Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-0YGYtSCRWXD-v_eJIuo2rheiRs.roa
File: 1-0YGYtSCRWXD-v_eJIuo2rheiRs.roa (raw, json)
Hash identifier: EGrDon8Ak7eXjmBBv6up58paCq1L3SVkui7ya6ktxj8=
Subject key identifier: FB:46:06:62:D4:82:45:65:C3:FA:FF:DE:24:8B:A8:DA:B8:5E:89:1B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183ABD60DF0F01E06627F289827655A0353
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-0YGYtSCRWXD-v_eJIuo2rheiRs.roa
Signing time: Thu 06 Oct 2022 05:47:55 +0000
ROA not before: Thu 06 Oct 2022 05:47:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.76.0/24 maxlen: 24
88.216.188.0/22 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.40.0/22 maxlen: 24
88.216.18.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.36.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:d6:0d:f0:f0:1e:06:62:7f:28:98:27:65:5a:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 6 05:47:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb460662d4824565c3faffde248ba8dab85e891b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:b6:b6:b9:c8:1b:a9:3c:4f:78:27:2d:c8:
87:28:28:ac:34:7e:76:88:54:14:2e:61:4a:df:5a:
bc:49:29:fb:76:af:ee:de:f3:e7:d9:35:cd:c6:6b:
42:fe:29:6b:40:09:d2:ff:f2:b6:34:16:4d:28:36:
fc:ce:b4:6e:f0:3a:70:be:0a:3e:d2:b1:b0:01:4e:
d7:db:ac:00:3c:30:e5:d2:a5:c2:a7:ba:59:24:cf:
b6:2e:46:9b:17:08:1d:b7:00:dd:dc:f0:e8:c7:44:
a9:9e:f7:2c:ad:77:31:e3:57:eb:f6:4a:88:43:bc:
4d:cb:3d:33:a3:aa:57:11:72:3e:84:88:fe:d3:21:
90:79:62:0a:37:fe:6c:41:d9:4c:d1:6c:93:28:78:
97:4d:43:f3:02:de:54:ef:1e:e0:a3:3b:9e:b4:2a:
d0:72:23:d7:71:70:41:25:09:dc:6e:97:f2:31:65:
16:a3:26:ea:5f:cd:60:3e:60:97:a9:98:1a:c9:05:
b2:49:e6:96:bc:1b:4a:00:fe:94:93:7f:42:79:22:
67:bb:c8:3a:2c:33:7b:66:ea:08:38:71:ea:ad:e3:
53:55:88:26:4f:a8:00:97:56:35:69:82:b0:00:4f:
6b:a7:b8:f8:a6:0c:5a:25:1e:f8:b4:f8:e6:2f:bc:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:46:06:62:D4:82:45:65:C3:FA:FF:DE:24:8B:A8:DA:B8:5E:89:1B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-0YGYtSCRWXD-v_eJIuo2rheiRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.40.0/22
84.32.76.0/24
84.32.88.0/24
88.216.18.0/24
88.216.36.0-88.216.41.255
88.216.43.0/24
88.216.187.0-88.216.191.255
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
23:bb:3b:48:a9:e3:79:17:4e:c6:09:00:a3:bc:fb:47:b0:d0:
6c:05:b3:08:83:53:56:35:1d:da:90:88:59:71:cf:c9:da:5f:
0b:a3:d8:08:87:8f:b6:43:71:18:b3:17:3a:d4:b4:ad:ce:fd:
11:54:17:1f:cd:ec:3c:ab:1b:67:68:31:7e:1a:b0:49:cc:62:
5c:54:c5:1c:68:4b:dc:a0:1c:c1:14:2d:e4:4c:06:69:1b:04:
2a:1c:98:fd:3f:c0:18:28:46:9c:cb:a6:42:a1:ac:9a:e3:42:
57:b3:00:70:4e:a2:4c:61:c9:e2:1d:ae:3d:62:b5:d3:69:75:
a8:26:0b:05:ac:29:3f:27:09:aa:26:ce:89:be:fe:41:35:4f:
f8:bb:b3:96:86:3d:30:6d:9f:de:65:36:ad:f5:ca:a7:3d:1f:
a3:74:be:ea:c3:f5:58:f8:39:56:18:9d:43:9b:ca:5a:f5:be:
2c:4f:b5:78:ec:db:ab:65:e5:5a:15:6c:8a:4c:c2:8e:11:af:
c8:8f:c5:5f:65:85:91:84:9d:3a:a0:ef:30:e3:7d:42:e7:3c:
71:db:e7:80:62:f4:02:f6:52:72:47:1e:84:30:8a:a9:05:f8:
1d:7f:2c:8e:0c:bb:e0:f7:50:72:86:b1:8b:cc:c1:f5:4f:74:
4a:d8:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org