Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L2fJGpoOVsaTYP656j5BXWE_1Xg.roa
File: L2fJGpoOVsaTYP656j5BXWE_1Xg.roa (raw, json)
Hash identifier: qWVjsVX0zxBKOPCCInH3Jv2TsjQb5G4t7bIfpqiTP40=
Subject key identifier: 2F:67:C9:1A:9A:0E:56:C6:93:60:FE:B9:EA:3E:41:5D:61:3F:D5:78
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01846657D617310A5A79661A9C4BE0FC4B85
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L2fJGpoOVsaTYP656j5BXWE_1Xg.roa
Signing time: Fri 11 Nov 2022 10:59:03 +0000
ROA not before: Fri 11 Nov 2022 10:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 84.32.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:57:d6:17:31:0a:5a:79:66:1a:9c:4b:e0:fc:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 11 10:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f67c91a9a0e56c69360feb9ea3e415d613fd578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:60:23:c5:d6:74:cf:27:ec:f0:1f:27:ef:
6a:bc:c6:15:ec:21:eb:8a:05:e0:2a:b7:1c:16:af:
82:2f:a2:1f:14:77:8d:73:f0:e1:c0:fd:9b:b5:32:
6e:c6:53:1f:96:f3:04:70:b0:79:79:62:49:73:e4:
aa:ad:e3:74:0f:1f:ea:61:36:fa:2f:97:2b:f4:c4:
06:9b:67:c2:ca:65:52:95:02:8a:40:c8:38:c2:97:
cf:4b:05:ec:b2:96:35:d0:e3:94:87:8e:32:4e:51:
33:49:91:76:e6:c8:f5:93:77:8f:cb:6f:22:dd:89:
27:99:e3:4c:55:fa:8c:4d:fe:8e:15:a6:f5:a5:07:
5c:14:8f:0f:e0:22:71:ca:1c:a6:12:be:8c:06:7b:
53:f7:02:1c:31:2b:80:20:69:7a:bc:b4:cc:11:c7:
e2:1e:18:a1:05:4c:0d:a2:e1:3f:11:65:1c:95:e0:
42:e9:d6:57:34:72:95:08:e4:10:3b:6f:19:52:c8:
e1:bd:ea:0d:8c:36:5d:ff:ff:a7:64:57:a3:d2:d7:
ef:25:d8:69:61:df:a4:dc:aa:bd:32:83:11:ac:3e:
6b:bc:39:03:43:5f:ad:29:8a:45:9a:99:17:5b:31:
08:52:c4:41:42:76:64:7b:a5:bb:db:2b:ef:5b:20:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:C9:1A:9A:0E:56:C6:93:60:FE:B9:EA:3E:41:5D:61:3F:D5:78
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L2fJGpoOVsaTYP656j5BXWE_1Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.216.0/22
Signature Algorithm: sha256WithRSAEncryption
23:a3:a1:63:4d:3d:fd:55:c9:74:15:89:34:48:df:25:23:31:
15:08:95:4f:a8:cc:d2:c6:c6:e5:b0:94:ea:71:08:ff:e8:8b:
7c:a0:74:d9:cb:be:15:a6:7f:1a:31:90:5d:fa:49:fb:88:a1:
4d:bf:f5:4a:72:5c:ef:6e:ca:44:2e:07:10:5c:ef:c7:75:e0:
af:39:6f:fa:78:b2:d0:7d:84:1b:86:d4:0a:a4:71:40:53:2b:
cc:91:26:ad:98:50:5e:d6:3b:bd:c0:23:87:5a:73:dd:80:29:
97:44:25:11:df:cb:69:d9:e8:c2:8e:93:d1:1a:35:75:1b:71:
24:af:64:08:85:57:22:09:71:7e:da:d9:10:8c:65:f0:7c:eb:
72:5a:d8:d6:fc:17:97:09:92:b6:50:ca:91:63:bd:59:25:11:
0b:ec:6d:f3:c6:f3:89:2e:61:86:e2:bd:65:c2:e3:af:9d:14:
b2:60:ca:c3:db:e3:6f:21:0a:ba:cf:7f:04:15:ac:9c:4e:65:
6b:a5:50:5f:6a:6a:11:5c:98:fb:ca:67:7a:0c:f4:46:a1:de:
ba:e3:38:2c:4c:bb:3a:9e:a6:e7:6a:f5:94:13:17:73:cf:8c:
c1:c2:ba:cc:ad:95:4f:19:e1:e5:78:bb:2b:a1:15:c2:97:51:
c7:a2:9d:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRmV9YXMQpaeWYanEvg/EuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTExMTA1OTAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjY3YzkxYTlhMGU1NmM2OTM2MGZlYjllYTNlNDE1ZDYxM2ZkNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWZgI8XWdM8n7PAfJ+9qvMYV7CHr
igXgKrccFq+CL6IfFHeNc/DhwP2btTJuxlMflvMEcLB5eWJJc+SqreN0Dx/qYTb6
L5cr9MQGm2fCymVSlQKKQMg4wpfPSwXsspY10OOUh44yTlEzSZF25sj1k3ePy28i
3YknmeNMVfqMTf6OFab1pQdcFI8P4CJxyhymEr6MBntT9wIcMSuAIGl6vLTMEcfi
HhihBUwNouE/EWUcleBC6dZXNHKVCOQQO28ZUsjhveoNjDZd//+nZFej0tfvJdhp
Yd+k3Kq9MoMRrD5rvDkDQ1+tKYpFmpkXWzEIUsRBQnZke6W72yvvWyC+OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9nyRqaDlbGk2D+ueo+QV1hP9V4MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvTDJmSkdwb09Wc2FUWVA2NTZqNUJYV0VfMVhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVCDYMA0G
CSqGSIb3DQEBCwUAA4IBAQAjo6FjTT39Vcl0FYk0SN8lIzEVCJVPqMzSxsblsJTq
cQj/6It8oHTZy74Vpn8aMZBd+kn7iKFNv/VKclzvbspELgcQXO/HdeCvOW/6eLLQ
fYQbhtQKpHFAUyvMkSatmFBe1ju9wCOHWnPdgCmXRCUR38tp2ejCjpPRGjV1G3Ek
r2QIhVciCXF+2tkQjGXwfOtyWtjW/BeXCZK2UMqRY71ZJREL7G3zxvOJLmGG4r1l
wuOvnRSyYMrD2+NvIQq6z38EFaycTmVrpVBfamoRXJj7ymd6DPRGod664zgsTLs6
nqbnavWUExdzz4zBwrrMrZVPGeHleLsroRXCl1HHop0K
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org