Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8V2HeHgLDx0URr_cIwchJXOLRWA.roa
File: 8V2HeHgLDx0URr_cIwchJXOLRWA.roa (raw, json)
Hash identifier: NIWP1WEXea9WYp6zoKVQYCA4uIElF83Jj6ShHX5zWf8=
Subject key identifier: F1:5D:87:78:78:0B:0F:1D:14:46:BF:DC:23:07:21:25:73:8B:45:60
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 6B67DB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8V2HeHgLDx0URr_cIwchJXOLRWA.roa
Signing time: Fri 25 Mar 2022 06:43:28 +0000
ROA not before: Fri 25 Mar 2022 06:43:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.52.0/22 maxlen: 24
84.32.56.0/22 maxlen: 24
84.32.60.0/22 maxlen: 24
84.32.64.0/22 maxlen: 24
84.32.68.0/22 maxlen: 24
84.32.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7038939 (0x6b67db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 25 06:43:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f15d8778780b0f1d1446bfdc23072125738b4560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:ba:c3:93:84:0b:e1:1a:f9:2a:c4:c6:9c:
c0:16:c1:00:95:77:21:14:f8:be:d3:ac:5a:12:46:
7c:dd:89:44:76:f3:e3:06:99:4d:25:0b:0c:29:ed:
92:2a:6c:c0:56:b4:86:f8:dc:c2:a0:c8:23:dd:0c:
ef:b4:0a:86:34:fe:34:85:a4:82:91:49:fe:60:14:
f8:18:b2:61:02:87:f8:5a:82:0e:b4:2a:66:ce:4a:
ff:ee:68:c0:4d:a4:e8:b5:cb:4f:15:73:86:8d:6c:
d1:8d:7c:f7:74:da:55:5e:38:da:9d:92:c2:b8:f1:
4d:40:20:da:80:c7:87:00:32:09:c6:a2:66:74:d0:
4e:b1:1e:7e:38:41:0f:52:e3:a2:fa:d7:93:e9:2e:
95:c8:ca:30:81:cd:83:52:fe:09:31:8f:8e:15:a0:
5d:9c:48:2a:19:34:ce:ed:a9:05:1b:a1:f1:76:d9:
73:7b:35:68:b0:9a:93:cd:f3:63:17:f8:45:14:ac:
a9:81:76:e9:af:4c:95:77:01:a3:cc:80:d7:c0:b9:
8e:86:1d:1e:67:e6:e4:fe:9e:0d:58:e4:0c:8d:91:
1c:a4:69:40:2b:78:e5:3e:d0:90:83:52:62:54:01:
45:54:37:82:ab:45:9a:15:5c:fe:c0:a3:cf:1d:d6:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5D:87:78:78:0B:0F:1D:14:46:BF:DC:23:07:21:25:73:8B:45:60
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8V2HeHgLDx0URr_cIwchJXOLRWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0-84.32.71.255
Signature Algorithm: sha256WithRSAEncryption
0d:2f:75:51:bb:cc:d4:08:c5:80:1b:fc:ef:ac:de:f9:92:43:
28:64:ff:86:be:d2:09:a9:98:f8:9c:5c:6b:15:f9:50:e4:cf:
02:8d:d7:e1:14:79:03:bc:d3:1f:9a:77:0a:eb:8f:60:b7:a4:
76:a5:43:ae:6c:0a:7e:98:88:59:cd:bc:92:c9:67:0f:ab:9f:
44:49:6f:3c:44:24:83:58:9e:76:dc:06:f9:ac:a0:d7:ab:21:
04:62:a6:85:35:a7:e0:78:23:75:6d:7e:48:8d:be:0d:94:08:
1e:72:5e:02:d3:20:5f:d0:26:d0:cc:28:9f:f4:44:1d:d1:e5:
9d:4b:64:a1:a0:09:18:1b:20:fb:54:07:fe:3c:a4:a2:6d:62:
83:87:3a:19:3c:9c:46:7c:82:20:91:14:a1:8d:99:a1:17:bb:
5f:b0:7d:c4:50:7b:f1:36:51:5c:c7:ff:61:63:3b:6d:62:72:
3a:8a:a0:76:48:5d:f7:fe:e5:fa:55:b9:36:3e:d2:74:8c:9f:
76:53:58:8c:87:07:07:ad:10:53:1b:ad:5a:b0:c9:1c:9e:31:
82:be:d1:32:81:7f:88:2f:4c:de:ba:56:d9:d4:a6:be:77:44:
40:2d:12:03:e3:80:eb:46:24:51:37:a2:34:38:8b:2b:04:d9:
f9:ec:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org