Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IRVHFLCEg5QufOf6I72nY6XoQZc.roa
File: IRVHFLCEg5QufOf6I72nY6XoQZc.roa (raw, json)
Hash identifier: NTPRKFMr20aIgRAwx8igMueq+VvA4UNGbs4EgGQCyL0=
Subject key identifier: 21:15:47:14:B0:84:83:94:2E:7C:E7:FA:23:BD:A7:63:A5:E8:41:97
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018412F7AC0D1C8641B84C8F379446237EEB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IRVHFLCEg5QufOf6I72nY6XoQZc.roa
Signing time: Wed 26 Oct 2022 06:25:32 +0000
ROA not before: Wed 26 Oct 2022 06:25:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 84.32.43.0/24 maxlen: 24
84.32.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:f7:ac:0d:1c:86:41:b8:4c:8f:37:94:46:23:7e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 26 06:25:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21154714b08483942e7ce7fa23bda763a5e84197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:29:45:97:f5:0e:16:6e:89:4c:b4:bb:dd:
8c:75:fa:2a:52:f4:9b:e9:92:a5:a4:59:18:46:cb:
77:6e:20:77:a3:e1:50:89:35:44:89:e0:d3:20:e3:
ac:01:37:03:52:2c:6a:e7:c1:0c:bc:d8:3c:a6:95:
36:b4:ff:62:9a:a1:8b:9e:46:e0:1c:05:5f:da:81:
3f:35:08:d5:fa:94:36:c1:82:10:59:e9:8d:47:10:
58:f2:63:ab:c7:52:f6:46:c6:8e:ff:a8:f0:46:c7:
67:10:4f:2f:87:44:74:3b:eb:04:9c:74:91:65:b9:
98:38:1e:ea:2e:d8:fa:bf:8d:33:0b:97:7c:67:a1:
87:2b:4d:2c:9f:6c:14:d5:e5:90:26:ce:f4:50:41:
51:2a:73:65:75:96:83:7f:13:23:b1:05:40:cc:3e:
5d:0e:7c:1e:ea:74:b4:90:78:1b:e8:be:53:1f:54:
1d:38:55:d0:cc:51:77:c3:d7:2c:f5:a7:5e:49:30:
89:d1:41:18:0a:71:41:13:de:f8:f8:76:14:3e:b2:
b3:01:5c:f1:a9:67:15:0c:cb:b2:5e:11:73:21:ec:
db:ef:5b:d5:c5:34:44:77:cc:e3:10:fd:a7:5f:a7:
32:79:3d:ca:33:55:b7:6c:b3:ca:32:0a:4f:82:56:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:15:47:14:B0:84:83:94:2E:7C:E7:FA:23:BD:A7:63:A5:E8:41:97
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IRVHFLCEg5QufOf6I72nY6XoQZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
84.32.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b0:ec:6c:85:b8:09:46:df:cf:07:1f:ef:02:82:ab:82:8c:
3a:c2:1d:49:fb:51:bb:56:fd:94:7a:aa:3b:2b:2a:9f:34:bc:
56:48:d0:72:bf:1c:2b:ad:bc:4b:79:76:6b:4e:77:c8:21:5c:
b4:64:a8:d7:f0:c3:16:03:3d:13:72:51:91:fd:5a:27:ff:08:
97:d3:5b:11:7d:b3:8c:b4:44:75:4b:39:f1:e6:c2:39:d4:d6:
ff:be:c0:49:d2:80:f9:76:73:96:76:b2:22:4a:75:93:a5:12:
b5:a2:a2:08:ef:6d:03:30:b7:49:91:a2:50:0b:8f:62:73:68:
86:d2:73:e7:64:89:83:eb:07:82:fc:04:a8:7a:c1:61:9e:76:
f8:36:9f:8b:08:0c:2b:86:72:7c:6f:ff:d9:48:fb:c5:9b:1c:
01:5a:05:e9:76:84:a6:f6:14:ee:86:2c:aa:e5:0e:b2:cf:6c:
82:5a:c0:ea:f6:0a:44:f2:dd:ee:52:95:ad:5c:cf:4c:1a:f9:
1c:7c:63:fe:e6:a9:31:a0:5d:60:29:3d:e7:ae:b2:10:8d:24:
bd:78:93:23:0c:51:51:bb:8f:ca:3c:b9:1f:b0:7f:44:3d:9a:
d9:8b:40:4c:02:f3:97:89:98:2f:57:09:c4:cf:2e:c6:ec:d9:
4b:5e:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org