Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8vOvIBb8Xu1nHtqlg4X0A00gtU4.roa
File: 8vOvIBb8Xu1nHtqlg4X0A00gtU4.roa (raw, json)
Hash identifier: NyZ74jx5F5eQuNI58xe8VQMKS8KdEs7lx/psquIvFbU=
Subject key identifier: F2:F3:AF:20:16:FC:5E:ED:67:1E:DA:A5:83:85:F4:03:4D:20:B5:4E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: B8CF4A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8vOvIBb8Xu1nHtqlg4X0A00gtU4.roa
Signing time: Thu 14 Apr 2022 11:00:55 +0000
ROA not before: Thu 14 Apr 2022 11:00:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33922
IP address blocks: 84.32.114.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12111690 (0xb8cf4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 14 11:00:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2f3af2016fc5eed671edaa58385f4034d20b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:5e:db:14:1c:4b:f6:94:9c:00:6a:85:6f:
08:f5:51:b0:85:f4:73:7e:b2:7e:5a:90:88:ca:fe:
22:91:f1:ff:80:99:6d:ff:70:fb:c3:d1:1d:28:3e:
28:c9:59:80:4e:34:25:98:61:e8:5b:ef:a1:b3:78:
aa:9d:69:58:38:37:fa:e3:c2:3d:fc:65:6c:da:f7:
f5:2f:b9:0f:da:99:e1:08:35:eb:9e:08:22:ae:fc:
e4:7d:49:4d:0c:bc:22:dc:bb:c8:5a:e7:ba:23:0d:
ca:31:9c:53:e3:21:71:66:87:8e:6f:bc:9d:4b:b1:
22:4e:c4:65:7e:b1:91:1c:c4:c8:69:18:6f:d8:b5:
3a:af:1d:43:d0:6d:f3:4c:be:07:30:b1:a8:be:80:
10:40:f3:8b:28:6c:9e:57:72:62:a0:a4:e8:de:ae:
22:ed:09:b5:c1:1f:3f:eb:9d:6d:53:64:15:38:2e:
3f:ed:6f:28:9a:1b:ec:64:fa:47:4d:e6:45:4b:8f:
a2:72:0a:31:d1:6b:ed:b7:ed:ac:b2:4c:37:88:07:
58:90:53:9b:35:2a:84:37:ee:2d:93:2b:2f:42:9e:
7a:f8:79:14:62:a7:dc:df:7e:80:b6:34:2b:8f:b3:
b8:2d:09:18:8e:5d:c4:ff:a3:77:f0:7b:5d:fc:e6:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:AF:20:16:FC:5E:ED:67:1E:DA:A5:83:85:F4:03:4D:20:B5:4E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8vOvIBb8Xu1nHtqlg4X0A00gtU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.114.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:ef:0d:b1:6c:c1:48:df:c7:b5:e4:b8:62:45:1a:e0:71:28:
90:28:07:05:22:1a:b0:fa:41:02:da:11:08:f4:71:bd:8c:16:
b3:dc:ce:52:df:3a:4b:f7:b5:58:65:51:03:60:aa:66:a0:72:
ce:db:e6:f1:34:f6:dd:45:1d:e7:d6:d3:b2:4b:9f:36:5a:54:
6c:d4:71:92:7b:49:08:b6:1e:f9:e9:51:2a:a0:48:86:cb:48:
5a:b7:87:8a:b4:73:d4:40:d8:f6:9e:5f:a8:83:f9:35:c8:fe:
c6:36:88:2a:5a:95:6d:60:bb:3e:ed:68:16:61:40:d0:4d:b9:
bd:89:c7:5a:9d:5d:93:90:dd:4e:d2:ca:f7:e7:82:b5:31:64:
ab:61:cc:b7:fd:43:ba:e4:03:f4:70:5a:40:1c:c1:5c:73:28:
38:9b:da:2a:d3:2d:6f:88:95:a5:4a:e2:17:b9:20:dd:ca:1b:
3d:94:48:24:12:08:5d:0d:51:3c:65:68:c1:cf:ec:82:0e:72:
87:2e:7e:f5:81:1d:13:5d:11:36:4e:b8:ec:00:56:f3:93:99:
67:57:67:26:24:08:8f:72:87:a7:9b:ce:84:2e:05:fe:70:08:
79:fe:8f:31:cb:3f:01:34:1a:f3:d3:4c:5e:af:a9:89:8e:24:
02:f6:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org