Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-FhvuVUWYUW2--azbcDYghwooMY.roa
File: 1-FhvuVUWYUW2--azbcDYghwooMY.roa (raw, json)
Hash identifier: rKqT0yr78khvArV8r67VGM0GSpYBaYSpRjIMTgejq3I=
Subject key identifier: F8:58:6F:B9:55:16:61:45:B6:FB:E6:B3:6D:C0:D8:82:1C:28:A0:C6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01833A9B74F3641BF6B9319BA387EA13596E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-FhvuVUWYUW2--azbcDYghwooMY.roa
Signing time: Wed 14 Sep 2022 06:06:50 +0000
ROA not before: Wed 14 Sep 2022 06:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.77.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3a:9b:74:f3:64:1b:f6:b9:31:9b:a3:87:ea:13:59:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 14 06:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8586fb955166145b6fbe6b36dc0d8821c28a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:22:f6:58:b0:32:d9:c2:b5:23:11:1d:01:
0f:b2:cd:96:cc:5a:92:22:d6:69:9b:b5:6b:af:81:
d3:b5:4f:1f:d6:16:0a:25:81:48:0b:01:7c:4a:5f:
6d:b5:a2:01:2c:8e:81:c4:62:1e:f3:31:7a:8c:77:
25:38:3d:3c:ea:63:99:41:d7:bc:44:16:5b:00:81:
0f:2a:e9:73:08:71:fe:fc:78:14:b5:33:8e:84:08:
a5:f4:b6:63:65:4d:f9:6d:79:35:9e:dc:47:54:f6:
13:2f:32:24:15:47:bf:2a:0f:6c:b2:ba:49:2a:d2:
08:8d:e9:bb:25:77:27:8d:82:38:b7:57:26:e7:40:
be:94:29:35:96:e8:bd:11:1e:2d:e9:ad:19:da:8d:
04:53:07:9e:5f:7b:24:33:c9:5d:64:fc:da:c5:a7:
67:9c:38:ae:d7:6c:26:40:4e:10:67:90:f8:97:4a:
62:d5:07:26:30:77:f1:50:d9:4d:09:81:38:68:82:
64:d2:6a:58:a4:91:a0:56:32:8e:55:27:1f:68:f3:
5e:3d:2f:cb:5a:81:76:04:46:91:13:4a:7e:c2:04:
4c:fc:3f:14:e2:fa:31:fe:19:82:0c:a8:40:e1:99:
72:ac:a0:6c:b2:8d:f8:f2:5f:19:d6:db:78:f9:66:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:58:6F:B9:55:16:61:45:B6:FB:E6:B3:6D:C0:D8:82:1C:28:A0:C6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-FhvuVUWYUW2--azbcDYghwooMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0/24
84.32.15.0/24
84.32.49.0/24
84.32.77.0/24
84.32.86.0/24
84.32.92.0/24
88.216.40.0/24
88.216.188.0/24
88.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:98:31:82:1b:c4:75:cc:24:39:c2:17:ca:bd:80:b4:a0:8c:
81:68:a5:a0:df:68:af:02:16:b6:8b:c0:b7:03:7b:d2:5e:3b:
dd:cc:23:19:3e:c9:ec:f2:61:59:59:61:73:71:af:4b:2e:61:
0a:4b:6b:5e:5e:b0:04:3c:e0:8b:96:63:d3:6c:c0:74:b6:25:
18:d9:ed:2a:16:59:24:b5:6c:57:80:61:14:cb:b3:cb:eb:a6:
fc:3a:3f:0c:d1:f7:94:7a:ba:3c:94:53:ca:21:a6:57:5f:2f:
bd:90:68:cc:4e:e0:a5:97:69:9d:cf:a1:eb:70:55:f9:dc:80:
6f:2b:b7:21:27:00:07:15:45:66:07:b5:6c:81:87:34:a4:33:
6f:d0:44:c7:0b:12:66:2e:e8:be:32:e2:07:cd:41:2f:0c:b8:
07:d4:bc:32:10:ac:0e:4e:48:d9:c3:db:bb:2e:96:1e:01:b4:
ab:88:ff:44:38:2e:45:43:bc:67:09:81:58:11:40:b2:84:aa:
d3:b3:02:c6:3e:0e:48:0d:b6:60:65:ad:df:9b:30:b8:75:fa:
17:d5:bb:a4:2a:59:62:19:cf:3c:bf:ba:e1:62:ff:b7:31:41:
ea:34:f9:cf:ae:04:76:10:6b:4c:00:48:c7:e1:46:26:a7:c3:
0c:c2:26:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org