ca:e5:e9:09:1c:3b:23:30:3f:
20:d9:78:21:fc:46:0f:bf:b6:b8:60:84:16:7c:4e:
31:8b:b3:34:4f:e9:09:62:91:65:49:ec:3f:b8:23:
77:cb:7f:19:e4:47:09:f9:9b:05:84:f7:c3:5b:3a:
36:9b:15:ae:d3:4c:a9:6d:d1:6f:66:8a:fd:a5:bc:
4a:3e:ad:3d:ac:30:f6:cc:d3:1a:fd:4e:97:f9:87:
46:d0:49:96:33:b3:0c:85:2e:45:56:44:11:58:be:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:46:52:48:65:D3:D1:B3:2D:EE:E6:22:0B:8A:7B:36:9F:08:6D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xulGUkhl09GzLe7mIguKezafCG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.180.0/22
88.216.212.0-88.216.223.255
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
86:ec:82:fd:b9:02:2a:c1:94:f4:07:cc:a1:68:43:00:ec:d0:
13:53:f2:28:17:7e:27:30:da:51:12:1c:55:da:50:87:17:4c:
52:cb:d2:48:af:87:a8:01:36:60:63:1a:2e:b1:41:62:3e:c6:
f7:f6:61:2b:ef:52:2a:12:1b:fa:01:c7:54:1e:8a:b8:a6:33:
7b:77:7a:1f:cf:11:0a:ff:51:50:77:8f:73:7a:f6:66:f3:1a:
b2:ff:db:e9:2d:d7:c0:f2:02:b1:c3:ed:78:ef:8b:aa:0c:09:
26:b8:a3:5a:94:60:7b:51:2b:74:1d:ed:3d:6d:c4:a2:62:21:
c1:5f:b9:00:17:41:fa:1d:9b:d1:8c:1e:68:1c:83:53:e2:c4:
73:3b:20:43:59:c9:b8:70:53:0b:86:c2:b0:03:eb:21:4e:7b:
14:f2:d9:64:9d:62:63:60:31:42:58:f6:6a:c2:8c:45:8c:3b:
86:c0:26:97:21:b7:c3:4b:53:af:20:95:b0:06:44:f7:84:2c:
54:41:15:99:d9:98:ae:d9:96:b6:0f:8f:12:69:51:7d:63:ea:
ac:5d:21:10:6f:9d:3c:a3:83:2c:e1:7f:c9:17:a5:4c:0c:f9:
d4:0e:91:aa:2a:b6:42:d3:1b:a7:5a:e1:57:24:41:8a:ca:39:
62:73:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org