Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NyIRZfFN4gwhpHMXD_scBev1WZY.roa
File: NyIRZfFN4gwhpHMXD_scBev1WZY.roa (raw, json)
Hash identifier: d9F5VbENe8gaW9MAu4WuK6xTcUc0iiwoZcUdngfUU/M=
Subject key identifier: 37:22:11:65:F1:4D:E2:0C:21:A4:73:17:0F:FB:1C:05:EB:F5:59:96
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: F865C5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NyIRZfFN4gwhpHMXD_scBev1WZY.roa
Signing time: Fri 06 May 2022 12:47:09 +0000
ROA not before: Fri 06 May 2022 12:47:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.52.0/22 maxlen: 24
84.32.56.0/22 maxlen: 24
84.32.60.0/22 maxlen: 24
84.32.64.0/22 maxlen: 24
84.32.68.0/22 maxlen: 24
88.216.208.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16278981 (0xf865c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 6 12:47:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37221165f14de20c21a473170ffb1c05ebf55996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:0e:a5:71:9d:f2:3f:b3:12:ea:ed:43:8d:
e7:10:03:03:d7:60:fb:96:f1:dc:d4:76:20:11:d3:
4a:af:01:bf:3d:d2:7e:19:8f:55:f4:cb:a6:68:7c:
51:d1:d0:15:3f:4c:b2:1d:32:7d:5a:66:b0:5c:79:
b8:56:9a:da:aa:35:e5:68:31:3a:db:19:07:81:5a:
9a:da:27:3e:36:ce:40:70:ce:0a:97:f8:20:dc:e5:
ec:f7:14:66:56:a5:b7:21:82:31:c2:ea:d5:5a:92:
6a:ce:5c:88:d1:7e:94:4d:c0:e1:3b:e6:83:27:99:
22:8a:7e:5b:b5:f6:d0:08:ce:b2:34:0c:c8:3f:10:
0c:97:17:ce:35:44:b6:8f:93:33:89:7a:95:f7:37:
22:a3:e4:5f:f8:df:38:20:32:8a:d3:cf:61:23:0c:
61:42:1e:d8:ad:ad:b6:3a:e6:86:84:45:7a:d3:01:
75:b5:41:06:23:29:96:8d:39:c5:d0:0c:a2:78:44:
22:5c:c7:be:a9:5e:c2:89:7f:6f:8c:5b:3d:9e:bc:
92:20:35:cd:d8:31:49:3d:fe:d7:60:05:df:d7:42:
48:c1:89:b7:24:93:b6:3e:ae:17:07:d0:49:9e:60:
de:86:06:94:e8:92:e2:bc:b0:76:8f:32:a3:77:6d:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:22:11:65:F1:4D:E2:0C:21:A4:73:17:0F:FB:1C:05:EB:F5:59:96
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NyIRZfFN4gwhpHMXD_scBev1WZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.20.0/22
84.32.48.0-84.32.71.255
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2a:c8:73:4c:2e:07:fb:fc:22:17:41:27:29:c9:8d:bf:c6:
ac:ed:e8:28:96:0d:7c:5c:43:58:01:c1:14:be:88:1a:78:8c:
12:ba:ff:19:12:6c:ad:c7:c9:3b:2f:05:ff:f8:ef:36:f4:e0:
81:0d:0e:5f:59:58:76:fa:7a:01:8d:78:85:dd:22:7a:51:24:
fb:fd:99:70:bc:73:54:c3:5d:b0:de:19:aa:30:8b:b9:9d:c5:
75:37:16:e3:1d:53:ea:ba:57:bb:1b:a4:d2:c3:06:c6:79:40:
1f:27:4b:64:3c:c3:c3:d8:af:b4:ec:68:75:27:be:2c:fe:7f:
31:18:24:09:d0:5f:89:e0:64:20:11:dd:7a:65:a9:19:d7:85:
fc:39:3d:f1:2c:0e:63:be:2e:b4:58:41:fa:c8:d9:7e:9e:4f:
f6:c7:a9:37:79:46:e6:00:bc:c9:4e:22:49:df:ef:76:67:9e:
6d:dc:b2:c5:65:ae:95:10:da:ac:cd:65:14:79:ac:ff:34:13:
7a:77:a1:75:6a:a5:30:0f:f4:99:e4:29:51:be:0b:79:41:ac:
c1:fd:88:7b:91:39:e2:c8:8d:f9:12:e8:a1:70:13:4a:a4:ec:
58:49:78:0f:f1:1e:d9:eb:a9:b9:84:8a:ec:4f:c3:57:10:ea:
78:d1:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org