Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KPfehfQIot6noDJARS0j1EMndHc.roa
File: KPfehfQIot6noDJARS0j1EMndHc.roa (raw, json)
Hash identifier: 45tbQa4VhkumbWxEKMcqWJde5kRxNWCQ2PF2ZF9cvW4=
Subject key identifier: 28:F7:DE:85:F4:08:A2:DE:A7:A0:32:40:45:2D:23:D4:43:27:74:77
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0181D740ABF8BCC1E39206113638B09389F2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KPfehfQIot6noDJARS0j1EMndHc.roa
Signing time: Thu 07 Jul 2022 06:02:28 +0000
ROA not before: Thu 07 Jul 2022 06:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.52.0/22 maxlen: 24
84.32.56.0/22 maxlen: 24
84.32.64.0/22 maxlen: 24
84.32.68.0/22 maxlen: 24
88.216.180.0/22 maxlen: 24
88.216.208.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:40:ab:f8:bc:c1:e3:92:06:11:36:38:b0:93:89:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 7 06:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28f7de85f408a2dea7a03240452d23d443277477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:c0:2b:17:f1:62:4f:82:9c:8e:3a:66:49:
e9:b1:8b:9c:e8:0e:37:57:a3:50:e8:df:08:d5:3e:
47:31:a9:32:c3:1a:c0:92:be:44:18:31:93:b7:5f:
f2:27:e6:be:d2:51:19:6f:38:08:d0:b0:54:94:be:
7a:85:e0:db:d6:d5:7e:14:6b:07:81:35:ff:af:dc:
19:f8:52:58:8b:72:9f:82:6f:c7:3a:aa:19:53:2a:
5b:38:2a:3d:ac:b4:a2:c3:54:92:bf:4c:fb:62:01:
b3:aa:ca:11:e2:1a:d0:98:88:3c:f7:b6:ed:98:70:
78:29:1b:c7:64:39:7a:70:44:ff:1f:68:df:67:ca:
8a:fb:b1:bb:77:1f:2c:40:81:e5:fe:5e:c3:47:94:
08:14:d2:47:ef:d0:a6:e5:e3:88:7d:84:6b:45:c8:
5f:69:c1:f5:7b:a2:a5:40:9b:0f:96:c4:3e:a6:d2:
44:f3:79:80:a2:59:0d:8c:4f:7d:35:9c:58:31:e5:
62:e1:6d:b3:bf:67:df:ec:71:7b:c4:6d:cc:7b:39:
03:e3:36:5c:ba:2c:20:cb:51:de:a9:55:6b:40:5e:
87:12:34:26:0e:d0:56:57:63:ec:ec:eb:5c:ce:59:
da:d4:ea:77:80:8d:94:c6:2f:72:45:5a:24:f6:b9:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F7:DE:85:F4:08:A2:DE:A7:A0:32:40:45:2D:23:D4:43:27:74:77
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KPfehfQIot6noDJARS0j1EMndHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.20.0/22
84.32.48.0-84.32.59.255
84.32.64.0/21
88.216.180.0/22
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f6:17:cf:7e:96:d4:e0:34:4d:d6:50:c5:b2:ef:bf:7d:c9:
ef:dc:d0:2b:2d:a0:60:88:e1:87:b8:5d:74:29:8a:9a:da:9a:
f0:a3:27:dd:1c:20:e4:ac:71:05:b8:84:c3:d1:91:6d:f3:d2:
5e:ac:18:34:db:b2:c9:1a:93:ad:27:c6:d3:01:4a:83:1a:e9:
6a:d4:31:9f:51:4b:3a:1f:dc:7b:b5:d4:d2:c8:67:19:a0:d1:
b6:b8:3a:46:23:17:08:95:77:b5:19:c9:71:84:d0:2c:0f:8f:
b5:29:9f:02:69:07:a7:be:5a:d8:9d:1e:e1:15:c4:9c:72:47:
75:42:72:9a:b3:84:fb:d4:6e:6f:19:47:e3:23:0d:74:f0:23:
43:b7:03:00:0e:c3:8c:ea:53:00:78:3a:b9:1c:62:98:b7:69:
82:e3:18:2a:e3:e1:e2:b7:0c:99:eb:e2:48:fb:4e:d6:ce:24:
13:a5:01:27:6b:b7:8a:29:b8:f2:f6:63:df:ec:92:4a:c7:4b:
af:24:70:f9:34:7f:98:83:b9:e0:e0:dc:37:f9:15:fd:3d:9a:
1b:eb:e9:c9:27:a2:07:f6:74:a4:67:0d:46:34:82:61:b9:fb:
46:4a:25:e0:70:0e:c8:0f:ff:68:2a:32:26:6a:4d:b9:69:44:
15:c3:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org