Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4NOIe8xvsBMC4C4YJI-yJYdHh08.roa
File: 4NOIe8xvsBMC4C4YJI-yJYdHh08.roa (raw, json)
Hash identifier: gprEzaIQ5xvOOTJ7m7vOKKXAoTTB6GT+M5OojGoJbH0=
Subject key identifier: E0:D3:88:7B:CC:6F:B0:13:02:E0:2E:18:24:8F:B2:25:87:47:87:4F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01B63BD7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4NOIe8xvsBMC4C4YJI-yJYdHh08.roa
Signing time: Mon 04 Jul 2022 14:22:25 +0000
ROA not before: Mon 04 Jul 2022 14:22:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47583
IP address blocks: 84.32.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28720087 (0x1b63bd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 4 14:22:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0d3887bcc6fb01302e02e18248fb2258747874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:19:1f:45:64:c7:2a:9f:14:ff:00:99:66:
10:f8:58:6c:8b:6c:be:94:d2:b8:21:13:f7:6a:26:
b3:fb:83:8c:3b:25:75:1e:af:8c:8b:db:a5:13:1b:
14:40:98:7a:1f:73:35:19:37:ab:ac:3b:70:ba:0c:
7d:67:21:9a:d9:94:b6:ed:27:c0:41:04:e4:e7:f5:
27:57:87:99:3d:76:92:cf:52:a3:91:a8:9e:4e:f7:
cb:a6:ac:2f:a6:16:9b:60:f8:aa:77:e9:c4:9a:ce:
80:17:74:04:27:a0:1c:93:b6:91:a6:4b:e3:58:f0:
85:5a:1b:e0:95:79:4c:fa:ca:d0:6a:69:ca:32:b7:
2f:1e:12:63:e7:2c:7a:3f:1e:fe:88:ce:93:d4:46:
7d:03:3b:c4:97:41:26:8b:6e:b6:e1:62:4c:03:0a:
f1:e4:48:da:4d:81:a4:1a:39:80:ae:35:d1:e0:bd:
1f:54:13:1e:85:df:94:42:20:87:28:77:e6:ca:b4:
75:e0:77:bf:41:71:23:4c:c5:e8:c3:34:30:15:78:
fc:0b:e9:96:5c:9c:05:66:89:d9:d6:0c:ff:1d:67:
3d:30:50:ae:5d:87:68:ad:36:36:99:9c:c8:26:f8:
99:b9:3e:af:4d:00:96:1c:6e:f1:49:07:8e:f1:58:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:88:7B:CC:6F:B0:13:02:E0:2E:18:24:8F:B2:25:87:47:87:4F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4NOIe8xvsBMC4C4YJI-yJYdHh08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:de:24:fc:ba:51:98:35:f9:13:3f:4a:e5:82:b0:61:9b:c9:
c9:de:1f:3c:26:59:2a:46:53:17:ab:31:20:d4:c8:10:99:a8:
55:45:7e:ec:57:e9:f1:3a:8f:58:7b:87:a6:69:87:77:d6:ab:
82:3a:ee:fe:81:64:5c:75:41:11:cd:6f:5c:d8:db:f9:87:ca:
27:c3:1c:d2:cb:96:91:ed:69:25:3b:da:ba:27:f5:2a:03:a6:
76:b1:53:04:77:70:6f:45:e5:a0:27:73:12:a8:36:f5:5c:a5:
e9:df:b8:a9:b3:7d:16:ac:ae:f4:56:17:6d:a9:65:c3:52:73:
53:1b:2c:e8:a4:b3:c1:64:62:cd:e2:ce:92:2f:55:c7:e9:b8:
b4:46:64:74:89:65:d2:c3:aa:8d:7c:a9:f7:cb:a1:c0:6b:b5:
a8:66:06:95:49:8d:04:64:31:5d:a9:17:7c:0e:bf:ee:9c:88:
72:46:a8:a0:24:64:05:16:e0:47:b3:65:77:22:3c:a3:9a:fd:
17:56:9a:48:55:5f:0f:4e:99:a7:13:c7:ab:e1:e0:4e:8f:ca:
51:ce:a6:b1:70:93:e7:04:4c:ca:d1:27:05:c8:37:9c:89:6f:
22:78:07:2d:d4:a3:81:81:0b:ca:d1:0b:1d:76:90:2a:0b:a5:
44:9f:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org