Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KfWt2UdT213o7eK5yiUnSnqWw1Q.roa
File: KfWt2UdT213o7eK5yiUnSnqWw1Q.roa (raw, json)
Hash identifier: cAbh1dR+HxGA+f7rfa+Bvzr+ZvBwtdezGwhmNdxCK60=
Subject key identifier: 29:F5:AD:D9:47:53:DB:5D:E8:ED:E2:B9:CA:25:27:4A:7A:96:C3:54
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184D1FEB2443FD29B6FEAD3C0FBBB07D7F0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KfWt2UdT213o7eK5yiUnSnqWw1Q.roa
Signing time: Fri 02 Dec 2022 08:40:40 +0000
ROA not before: Fri 02 Dec 2022 08:40:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.91.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:fe:b2:44:3f:d2:9b:6f:ea:d3:c0:fb:bb:07:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 2 08:40:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29f5add94753db5de8ede2b9ca25274a7a96c354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:69:b8:03:19:0a:dc:bb:46:06:b0:90:e6:
53:01:56:bf:3a:58:1d:0a:93:81:e8:ca:a6:51:28:
18:73:8d:8e:0a:a4:b8:69:54:a1:77:32:f5:c5:3a:
df:6d:8d:01:09:64:3b:e6:f6:5a:9d:d8:72:e2:f0:
69:6c:59:0e:b1:13:32:ae:e9:19:1d:d9:88:f4:83:
49:bd:32:3a:4a:0b:10:5b:16:1d:07:d0:2b:37:92:
4b:1e:dc:28:55:a1:2d:46:c2:e1:76:d0:6f:60:f3:
3d:7a:57:16:d7:fc:58:5a:8a:27:d9:73:31:14:9b:
cd:62:5e:dd:4a:e7:de:c2:97:ee:86:1d:c6:10:ac:
77:7c:08:e7:a3:b7:9b:b7:82:a5:3b:73:c0:29:dc:
97:7b:f0:b3:95:99:db:42:cd:dc:48:a5:58:62:8f:
ba:8e:30:29:6e:3c:e0:9a:16:97:e9:0a:33:8e:84:
45:f4:94:34:11:5b:dd:7e:7f:8e:88:ab:57:1b:3f:
fe:b7:2e:75:d3:07:d9:9c:a1:fb:e0:38:a2:c9:52:
0f:54:76:9f:16:0a:92:d2:88:97:f7:b3:3d:94:7f:
ae:c2:3e:c5:77:78:5f:47:3a:02:51:8a:54:1f:69:
05:b0:f0:f7:28:1d:68:e1:7f:47:66:81:6c:88:e4:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:AD:D9:47:53:DB:5D:E8:ED:E2:B9:CA:25:27:4A:7A:96:C3:54
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KfWt2UdT213o7eK5yiUnSnqWw1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.57.0/24
84.32.67.0/24
84.32.85.0/24
84.32.91.0/24
84.32.241.0/24
88.216.38.0/23
88.216.101.0/24
88.216.130.0/24
88.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d1:38:2d:f1:41:2e:6c:6a:e2:93:ca:fb:62:02:28:e9:e1:
ed:e9:f5:94:f7:44:eb:c2:9d:a4:3e:27:ab:12:09:b2:da:11:
60:c7:00:b9:8a:3f:7c:dc:21:27:0a:cd:9f:e8:e3:76:fc:1e:
68:45:44:86:18:d3:0e:1c:5d:9a:0e:c1:99:8c:78:b3:4f:5c:
e0:ef:41:d2:f4:b0:68:f2:08:80:45:69:5b:93:0b:65:1b:1e:
52:cd:36:9a:be:5a:16:a2:df:2e:0b:72:ec:f9:85:17:db:cc:
b3:ae:49:66:5b:a6:90:d4:df:85:5b:b4:a2:2c:a3:42:b5:65:
7a:20:28:8a:be:ab:a6:cf:66:29:7f:b1:08:95:07:3c:62:a7:
c1:b4:91:7e:3d:a4:a9:36:e9:80:0f:aa:31:33:d9:79:4e:ad:
1a:f5:3c:f0:96:f8:e0:ac:a5:b2:68:a4:2e:ad:8c:19:67:11:
f1:3c:43:59:ff:2f:23:f0:05:ae:e8:4e:87:25:06:17:69:1c:
36:88:a6:7b:7d:8d:d0:11:d5:e5:d5:a2:77:b3:5e:68:e4:e7:
d9:f0:dc:cb:25:8c:64:3f:93:a4:66:e3:3c:54:fd:23:13:8f:
bf:5b:38:d0:8e:80:3f:c6:e8:da:e0:33:ad:ed:a8:33:dd:2a:
c4:86:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org