Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3Oe41eYzXP0rB_3a4_nYJtV8EZk.roa
File: 3Oe41eYzXP0rB_3a4_nYJtV8EZk.roa (raw, json)
Hash identifier: jMjUvlV7upemdzrLzRHbWRhhasJLJdMeyCVInNqqDag=
Subject key identifier: DC:E7:B8:D5:E6:33:5C:FD:2B:07:FD:DA:E3:F9:D8:26:D5:7C:11:99
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01852E3DE34D4D44BD89609B666A73FEA432
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3Oe41eYzXP0rB_3a4_nYJtV8EZk.roa
Signing time: Tue 20 Dec 2022 06:34:45 +0000
ROA not before: Tue 20 Dec 2022 06:34:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.178.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
88.216.135.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:3d:e3:4d:4d:44:bd:89:60:9b:66:6a:73:fe:a4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 20 06:34:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dce7b8d5e6335cfd2b07fddae3f9d826d57c1199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:29:2f:21:1f:55:26:c9:07:70:9a:a7:63:39:
bb:10:8c:0e:7b:81:c1:41:93:ec:0f:d7:08:46:05:
a1:37:5f:30:ba:10:30:8c:37:28:57:07:dd:28:22:
18:31:54:59:71:e7:b2:35:29:d3:ff:a0:c1:14:b0:
77:cd:5e:15:da:65:5d:00:cd:39:31:7a:d6:66:28:
70:11:0c:95:e4:71:97:ab:9f:be:9d:99:09:d9:98:
25:38:cc:b3:3b:ad:37:a4:fa:10:ba:17:ec:4f:3e:
72:1b:0f:c8:72:09:5f:0d:3f:a1:62:d8:42:64:ca:
aa:1b:a2:07:37:56:79:3a:8a:3e:4a:f5:ab:30:bd:
f3:3a:bd:33:9b:29:d5:48:05:c1:e0:47:52:25:64:
d4:37:99:a5:94:32:b4:b7:65:df:36:35:9d:3a:f1:
85:4a:97:87:00:96:a6:a7:2e:e3:92:57:5b:60:3e:
d0:2a:57:b7:ef:cb:77:93:ae:be:30:19:8d:7f:34:
12:3d:51:f2:b9:5d:eb:b0:e2:44:83:cd:e0:b2:c7:
b8:f1:a5:62:3e:bd:d3:8f:0e:69:dd:b6:5e:8c:e3:
9d:b4:33:a5:ef:21:4c:5b:b6:9f:92:32:d6:23:a9:
0a:2d:67:e2:c5:fc:4a:51:d4:e2:58:e2:ea:8a:11:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:B8:D5:E6:33:5C:FD:2B:07:FD:DA:E3:F9:D8:26:D5:7C:11:99
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3Oe41eYzXP0rB_3a4_nYJtV8EZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.90.0/23
84.32.178.0/23
84.32.212.0/24
84.32.220.0/24
84.32.222.0/24
88.216.42.0/24
88.216.135.0/24
88.216.224.0/22
Signature Algorithm: sha256WithRSAEncryption
78:99:d9:1b:23:57:3d:f6:38:22:cc:f1:f1:ef:0c:f1:16:4e:
5f:6f:49:28:64:6a:85:47:02:7e:92:d3:ce:7f:92:3f:f4:18:
4d:23:9b:da:01:7f:05:4d:18:1f:8e:53:49:c2:c1:dd:a1:25:
31:28:05:e0:21:18:7a:4d:f2:7a:3e:bc:29:aa:62:b7:4b:ce:
2c:cb:be:3e:d2:c9:92:77:a5:4a:c8:ad:7b:a0:ba:6a:5d:e5:
4a:02:6a:cb:bc:b6:6e:26:6c:59:a3:13:8e:3e:88:cb:33:b5:
7e:cf:b8:05:89:22:af:55:28:4f:0b:f2:72:ac:6a:b2:3c:3c:
a8:49:97:2e:ca:1e:e0:ec:e2:69:6b:6c:3b:2b:a0:42:a3:a9:
f7:74:de:8a:2c:e7:26:04:2f:c5:be:03:8c:e1:3e:45:11:7a:
60:0c:bb:93:c9:3d:1b:8b:79:18:ad:14:dc:c6:0b:e1:60:6b:
7c:2f:0e:2c:c1:5d:da:e3:79:60:29:d3:ca:87:3e:72:28:41:
e8:38:c2:f0:a0:0b:65:81:40:11:36:8a:48:58:87:d3:ad:fd:
d4:0f:8f:11:97:0f:9b:a0:1a:64:51:d8:e2:43:de:15:20:30:
10:0f:08:23:ef:25:d7:66:96:1b:1d:c0:10:a0:0d:e1:c8:ef:
00:01:41:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org