Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5YIODtFj2v2x8BUstcfkDHWoXb4.roa
File: 5YIODtFj2v2x8BUstcfkDHWoXb4.roa (raw, json)
Hash identifier: 6reTWlQwTebYMzooJSCW2Xqi0VTZEpPK/NFK6SSbQGw=
Subject key identifier: E5:82:0E:0E:D1:63:DA:FD:B1:F0:15:2C:B5:C7:E4:0C:75:A8:5D:BE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01AF647A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5YIODtFj2v2x8BUstcfkDHWoXb4.roa
Signing time: Fri 01 Jul 2022 15:52:25 +0000
ROA not before: Fri 01 Jul 2022 15:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 84.32.56.0/24 maxlen: 24
88.216.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28271738 (0x1af647a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 1 15:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5820e0ed163dafdb1f0152cb5c7e40c75a85dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:b8:e0:7d:cb:9e:13:55:8d:71:a2:a2:27:
9f:26:a7:b9:24:07:37:82:fd:03:ed:52:80:1a:08:
f4:67:46:ef:34:f2:ed:a7:3a:22:d5:b8:df:0b:cf:
c3:78:77:ee:43:6e:97:9b:68:c2:92:29:77:68:ae:
90:17:43:d6:63:a0:d2:aa:4f:b5:48:be:84:ce:03:
ca:ba:e9:2f:18:14:a6:1c:84:b0:00:c6:ac:ed:e4:
4e:50:a3:2c:23:23:c3:9c:5c:af:d3:45:30:1e:5b:
23:bb:9d:5b:af:8d:61:45:92:b6:bd:5c:d2:60:76:
ef:b7:3f:27:27:1d:e6:a7:b0:84:62:34:b8:99:a4:
04:d0:7a:4e:b7:ab:9a:be:51:ff:c6:38:7f:e6:b6:
20:2c:1c:3f:40:36:05:cf:ea:61:83:18:38:ca:6b:
e7:d6:79:f2:80:fd:17:f5:c8:9f:1a:41:42:54:88:
02:1d:48:9d:0f:fa:19:fb:94:14:71:2b:b9:13:d6:
83:10:5e:10:84:2b:56:0c:cd:7a:f1:47:0e:c4:8c:
c2:53:01:27:56:18:fb:b6:eb:76:0f:ec:06:6b:f6:
bf:2e:f0:e5:6f:c1:af:03:99:6e:16:a7:10:12:62:
35:83:9d:73:9c:c1:d7:6e:d8:94:c7:8b:83:c5:1e:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:82:0E:0E:D1:63:DA:FD:B1:F0:15:2C:B5:C7:E4:0C:75:A8:5D:BE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5YIODtFj2v2x8BUstcfkDHWoXb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.56.0/24
88.216.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:57:98:6c:72:68:ce:94:6a:7f:6c:b2:8b:b3:be:cc:d8:b2:
5c:28:81:82:27:3d:05:29:d6:b7:51:e4:da:b2:e9:ef:04:61:
3f:bc:0e:7f:c2:bc:ee:6c:4c:cc:0d:c3:1c:b2:97:a4:00:4a:
9e:3d:0c:49:d7:4b:57:51:f7:41:6a:8d:75:51:a3:9a:25:64:
3f:9e:ac:89:53:f3:ab:01:40:c3:8c:38:0d:4b:c7:c8:74:43:
d6:30:f3:c5:61:32:8e:6d:87:7f:87:d8:88:70:9b:b7:68:7b:
d2:9c:16:7e:dd:a6:31:98:dc:bc:18:d9:98:c4:06:3d:08:61:
54:0f:1a:9d:2e:1a:c5:67:06:07:70:af:6f:46:3a:fd:e5:21:
74:d4:64:46:91:69:d7:ad:0c:35:ce:b0:5f:f5:36:6a:c8:76:
1b:66:dc:ac:fa:19:ac:02:61:f5:b2:57:2a:d6:6c:f8:d2:a9:
62:17:4d:e3:69:c5:f8:00:6d:ff:30:49:92:e0:82:3d:83:3a:
dc:0d:23:36:e2:f4:e2:87:b3:95:64:70:7d:a6:f2:dd:01:38:
d3:4e:b5:91:16:cd:48:fd:cf:27:a8:8a:80:ca:54:ae:d0:ca:
8a:2d:a3:58:53:b8:12:98:6f:6e:60:05:1e:f4:cb:5e:59:e9:
f9:ea:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org