Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GUwP1fGn-1jPK7kRcUhk1h7J3LQ.roa
File: GUwP1fGn-1jPK7kRcUhk1h7J3LQ.roa (raw, json)
Hash identifier: 2GxnsX41tOQdvt5qcB8duGf7obxuDWHxkQY95B3QJHk=
Subject key identifier: 19:4C:0F:D5:F1:A7:FB:58:CF:2B:B9:11:71:48:64:D6:1E:C9:DC:B4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184D199144DC5C08127A28CDFB3DE97C207
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GUwP1fGn-1jPK7kRcUhk1h7J3LQ.roa
Signing time: Fri 02 Dec 2022 06:49:41 +0000
ROA not before: Fri 02 Dec 2022 06:49:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 84.32.62.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:99:14:4d:c5:c0:81:27:a2:8c:df:b3:de:97:c2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 2 06:49:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=194c0fd5f1a7fb58cf2bb911714864d61ec9dcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:2f:d9:7d:6a:c7:5d:62:46:9c:ee:5b:8c:
94:01:d1:d3:0a:2e:3f:a6:cc:58:11:56:e9:13:cc:
4c:8c:fe:9e:f4:ee:b2:db:bb:ff:5f:29:1e:9a:89:
09:b7:90:45:1e:5f:02:b4:f7:67:79:74:07:ac:77:
af:09:c1:60:79:b2:62:b2:a5:58:02:27:70:d0:95:
48:5c:d9:c7:bf:09:0c:ce:4e:8b:51:04:84:4a:48:
c4:6e:62:8b:3e:21:e6:23:c9:99:b9:5d:e7:65:22:
3f:14:19:7d:fe:74:10:1e:99:1f:48:b6:6f:b9:7e:
d3:bf:2e:5e:04:4f:fb:fc:97:6d:ae:21:b9:3b:a8:
4b:f2:c2:fc:df:8a:49:02:89:9f:57:63:ac:85:0e:
1e:90:41:59:bc:ca:a3:e2:1e:1a:9e:f7:17:a5:ab:
9b:f1:cd:0d:30:8b:2a:3e:cc:5e:4e:96:f3:b5:cf:
53:67:b5:ed:2d:cc:6e:46:55:c5:f5:a0:cd:87:b6:
04:0d:2c:68:27:26:f9:8b:e1:38:61:d1:31:e3:84:
cf:ba:51:0c:d3:44:ac:eb:84:7a:3d:0d:23:98:89:
54:c1:16:ed:ff:d7:9e:91:42:7c:ed:a9:f7:ef:01:
9e:28:44:03:bd:02:a3:45:25:25:1e:65:8a:7c:73:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4C:0F:D5:F1:A7:FB:58:CF:2B:B9:11:71:48:64:D6:1E:C9:DC:B4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GUwP1fGn-1jPK7kRcUhk1h7J3LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.62.0/24
84.32.83.0/24
88.216.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a2:b4:ae:9f:eb:fe:76:01:77:f7:ce:53:09:42:4b:77:b4:
e7:a0:b2:1c:53:7e:60:a5:60:29:06:ea:3e:98:e3:a4:17:43:
69:eb:34:b2:7f:4a:4a:89:1f:e9:e5:0b:ab:9e:cd:9b:2c:65:
de:28:c2:67:cb:17:06:b1:64:32:73:ff:2e:66:6c:cc:b7:88:
fc:a7:e9:5d:9b:a5:4e:97:df:83:84:0e:35:a5:6f:c0:8e:16:
2a:38:c0:60:76:68:9f:c1:95:d1:b9:a5:8d:c1:49:cc:8a:29:
c8:ac:6e:87:a1:e5:0b:1c:a0:e3:50:40:4e:d3:3f:46:59:43:
be:32:0d:0c:f5:43:e0:92:06:39:53:53:00:12:12:0d:8e:89:
c0:69:ae:1c:0b:fa:10:62:c9:de:42:29:8e:f5:b8:85:30:61:
e8:7d:fc:9d:15:dd:8a:d0:ee:b0:b2:e0:62:fa:15:b8:26:f0:
15:87:dd:3c:5d:73:a5:c7:87:fd:c3:c5:80:d5:9b:c8:a7:ff:
bc:ca:72:9f:8d:94:90:40:e1:b6:61:fd:4c:89:85:af:74:19:
fe:67:b9:1a:02:ed:06:cd:25:c8:08:94:99:da:33:67:26:b3:
76:77:10:43:89:50:cc:9c:74:0b:3a:d2:a2:85:c6:dd:24:55:
4d:fb:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org