Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6Tp081yuxqjEePRr7o1TqIHOUFU.roa
File: 6Tp081yuxqjEePRr7o1TqIHOUFU.roa (raw, json)
Hash identifier: xcBnqAEoKuhlN2jnbarH/0JOB3ZZfhFlVMSFyXkb50g=
Subject key identifier: E9:3A:74:F3:5C:AE:C6:A8:C4:78:F4:6B:EE:8D:53:A8:81:CE:50:55
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01852C439B5236BA3245788972C47116900D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6Tp081yuxqjEePRr7o1TqIHOUFU.roa
Signing time: Mon 19 Dec 2022 21:21:46 +0000
ROA not before: Mon 19 Dec 2022 21:21:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.178.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
88.216.135.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2c:43:9b:52:36:ba:32:45:78:89:72:c4:71:16:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 19 21:21:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e93a74f35caec6a8c478f46bee8d53a881ce5055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:3e:db:bc:90:d8:1d:20:68:f9:10:8e:90:
d5:29:6d:65:9d:49:37:7b:52:30:06:d7:bf:d9:ee:
76:8b:90:03:7a:eb:d4:7e:5a:26:7a:90:20:70:11:
6f:41:b2:5a:a3:1a:0f:71:32:62:59:8e:01:c5:ad:
8a:e3:3f:4b:f8:ea:a6:c7:78:d6:bf:9b:c3:90:57:
f1:c0:ad:26:71:a8:53:45:74:9e:7a:a4:8c:c1:1f:
e0:94:8f:67:6e:25:f6:3b:12:58:0f:6d:ee:59:91:
99:e2:c9:21:51:c3:52:ce:b3:90:1d:08:ce:c4:8c:
3f:42:0b:4d:a3:b0:b0:7f:d8:ed:38:87:32:9e:5d:
08:91:24:b9:15:a8:1e:03:f8:2e:c9:eb:5c:cd:bd:
a5:98:fc:45:f8:a3:31:3e:36:19:40:31:46:92:6c:
8c:be:7c:c9:1f:cf:03:a6:bb:ab:48:70:1f:a8:64:
74:89:83:08:3b:cd:63:01:8c:35:eb:a3:3a:fb:32:
5e:e0:61:09:1e:d5:b8:73:55:60:7b:82:a0:c9:24:
2e:14:7b:eb:33:ba:d0:64:ca:67:8a:3a:82:47:76:
07:3a:60:e7:6c:70:0b:98:bc:50:fa:c4:2e:32:de:
a5:85:e0:a1:08:4a:a4:db:5a:33:29:56:ff:94:62:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:74:F3:5C:AE:C6:A8:C4:78:F4:6B:EE:8D:53:A8:81:CE:50:55
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6Tp081yuxqjEePRr7o1TqIHOUFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.90.0/23
84.32.178.0/23
84.32.212.0/24
84.32.220.0/24
84.32.222.0/24
88.216.42.0/24
88.216.135.0/24
88.216.224.0/22
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
98:f6:21:83:9c:4d:90:0a:65:e0:f1:39:b4:fb:2a:16:b7:c8:
53:d0:55:f5:fc:53:3e:bb:c0:e6:fe:05:7d:54:49:5f:fb:ff:
7f:8b:52:76:6b:00:a4:05:ac:c9:d5:a4:cd:77:51:1f:a5:08:
4b:a6:cb:77:1d:0d:4e:63:0d:75:5c:a1:d5:f4:24:65:65:5e:
c0:29:bd:45:ef:e7:54:38:93:b7:79:92:35:d2:b6:53:dd:08:
bc:0a:aa:08:3e:20:7b:e3:40:6b:36:a5:f1:76:91:e8:bf:f3:
c2:32:b5:b6:88:a3:2d:f6:4a:6b:52:4b:b8:1e:f0:4a:3c:d7:
be:ec:40:a1:09:22:88:75:2d:60:d9:12:93:86:43:42:83:23:
c2:0e:f8:79:92:7c:50:53:e1:7d:41:ad:24:83:bb:ae:fb:b2:
37:c9:58:2c:22:33:a3:89:7f:23:0c:38:67:9c:fe:f0:53:aa:
c4:dd:57:63:f1:19:65:05:f9:87:af:b0:a3:61:5e:63:f4:9d:
76:a4:da:89:7f:02:f8:82:8f:ea:ee:f9:84:49:b8:64:4e:38:
3c:60:f3:e8:24:d0:ef:b0:47:49:d7:b6:93:a7:1f:b6:c9:63:
f4:9c:3d:75:67:94:11:78:83:aa:36:2d:a1:c6:cd:5a:c2:b1:
b4:07:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org