Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OZy30USQmCVb9Rzj0R5USmjZcSw.roa
File: OZy30USQmCVb9Rzj0R5USmjZcSw.roa (raw, json)
Hash identifier: LZRofpwoaLbWPX49VD6lY/1JbMJ4FqQg5On8J6pkvYo=
Subject key identifier: 39:9C:B7:D1:44:90:98:25:5B:F5:1C:E3:D1:1E:54:4A:68:D9:71:2C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018502593D1B9E4550EBF956997E16681BA1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OZy30USQmCVb9Rzj0R5USmjZcSw.roa
Signing time: Sun 11 Dec 2022 18:01:20 +0000
ROA not before: Sun 11 Dec 2022 18:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.91.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:02:59:3d:1b:9e:45:50:eb:f9:56:99:7e:16:68:1b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 11 18:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=399cb7d1449098255bf51ce3d11e544a68d9712c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:dd:76:33:aa:7d:03:c1:bc:18:82:de:51:
da:34:28:2d:b3:42:99:c3:fa:e7:da:5c:48:91:e0:
60:27:dc:3a:22:9f:d8:36:ea:5d:66:1a:ef:c7:fa:
83:6b:8a:c2:02:5e:8e:68:bf:cc:7e:35:e7:32:49:
bd:e7:c1:1e:51:c2:e3:0b:9c:b6:ce:12:93:71:8e:
35:db:be:a1:8c:b7:13:01:3a:02:6a:f0:f9:66:b4:
63:95:26:bd:2e:98:e2:b3:f8:de:e1:7e:59:79:ab:
ef:33:1e:4b:35:eb:58:47:1a:31:c6:92:b7:1d:2c:
20:d3:14:33:ac:50:2e:ce:bb:fc:30:93:90:6d:ed:
35:e7:d3:7a:53:90:26:94:6a:e4:1a:2c:de:4e:0a:
c6:11:9f:be:19:ae:9b:43:68:d3:f0:be:48:44:ed:
a2:a7:00:d9:e6:38:f0:8f:cd:50:6f:b0:60:e5:24:
05:cd:6a:b7:8b:cb:df:f1:bc:a8:bf:b3:07:63:6f:
13:62:98:f8:83:68:b1:b2:2a:f4:30:de:bc:da:a1:
6b:85:bd:ec:9d:9d:08:f6:07:a7:df:9a:07:d2:a2:
12:bc:53:e3:f8:55:8d:cf:12:8d:d7:82:0a:1b:d4:
ee:ab:e9:21:b6:f0:b6:c1:65:03:15:58:6d:98:e0:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9C:B7:D1:44:90:98:25:5B:F5:1C:E3:D1:1E:54:4A:68:D9:71:2C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OZy30USQmCVb9Rzj0R5USmjZcSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.57.0/24
84.32.67.0/24
84.32.85.0/24
84.32.91.0/24
88.216.38.0/23
88.216.93.0/24
88.216.101.0/24
88.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
59:99:f9:8b:c4:87:43:f7:37:16:4d:fd:39:fe:60:3c:36:79:
21:b4:a2:ae:70:c7:38:7b:21:cf:54:35:04:0f:51:e3:b3:3f:
54:9c:44:35:b3:a2:73:e9:34:29:69:a8:07:9e:9c:fa:25:0e:
fa:1c:0f:4b:bd:eb:49:3e:f2:40:21:76:7b:76:a7:72:e4:ff:
a6:b5:b5:6a:57:5f:af:df:9e:27:8e:4d:45:1d:7f:a2:d6:7a:
68:a8:19:a6:4d:60:34:68:c1:c1:ef:a1:6f:45:e8:3d:ca:d7:
7c:68:b3:00:e9:68:98:fe:27:fb:a4:ba:dd:eb:4a:8d:23:a5:
f1:38:18:aa:a4:73:c1:b7:98:e3:6e:fd:9c:8e:c0:63:1e:40:
16:94:07:69:6d:c8:e8:54:d6:a8:71:f9:fc:4b:b9:1f:37:a3:
a4:f8:fe:7a:91:0e:a3:72:b9:ba:17:d7:1d:29:ea:39:e0:26:
74:fa:67:0f:ca:c4:30:2a:bb:c2:7c:31:a8:a8:ff:56:51:fc:
fd:7f:01:a7:7c:23:c2:d3:08:b3:39:d1:17:2c:b5:47:b7:c0:
be:49:3f:ea:00:a8:20:39:7a:cc:e1:79:a8:cd:94:ef:ee:1d:
1d:f7:15:80:43:d4:bc:e5:81:f5:61:2c:ce:89:9a:4f:ca:84:
dc:06:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org