Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6ETpRs-svldUi1LJlusSIIdFFmg.roa
File: 6ETpRs-svldUi1LJlusSIIdFFmg.roa (raw, json)
Hash identifier: 0VIjdMi6VFkoPopxY8TnqzcZQj13g7f652EJ0+nq9ms=
Subject key identifier: E8:44:E9:46:CF:AC:BE:57:54:8B:52:C9:96:EB:12:20:87:45:16:68
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018552BCC8A796A1135F3EC7CEFA7ADC80AA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6ETpRs-svldUi1LJlusSIIdFFmg.roa
Signing time: Tue 27 Dec 2022 08:39:41 +0000
ROA not before: Tue 27 Dec 2022 08:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:bc:c8:a7:96:a1:13:5f:3e:c7:ce:fa:7a:dc:80:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 27 08:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e844e946cfacbe57548b52c996eb122087451668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:04:e6:8e:88:be:0d:4b:d1:f6:bd:93:07:
c5:fb:ea:50:43:b0:e5:54:9f:0c:c3:eb:05:6c:88:
84:07:a7:56:d9:e4:80:8b:b4:28:ec:34:6c:ab:cc:
a8:8f:16:5e:ed:07:9e:71:0d:97:bd:69:77:32:08:
b0:62:33:ff:19:f4:f8:cd:af:68:48:56:f2:ab:1f:
5d:69:e6:cb:07:2b:a1:ec:0e:40:00:9b:af:81:ef:
54:d5:5e:de:34:95:46:b5:24:bc:9e:75:9e:ca:5b:
11:77:2d:7f:ee:ce:7a:6c:52:1f:69:92:5c:f7:fc:
16:0d:a6:e0:f3:e6:3e:9b:f8:98:f2:fe:df:80:87:
2a:2d:96:b2:10:a0:9e:70:b7:9c:02:cb:fd:43:77:
b8:3e:98:91:cb:48:54:12:f0:66:67:2f:f3:48:f6:
30:d3:60:b9:2b:8d:87:0a:be:50:b9:35:33:e3:41:
1a:f1:92:6b:f6:3e:68:9b:37:bc:46:c8:16:e9:d8:
a0:88:e4:8e:6e:23:da:7f:3a:49:94:1f:e4:9d:89:
75:20:bf:da:62:39:37:f2:4b:82:86:6d:4b:14:aa:
97:90:83:a0:9b:79:38:32:2a:d6:7d:a7:48:f7:fb:
40:b8:de:a8:93:3e:55:8f:eb:7c:1e:03:ca:ec:35:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:44:E9:46:CF:AC:BE:57:54:8B:52:C9:96:EB:12:20:87:45:16:68
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6ETpRs-svldUi1LJlusSIIdFFmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.30.0/24
84.32.44.0/24
84.32.46.0/23
84.32.59.0-84.32.60.255
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.92.0/24
84.32.94.0/24
84.32.219.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.95.0/24
88.216.103.0/24
88.216.188.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b2:76:ed:e6:a0:17:0f:4d:7a:a3:1d:f3:9d:e6:12:4e:14:
37:f6:b5:0f:fd:3c:6e:29:eb:0d:e4:d0:e6:af:f3:9f:a1:7a:
34:f6:11:d8:66:1b:66:27:11:0a:5d:9b:93:d0:16:2a:37:1c:
39:b8:41:d6:d4:56:01:08:34:92:a6:25:9b:8b:e9:dd:03:b4:
dd:42:fe:a5:91:b4:ff:6c:a7:6c:1f:f4:b1:99:f9:35:b8:50:
69:e8:5e:dc:11:46:2a:03:82:89:e7:83:ac:69:5b:a9:42:e5:
f2:84:cf:bb:96:dc:c2:fa:fb:07:fe:fb:13:9d:e8:c0:e9:7c:
2c:23:bb:b7:6a:f9:fc:da:9c:21:ef:7a:d2:fe:0d:3a:78:a1:
05:b2:8c:6f:5b:bf:61:4f:81:ba:6b:f2:5a:0e:50:f5:86:d5:
05:66:48:c8:01:61:a2:b1:77:96:f9:62:02:a8:10:bc:4c:f1:
98:c6:62:79:24:e3:c7:6d:7d:d2:4b:e7:49:70:7b:17:0f:23:
b5:38:f6:45:39:a0:eb:f8:3f:1c:38:1c:fb:72:74:5a:2e:29:
d3:21:1e:6c:27:49:30:e9:4d:80:53:05:15:d7:10:33:42:46:
b3:0c:99:30:55:0a:4e:93:d9:01:78:13:b1:76:c1:e4:32:a4:
86:79:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org