Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FCBcGfbFxMufru3Cg5F3V1mM8RE.roa
File: FCBcGfbFxMufru3Cg5F3V1mM8RE.roa (raw, json)
Hash identifier: x3ZEulk58ldPbYp+3d0xXsVSLvCmVbgTJt0uUtZV1gE=
Subject key identifier: 14:20:5C:19:F6:C5:C4:CB:9F:AE:ED:C2:83:91:77:57:59:8C:F1:11
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018514912133FD31F2C219AAE14E6468628D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FCBcGfbFxMufru3Cg5F3V1mM8RE.roa
Signing time: Thu 15 Dec 2022 06:55:33 +0000
ROA not before: Thu 15 Dec 2022 06:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:91:21:33:fd:31:f2:c2:19:aa:e1:4e:64:68:62:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 15 06:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14205c19f6c5c4cb9faeedc283917757598cf111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:a3:64:f5:1c:2e:01:73:6f:6d:ec:8c:a9:
f2:f1:c4:36:a3:a1:bf:cb:72:1b:08:95:c3:45:aa:
2e:08:c1:b6:59:2a:7e:c5:15:90:66:c9:a9:5b:bd:
59:4c:b4:0d:71:41:05:05:74:20:64:6f:53:46:c6:
4a:45:b9:6a:fb:43:cf:1e:14:41:83:5d:2f:4f:13:
26:8d:84:07:c9:ea:5a:1e:37:a9:2c:91:49:91:37:
e0:6a:2e:28:00:82:71:a1:b5:66:b0:43:96:74:85:
3f:6f:54:87:6e:b5:49:11:63:cd:e7:f4:45:70:ac:
98:d8:04:0d:64:2c:e9:a7:32:e9:db:ad:eb:b1:21:
61:f9:d4:28:7a:12:5b:dd:b5:9a:b4:eb:5b:ba:c4:
95:58:37:0c:5c:fd:db:3e:de:f1:fc:41:1b:de:a7:
2e:8d:32:f9:38:66:5b:ff:60:ec:84:c8:f3:d1:93:
8f:40:1f:21:9e:15:c8:84:7f:93:f9:b8:0b:74:e3:
18:2c:a4:40:9e:45:81:fe:fe:3f:3e:5f:74:de:c2:
91:87:03:1b:28:de:6d:c7:11:9a:21:7f:fa:5f:21:
ff:a4:79:4e:5f:b2:9e:b7:31:57:a9:0c:f8:ae:4d:
8f:8d:84:9a:dd:ab:fc:c3:e7:1d:2c:48:e1:60:3d:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:5C:19:F6:C5:C4:CB:9F:AE:ED:C2:83:91:77:57:59:8C:F1:11
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FCBcGfbFxMufru3Cg5F3V1mM8RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.56.0/24
84.32.63.0/24
84.32.95.0/24
88.216.2.0/24
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9a:28:44:a0:57:95:ec:d4:79:2d:29:38:ca:db:a3:65:53:
64:92:48:16:93:bf:7a:ad:e6:49:32:b2:1f:0d:a8:e6:96:07:
b2:d1:c4:cd:29:d6:a0:a3:1a:7b:37:5d:a6:4c:51:3a:66:ad:
e0:f6:72:86:42:0a:88:87:ef:93:1e:80:71:ce:27:6c:50:3e:
70:2f:24:4a:8e:a5:a0:b0:49:6a:e9:7b:cd:7b:f5:75:60:55:
68:2e:57:ee:1b:51:af:97:dc:b6:25:27:c7:42:69:68:59:8b:
29:2b:60:44:cf:29:ee:fe:a5:67:08:11:27:11:37:60:9b:64:
fd:47:39:75:d9:72:bd:89:7b:f8:d6:29:4e:27:a8:93:e7:0e:
ac:6f:6d:af:09:b7:20:97:30:e0:66:86:cf:55:25:1b:c8:cf:
19:f5:16:f1:35:6b:a4:0a:c9:c5:b9:26:5d:12:46:fe:37:59:
f8:b5:61:7d:a4:e8:d7:ac:25:77:0a:a9:f8:4a:06:ff:90:63:
fa:f3:06:ba:a9:15:2d:6f:c2:4c:70:48:28:fd:ec:dc:98:85:
c5:ae:a9:a3:af:f0:09:51:3b:03:3e:f7:97:00:48:0e:c4:a4:
af:de:95:2e:1f:65:91:fc:8d:fb:b2:82:6d:07:5f:1d:db:ee:
46:5d:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org