Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GRwAteoV3pruFzn2UEuE7Qmmh7E.roa
File: GRwAteoV3pruFzn2UEuE7Qmmh7E.roa (raw, json)
Hash identifier: f/KC+uR1g9MO5gl/qkXtgWeyQ7YOxsa+G8h0L2kGX9Y=
Subject key identifier: 19:1C:00:B5:EA:15:DE:9A:EE:17:39:F6:50:4B:84:ED:09:A6:87:B1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184C48D3C33ECDF183565375FA569E46DA3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GRwAteoV3pruFzn2UEuE7Qmmh7E.roa
Signing time: Tue 29 Nov 2022 18:01:41 +0000
ROA not before: Tue 29 Nov 2022 18:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44547
IP address blocks: 84.32.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:8d:3c:33:ec:df:18:35:65:37:5f:a5:69:e4:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 29 18:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=191c00b5ea15de9aee1739f6504b84ed09a687b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:63:75:34:9a:32:aa:ca:c7:9d:e1:c5:94:
e3:17:15:69:3b:18:cf:43:db:2b:cd:c2:d5:dd:61:
13:97:49:5a:cc:e0:10:93:80:9d:8c:0d:d7:d8:e7:
6c:92:68:05:5f:71:d5:af:40:1b:fe:57:1d:01:d9:
eb:1c:24:b7:e7:cd:f8:72:ed:61:5f:b2:94:6b:28:
30:d9:14:42:44:5f:60:aa:14:a7:17:02:74:2e:0c:
5b:61:d8:07:b7:f0:da:65:b0:ed:a2:bc:d7:01:91:
b2:70:a4:71:73:61:07:8e:1a:51:ff:eb:60:d6:81:
b2:e7:48:b1:da:17:1c:a1:a7:46:a3:80:dc:b6:bc:
22:4f:b1:d7:29:e9:df:d1:a9:c6:69:ea:83:f8:38:
93:90:39:1c:4d:69:e7:0a:9a:be:21:ba:f0:83:c5:
ec:62:3e:68:6a:2b:a6:d2:a7:50:ee:39:6f:18:01:
88:b5:29:58:c4:cf:da:db:1e:b6:03:fe:3d:f8:fd:
ab:06:f7:ae:0d:10:8e:92:10:a3:ef:27:ee:b0:b3:
d4:75:c1:2a:b0:bf:a5:07:af:b8:40:78:56:14:2c:
d0:30:2e:e0:c5:97:64:8d:94:a7:f4:72:23:ec:9c:
91:a6:15:31:6b:a9:1d:cd:52:17:2b:16:95:e5:f9:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1C:00:B5:EA:15:DE:9A:EE:17:39:F6:50:4B:84:ED:09:A6:87:B1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GRwAteoV3pruFzn2UEuE7Qmmh7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0a:ca:22:b9:00:bf:3d:6c:4f:b0:16:7e:fd:c3:0b:91:52:
4c:78:c8:1c:6a:b6:a0:e7:b7:6c:41:3e:53:4c:31:b5:be:c1:
d2:54:6f:fc:e3:68:93:8b:60:c3:ee:ac:f0:c3:95:b2:8a:88:
78:ba:4e:0a:da:da:b1:ee:d8:be:58:fa:2e:32:f2:67:db:61:
d4:d8:c0:f7:4b:df:18:ff:a4:98:4b:fa:f2:d3:94:85:72:c4:
21:3c:a2:ae:7b:ab:69:71:f6:64:a6:6a:c3:c7:16:7e:b9:ec:
a2:45:a4:bb:74:87:3b:b4:e4:f8:06:1c:be:df:9d:fb:fc:7a:
83:34:c1:5e:da:23:3b:14:60:de:32:02:9c:35:59:54:e0:03:
41:57:f6:8d:02:5d:0b:a7:37:03:41:16:1a:c5:08:a5:b9:74:
08:c4:95:05:f0:b0:91:4c:73:5e:a2:0f:2d:22:84:b8:a8:65:
01:b0:78:2e:53:93:ba:97:c3:73:8c:ab:12:3b:2a:ef:cd:ba:
29:d3:d5:2a:d1:a5:79:eb:9f:98:7b:a1:4c:ee:c2:72:b0:90:
ce:92:d0:0c:7e:01:63:3a:66:89:ff:7d:2c:3f:4e:55:79:d7:
06:1b:d1:d3:08:f2:21:75:8c:f5:8f:56:90:97:c7:54:0b:cb:
3f:8c:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org