Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8aP6XEAMc-IDcD8mRXc5vnhCxGY.roa
File: 8aP6XEAMc-IDcD8mRXc5vnhCxGY.roa (raw, json)
Hash identifier: GCNdgneeq6thoJtVPz9NjFBBl0RqS4wumRc89hImkLc=
Subject key identifier: F1:A3:FA:5C:40:0C:73:E2:03:70:3F:26:45:77:39:BE:78:42:C4:66
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018552B91EBE93D4CD36BF48C9150C1F2933
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8aP6XEAMc-IDcD8mRXc5vnhCxGY.roa
Signing time: Tue 27 Dec 2022 08:35:41 +0000
ROA not before: Tue 27 Dec 2022 08:35:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200482
IP address blocks: 84.32.217.0/24 maxlen: 24
84.32.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:b9:1e:be:93:d4:cd:36:bf:48:c9:15:0c:1f:29:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 27 08:35:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1a3fa5c400c73e203703f26457739be7842c466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:2e:30:76:8f:56:18:89:64:63:3d:1a:51:
d4:3f:ec:62:4a:60:12:16:a3:8e:e8:b1:e4:e5:23:
e0:49:97:aa:87:7a:4b:0f:e7:b4:48:b8:74:ca:d3:
77:90:b6:16:41:e1:69:e9:39:73:45:af:6e:67:c0:
9d:02:48:d6:d0:ec:64:ce:33:11:e9:3f:31:d0:d4:
ba:5c:9e:37:e0:23:4d:23:b6:e8:30:6c:61:03:1e:
a3:80:62:a9:91:26:1d:72:88:bd:4e:f3:7e:51:66:
00:62:e6:2f:73:0e:9c:1e:8f:27:eb:c8:0f:54:34:
0f:e4:50:29:9c:26:50:d5:31:21:31:b6:d3:54:31:
53:b8:31:2f:ce:91:9c:0e:53:40:f0:2a:53:9e:78:
91:6a:30:10:f9:ba:13:80:0c:39:33:11:a8:fd:71:
29:ea:a2:cc:e6:fb:b6:5c:f0:9c:a5:58:ec:92:31:
bc:ac:eb:f5:8a:1e:9d:47:4f:f1:18:81:a6:66:26:
ff:1b:68:16:02:1d:78:55:4e:cf:76:1a:6e:2b:68:
c7:94:2e:d3:5d:38:d0:b2:55:7e:67:33:89:ca:ad:
a1:ec:a6:ec:63:ea:fd:d2:0b:da:63:3d:7c:fe:db:
86:63:a9:c0:b4:7b:8f:34:fd:5e:3a:52:09:78:aa:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:FA:5C:40:0C:73:E2:03:70:3F:26:45:77:39:BE:78:42:C4:66
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8aP6XEAMc-IDcD8mRXc5vnhCxGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.106.0/24
84.32.217.0/24
Signature Algorithm: sha256WithRSAEncryption
38:94:0b:2f:99:b7:bf:1e:c4:2e:f2:e8:e1:a2:95:73:53:6f:
fa:56:d1:61:18:e7:f1:f2:8e:9d:1d:e3:8b:25:95:95:ef:82:
5b:9b:15:e3:c8:36:b7:d7:5b:46:47:26:03:23:c9:d3:29:40:
b3:75:e8:31:3b:51:06:17:19:2f:89:4f:ec:31:9a:87:93:9b:
ee:5b:3a:a3:70:e9:e1:f4:57:c9:dc:47:7f:5d:fa:4d:50:2e:
af:1e:83:df:5c:1e:5d:3c:4f:e7:5f:1d:26:69:e8:f4:65:16:
49:61:39:86:42:d9:c2:83:54:98:a6:98:28:56:b2:35:89:d5:
d7:58:36:12:3e:dc:79:42:d7:8f:77:54:49:ef:2c:c5:2a:30:
32:ef:5d:e1:17:3e:0c:1b:5f:e6:25:c9:22:e8:85:14:15:fa:
5b:7e:43:aa:73:34:8a:63:83:69:0d:db:8e:5b:36:86:4d:28:
30:24:94:44:fc:d5:55:a9:8a:e6:5e:96:7e:cf:4b:56:58:24:
a7:8b:6c:d0:aa:59:63:ca:86:79:7f:99:84:67:d7:d3:95:89:
94:68:8f:a0:16:d8:c7:92:3e:d6:12:7f:f5:a0:e2:6e:8b:41:
89:3a:bc:99:0a:d1:e2:03:15:6b:5e:45:44:0e:a9:1f:10:b3:
c2:d4:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org