Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FLtJ_IgJGUjNXrpDYoCCWBPKgzU.roa
File: FLtJ_IgJGUjNXrpDYoCCWBPKgzU.roa (raw, json)
Hash identifier: D9MrxjxJkGYeaDTxbR1n0WE6pfsAeA/o5HSoVUOSlPc=
Subject key identifier: 14:BB:49:FC:88:09:19:48:CD:5E:BA:43:62:80:82:58:13:CA:83:35
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01851F3797C69EEE0A1CF4CFD652F720D679
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FLtJ_IgJGUjNXrpDYoCCWBPKgzU.roa
Signing time: Sat 17 Dec 2022 08:33:35 +0000
ROA not before: Sat 17 Dec 2022 08:33:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.224.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:37:97:c6:9e:ee:0a:1c:f4:cf:d6:52:f7:20:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 17 08:33:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14bb49fc88091948cd5eba436280825813ca8335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:86:14:da:94:15:3e:1b:1e:b0:8f:3f:2f:
58:21:7f:52:80:6f:67:7b:68:f4:c6:14:eb:92:76:
df:60:ac:24:3d:ee:5b:1c:c2:55:be:6b:03:a6:1b:
d9:7b:df:48:9e:5d:95:d3:e2:d6:59:bd:80:ea:e1:
55:6e:f6:33:22:fb:33:46:b1:5c:3a:43:ed:36:ae:
f9:ac:30:a1:15:46:ba:f9:9e:f8:f2:cc:45:88:51:
a1:03:44:78:6e:d8:32:dd:06:6f:cb:1d:09:0b:a7:
93:39:19:fd:a9:75:90:3a:4a:a2:76:17:8a:6b:b2:
7d:a4:43:79:d7:e9:07:9c:97:73:1a:b0:b7:ab:6b:
00:96:7b:00:6d:be:e5:15:39:5a:3c:78:92:fe:b8:
56:07:00:9c:ca:b0:9a:0c:41:38:82:81:f0:68:9f:
82:84:cf:02:80:5f:2d:00:bd:ff:de:9b:b2:1d:14:
9d:86:41:9b:f2:00:bd:81:93:c7:17:a7:c0:29:d4:
63:30:c8:b6:bc:0c:17:03:d5:71:4b:78:af:7a:90:
fc:b4:4d:9a:03:dd:c1:6e:8c:61:96:e3:97:fe:49:
b2:88:f8:f2:e0:ca:50:3d:0e:df:6c:45:5a:3a:c1:
51:d5:7d:80:d3:fb:ac:59:eb:7f:06:e2:9f:36:05:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BB:49:FC:88:09:19:48:CD:5E:BA:43:62:80:82:58:13:CA:83:35
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FLtJ_IgJGUjNXrpDYoCCWBPKgzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d6:00:eb:a0:9a:72:ec:7f:89:af:dc:17:c9:52:7c:97:d3:
b7:a2:15:89:fd:dc:50:3d:6c:eb:52:e5:d7:17:dc:3c:0f:78:
4f:38:7e:15:60:f2:a1:06:1a:4d:52:22:28:45:4e:c2:7a:9a:
5d:80:9d:7f:7e:8b:14:70:59:10:20:aa:d9:37:df:28:72:43:
65:69:2b:82:ea:26:83:d9:1d:22:c3:53:7e:1e:f7:1f:1e:0d:
4b:a9:30:df:e8:3f:15:56:29:fc:53:e7:af:fd:40:1a:57:1a:
3f:22:f7:a3:40:dd:ca:cb:31:db:b7:3e:72:d4:fc:0d:06:9a:
fe:62:87:9d:22:65:5f:72:23:4c:d6:6c:52:91:9e:22:48:b0:
67:cf:a0:db:f1:3e:09:81:94:3d:c8:79:c5:2b:66:dc:e3:42:
6f:c1:d2:9f:48:24:1c:08:68:80:6d:8e:73:03:0e:2d:5f:56:
d1:5b:c3:88:4a:34:f5:25:db:c7:0a:23:46:2c:3c:b6:9e:64:
a2:35:9d:4e:c3:d3:24:f2:32:42:2a:32:69:91:ac:e6:2f:00:
11:f9:ed:1c:36:34:92:7d:46:90:9e:10:4d:3d:ad:f7:1b:7a:
3e:32:8a:9e:68:e5:ba:32:a1:c5:36:18:be:e7:8f:83:e6:1d:
c6:8b:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org