Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O6j127RcD_f2gfTkU0v2kPPFo7Q.roa
File: O6j127RcD_f2gfTkU0v2kPPFo7Q.roa (raw, json)
Hash identifier: 37tuUMVQElVD3WpqTaU9HhZBgK7U+0+n3XBlmB1dKxE=
Subject key identifier: 3B:A8:F5:DB:B4:5C:0F:F7:F6:81:F4:E4:53:4B:F6:90:F3:C5:A3:B4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0181EC100BD62606303012AD994BD0D6B836
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O6j127RcD_f2gfTkU0v2kPPFo7Q.roa
Signing time: Mon 11 Jul 2022 07:01:23 +0000
ROA not before: Mon 11 Jul 2022 07:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 84.32.83.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:10:0b:d6:26:06:30:30:12:ad:99:4b:d0:d6:b8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 11 07:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ba8f5dbb45c0ff7f681f4e4534bf690f3c5a3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:4e:32:2c:b1:33:b1:b1:35:83:be:f7:d7:
df:d9:f8:8e:34:3b:8d:de:1f:ea:06:1f:00:2d:ac:
af:b4:78:d4:0c:1b:e3:09:80:a8:2a:79:c8:2d:0b:
a8:6f:82:64:71:58:31:a5:8e:bf:c0:d8:25:db:6b:
e8:08:6f:b0:10:fd:b5:cb:c3:ad:00:ac:2b:60:d1:
4b:8b:b7:fd:1e:5f:8a:47:dd:6d:b7:09:40:9f:34:
82:f2:99:5b:51:20:3f:be:3a:83:6e:65:ae:11:f3:
38:b0:f8:23:4d:de:0e:6e:18:ca:d3:73:43:de:96:
f9:fc:4a:d1:5e:72:1b:43:85:c0:10:63:7c:c6:36:
f2:65:3e:c4:91:33:71:92:8c:89:97:ef:0a:c6:02:
d3:f3:29:e5:8c:19:e2:22:5f:05:0d:d2:4c:82:6f:
7f:95:d4:ce:60:46:ac:54:d8:5a:e6:25:b9:b3:4d:
2a:f0:7d:c6:1c:56:7d:4a:de:ef:9c:ed:83:24:16:
a6:e1:e6:c7:ac:84:21:51:e2:e9:cd:23:ef:fd:2c:
20:4f:11:0a:bf:4d:32:78:6c:f8:69:29:0a:6a:c2:
ba:f1:99:5e:d1:ce:11:23:00:79:26:9e:cd:84:90:
82:2a:04:d5:33:fb:8a:f9:ed:61:16:9b:57:65:29:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:F5:DB:B4:5C:0F:F7:F6:81:F4:E4:53:4B:F6:90:F3:C5:A3:B4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O6j127RcD_f2gfTkU0v2kPPFo7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.83.0/24
88.216.33.0/24
88.216.224.0/22
Signature Algorithm: sha256WithRSAEncryption
69:95:4d:c7:15:9d:5a:72:1c:7f:c9:e0:0f:15:9d:11:56:75:
36:49:d5:35:e5:56:b7:54:44:d1:14:79:48:d1:1a:fc:70:a6:
05:0a:94:88:ff:14:2b:64:05:10:bc:21:15:9b:5a:51:9f:8d:
8a:d9:38:11:e0:e7:65:95:81:9b:54:bf:cb:38:e1:71:d9:e6:
f4:97:2a:6f:5f:2c:6d:7d:e2:85:37:ad:5c:25:78:1b:1e:ed:
8a:c4:74:94:61:6f:e7:ca:23:a1:94:6a:5e:d9:7e:c1:fb:e8:
16:12:2a:60:4e:5c:f1:bb:37:20:3d:91:7d:50:1f:fe:20:ba:
50:cf:8e:c8:f2:49:fb:65:33:14:fe:16:7b:e9:1a:97:d9:d5:
29:18:8f:9a:15:b0:8f:17:ce:fc:3e:61:b8:48:ee:2a:5f:28:
8e:89:8a:28:1e:8d:5d:95:d7:53:77:d9:ce:63:cc:31:69:64:
2c:b0:c8:d2:71:00:d8:32:71:10:16:4f:ae:82:ad:ef:d2:b5:
31:07:6c:c6:cc:a7:0d:8e:24:a5:49:a3:b1:79:6d:e9:98:e1:
6f:bd:94:11:0f:10:d4:3e:c0:5a:c6:f2:d6:80:b6:5f:29:c7:
c1:31:e6:ba:72:14:f2:bb:57:1a:d7:af:a1:b7:59:83:36:23:
a7:7c:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org