Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GDSQupv-VRtyLpJmSinTYQ1g9a4.roa
File: GDSQupv-VRtyLpJmSinTYQ1g9a4.roa (raw, json)
Hash identifier: sd9COSC3FAI4KTxlCSKd/Bzlpn/KfY2Xkn3CLYjeCQA=
Subject key identifier: 18:34:90:BA:9B:FE:55:1B:72:2E:92:66:4A:29:D3:61:0D:60:F5:AE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184658AC19016C49E74FDBF63E409F2D01E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GDSQupv-VRtyLpJmSinTYQ1g9a4.roa
Signing time: Fri 11 Nov 2022 07:15:03 +0000
ROA not before: Fri 11 Nov 2022 07:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 88.216.181.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:8a:c1:90:16:c4:9e:74:fd:bf:63:e4:09:f2:d0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 11 07:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=183490ba9bfe551b722e92664a29d3610d60f5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:a4:13:72:1b:90:79:69:7f:c6:bc:a2:1e:
ee:5c:43:3f:ee:4e:d2:f5:f2:c0:37:a6:20:14:31:
0f:f9:b5:e9:e7:e0:a6:88:f9:1b:ac:df:7e:8e:fd:
81:0f:24:2c:77:88:9e:73:ea:ef:34:42:ac:48:00:
66:74:f9:33:ad:3f:77:cf:31:6d:9c:70:4f:38:3a:
5a:39:7e:5c:38:02:9b:8a:22:1b:6d:1b:50:c2:2b:
49:f1:51:6c:5a:c3:99:51:db:93:5b:31:09:6b:36:
b0:27:00:5e:70:c4:60:05:bb:16:d7:b0:3d:55:ba:
c8:7e:9f:ba:1d:aa:c6:32:e3:c5:b6:c6:fd:dd:64:
30:b5:9a:6d:38:fb:e3:c4:e7:5f:c9:2f:cd:fd:75:
b2:a9:29:96:86:b2:e8:be:bd:bd:e8:07:63:e8:31:
24:d1:da:28:c8:7f:9c:d5:26:fe:09:e3:d6:7a:a6:
95:97:bf:7e:43:93:55:a9:d6:ba:e4:70:db:a3:cb:
84:8d:3c:0d:6b:ca:50:34:1b:8c:7d:e6:4a:c9:61:
70:0a:53:65:ee:8c:72:17:f2:dd:23:b4:1a:17:c8:
98:82:a0:df:60:24:8a:5c:a2:ff:45:70:6b:95:ef:
b3:d5:62:0b:47:09:2c:1f:1a:0b:1a:68:ea:fe:29:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:34:90:BA:9B:FE:55:1B:72:2E:92:66:4A:29:D3:61:0D:60:F5:AE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GDSQupv-VRtyLpJmSinTYQ1g9a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.213.0/24
84.32.240.0/24
84.32.243.0/24
88.216.181.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b6:01:01:b1:19:60:90:81:91:0b:2a:56:52:bf:77:44:1e:
a1:ae:18:55:54:26:ff:eb:78:35:ec:ce:b4:bd:cd:cd:3e:a1:
5e:f8:02:e0:8b:26:dc:5b:80:f1:d2:e0:55:cb:88:71:55:38:
09:d3:06:80:3d:68:b3:b8:04:71:66:49:c0:80:60:18:bd:92:
54:52:60:b1:1e:c6:85:4c:47:f3:a1:55:6e:bd:8e:d3:65:31:
3c:f8:7b:a1:41:7b:de:8f:ea:ea:44:ee:44:e0:3c:8f:52:3a:
39:84:29:f0:0e:c5:4d:f7:43:61:89:3d:42:4d:88:e3:16:f9:
b2:c5:4e:35:53:83:c9:52:d4:3f:41:06:40:6e:29:19:94:82:
fc:d2:e5:29:3b:d5:39:98:73:6f:73:c3:d7:e2:bd:7d:7f:26:
02:30:6a:34:52:ae:f6:46:63:12:86:5a:2d:4e:95:9c:d8:20:
7b:cf:c3:86:88:ad:bc:36:5c:df:f8:7c:94:59:e3:c1:81:a8:
09:00:1d:f3:ab:d6:a3:ca:f4:d0:81:69:dc:a2:e3:9b:33:45:
f0:13:64:10:9c:ed:b9:95:0e:be:78:3c:a9:74:8c:37:9c:2d:
56:2a:50:97:d9:c3:bd:8b:93:1b:84:cb:53:f9:5e:b6:15:ae:
d0:77:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:28 2023 by rpki-client on console-ams.rpki-client.org