Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/kOFmVWtjyEHlKlGw3IpNe_iKegU.roa
File: kOFmVWtjyEHlKlGw3IpNe_iKegU.roa (raw, json)
Hash identifier: gpH/bPDxkhJVmzNNoiCcpDHFVCdBn6Dcke+UUwjHDd0=
Subject key identifier: 90:E1:66:55:6B:63:C8:41:E5:2A:51:B0:DC:8A:4D:7B:F8:8A:7A:05
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0FA30272
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/kOFmVWtjyEHlKlGw3IpNe_iKegU.roa
Signing time: Sat 01 Jan 2022 00:51:08 +0000
ROA not before: Sat 01 Jan 2022 00:51:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199397
IP address blocks: 84.14.245.0/24 maxlen: 24
84.14.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262341234 (0xfa30272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 00:51:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90e166556b63c841e52a51b0dc8a4d7bf88a7a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9a:32:50:da:98:67:bb:53:a1:58:43:dc:b2:
ed:e5:d7:77:f9:11:68:03:9f:7e:1c:30:be:38:dd:
89:d2:d2:b4:f3:69:5d:78:71:33:9d:da:23:f1:b0:
03:36:d1:a4:6d:64:54:60:ae:ff:05:ad:8b:70:29:
bf:cd:c9:0a:e0:5d:f0:35:ad:68:dd:64:27:22:50:
95:1a:5c:b5:73:27:87:10:7f:ee:47:fa:12:81:9f:
0d:30:41:69:c0:28:a6:3a:c3:0b:b0:27:cf:06:b2:
2d:13:1c:dd:a1:26:6f:cc:d7:95:76:cb:2d:04:a4:
f6:63:66:08:c8:fc:bd:0d:d5:93:e8:09:25:69:1e:
08:c4:72:4d:77:50:97:e0:51:f9:c3:48:46:c6:4b:
c5:46:e4:28:00:07:95:b5:31:4d:3e:55:22:dd:dd:
33:a8:cd:47:b8:c7:f7:5e:54:8e:c7:28:f2:b2:4c:
be:c3:5c:2e:84:49:40:29:34:dd:58:ca:a5:4b:b6:
ca:64:6b:3a:3e:b1:35:2e:09:c4:23:a0:f2:bc:e6:
0f:ff:f2:a4:5a:2a:cc:84:e8:00:43:37:c9:5d:eb:
3e:eb:12:de:21:62:28:d4:8b:91:df:76:7e:5d:27:
d7:81:7e:cf:93:e2:71:0b:94:30:84:36:c6:57:a2:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:66:55:6B:63:C8:41:E5:2A:51:B0:DC:8A:4D:7B:F8:8A:7A:05
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/kOFmVWtjyEHlKlGw3IpNe_iKegU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.14.149.0/24
84.14.245.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ec:51:68:0a:75:a4:78:9e:4e:79:63:95:3c:ed:4f:40:68:
16:5b:40:bd:55:57:5e:a1:ac:84:79:c7:b5:4e:6d:2c:1d:3d:
c1:e2:e6:cf:a6:a5:ab:a2:62:1a:9b:47:cf:ed:13:3d:83:a8:
50:7f:ba:0b:e0:4c:d7:17:2e:bb:ae:a3:e1:82:16:d8:e5:c2:
69:02:e2:43:c6:38:75:4d:1d:7d:ac:68:25:2f:4e:26:86:36:
65:b9:3a:86:80:ba:e7:6c:6b:24:58:a6:86:4f:76:73:50:61:
38:5a:3c:98:cf:12:d4:a3:e3:d2:57:4d:3f:04:7f:d4:c5:b8:
9d:7c:e0:c0:6e:7f:2a:d2:af:14:02:57:4d:2a:f7:e6:8d:23:
aa:74:9d:23:e8:3e:d5:8c:b8:17:65:77:68:37:ae:92:d4:50:
b8:25:68:fe:ad:7d:f2:17:34:a1:85:80:4d:55:a4:3e:cc:81:
9a:20:d9:a2:dd:7f:f6:f1:4f:9c:de:8f:6f:c6:ad:b9:5f:ae:
28:23:f6:20:16:f9:51:b7:5d:0a:0b:3e:5d:98:2b:97:e5:d9:
97:0d:ae:e0:15:ff:7e:5e:05:60:a2:69:c8:e2:6e:40:40:f1:
64:d4:d6:7d:4c:1c:0c:d7:e0:5e:3b:2e:ac:92:cf:7d:7c:ff:
dc:d6:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:37 2023 by rpki-client on console-ams.rpki-client.org