Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/81oAJ7GGT6m66llusuur_EoV5Zg.roa
File: 81oAJ7GGT6m66llusuur_EoV5Zg.roa (raw, json)
Hash identifier: w7+ioOlX28vSojgeHocKtlQviPZz9xGUqI80mcbpn3Q=
Subject key identifier: F3:5A:00:27:B1:86:4F:A9:BA:EA:59:6E:B2:EB:AB:FC:4A:15:E5:98
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01843ED3FA463A0D776F922395A5D0D34719
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/81oAJ7GGT6m66llusuur_EoV5Zg.roa
Signing time: Thu 03 Nov 2022 18:49:50 +0000
ROA not before: Thu 03 Nov 2022 18:49:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150303
IP address blocks: 84.32.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:d3:fa:46:3a:0d:77:6f:92:23:95:a5:d0:d3:47:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 3 18:49:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f35a0027b1864fa9baea596eb2ebabfc4a15e598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:37:93:22:a7:41:ef:2f:0b:8d:fd:0c:6c:
79:a9:e0:2a:3e:9a:5d:dc:84:87:fa:94:14:94:a7:
e8:b0:57:18:78:86:f3:a5:fc:44:f3:44:92:32:8c:
27:be:58:cc:65:2b:6b:16:95:87:dc:a2:fe:59:15:
46:e4:30:d6:cc:28:33:fb:a9:a3:1f:78:f5:74:c7:
da:53:80:87:93:fd:33:21:92:1a:0e:8b:bd:1b:8a:
46:c7:65:fa:52:6d:e6:4e:03:3c:46:2e:ac:bb:ab:
67:95:8f:63:f1:10:bd:84:36:dd:8f:d6:6e:cd:b4:
0a:36:82:39:99:51:96:2c:0e:5b:2f:e6:d0:f2:11:
3a:96:72:fc:29:97:e3:7e:bd:fc:54:03:ed:1e:24:
76:1f:cb:59:99:bf:74:0e:50:4a:1b:a9:69:8e:63:
1d:22:97:32:e8:35:6b:90:41:57:bc:68:ba:b9:65:
b8:60:a8:2b:bc:ba:b1:29:f3:f1:00:f1:80:ed:cb:
29:c9:07:2f:00:8c:20:4e:86:95:10:70:cc:e2:03:
aa:2a:a6:d9:2b:c3:78:6c:53:b5:2d:d7:fb:77:cd:
5e:de:c3:2b:29:41:2a:9d:c0:74:46:dc:89:8e:0c:
a2:77:66:fb:7a:ea:66:6d:ae:46:9f:4e:27:ec:06:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:00:27:B1:86:4F:A9:BA:EA:59:6E:B2:EB:AB:FC:4A:15:E5:98
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/81oAJ7GGT6m66llusuur_EoV5Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4c:e1:e2:12:f2:89:f9:42:cd:12:2f:10:d9:3b:4a:f0:36:
5f:a5:d1:78:54:ba:d2:ca:d3:3d:f8:80:3b:7d:9a:1d:47:16:
9f:65:ad:0b:65:83:80:7f:c6:0c:07:73:b7:26:44:c4:5b:54:
d4:90:b3:d8:2e:06:f8:25:4d:a8:4a:54:51:39:d5:91:be:d3:
0b:3b:92:68:16:a7:a9:9d:f9:fb:f4:58:57:00:51:08:94:4c:
ea:7f:12:63:f6:6e:5c:22:0d:e5:5c:46:fa:9a:87:ac:1a:25:
24:36:58:b8:c8:20:cd:73:77:87:ec:50:21:cd:d5:d9:b9:7a:
78:27:49:fe:af:27:99:e8:ff:a4:ee:1d:1c:18:e8:59:30:b3:
73:9a:78:4a:2c:39:db:b0:16:61:5c:ab:f4:c5:a8:e9:69:6f:
02:19:00:8b:07:ed:7a:4b:f0:2e:05:92:ef:d0:a7:53:2b:0e:
51:52:14:8c:72:9a:fb:09:da:a9:90:37:1e:e4:96:f6:0f:70:
82:4a:ce:15:27:df:15:5e:99:65:f6:62:2a:4c:1c:c5:9e:42:
00:5e:ed:02:47:7e:43:ab:b7:c8:ed:ca:85:0c:16:0c:5f:36:
29:7f:fe:46:d7:67:01:51:3e:3b:29:c2:d9:8d:64:5c:ae:8f:
ec:58:36:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org