Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QIJoLWmeZe4olsMLJi73XH3XtLE.roa
File: QIJoLWmeZe4olsMLJi73XH3XtLE.roa (raw, json)
Hash identifier: 8nC5B9JbE2wi4ntUeLthr9OWqMEcV6PPTmzqNgzyT3s=
Subject key identifier: 40:82:68:2D:69:9E:65:EE:28:96:C3:0B:26:2E:F7:5C:7D:D7:B4:B1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183FB6FCDEEA01444B10E803B118A994945
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QIJoLWmeZe4olsMLJi73XH3XtLE.roa
Signing time: Fri 21 Oct 2022 16:45:51 +0000
ROA not before: Fri 21 Oct 2022 16:45:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:6f:cd:ee:a0:14:44:b1:0e:80:3b:11:8a:99:49:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 21 16:45:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4082682d699e65ee2896c30b262ef75c7dd7b4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0f:00:5a:2f:8f:9d:7b:e2:46:7d:3b:e2:9e:
57:0d:cf:5c:9a:93:e1:42:f5:23:39:34:95:7e:33:
fd:1b:6f:fa:63:bf:64:43:84:38:84:11:ca:34:8d:
1a:5c:ed:cc:f1:98:be:30:e8:72:4a:46:e3:81:1b:
55:bc:ee:22:f1:b6:e8:68:7d:59:fa:03:66:34:f5:
d0:38:3a:c5:07:ab:6d:4d:80:51:8a:1d:51:8f:66:
fd:ce:11:d2:68:7d:bf:10:d9:61:75:91:f4:8a:08:
91:6f:c0:82:c4:23:86:49:41:04:73:d3:39:3d:df:
86:54:4e:27:ed:07:5b:f8:bc:d7:50:d3:d6:8b:9c:
88:d3:07:c6:08:e2:69:f5:0b:9e:0b:b8:1b:2d:ad:
32:3e:ef:79:18:03:d7:b4:fb:15:51:d6:37:bc:5a:
c4:4d:16:3e:ad:e8:52:41:c9:50:c9:e2:c5:2a:fd:
9f:cc:2f:0a:d9:fa:3c:de:2d:90:e2:14:c7:b6:8c:
36:32:70:79:18:58:16:c3:27:b1:f1:7e:a3:51:90:
ec:79:e9:43:0a:89:ec:c4:ea:e8:bc:5a:26:83:2c:
a8:2f:a2:db:90:fb:b9:96:47:4e:81:b4:21:5a:51:
fb:54:9f:0e:e0:ec:cf:1e:32:0a:4c:d6:62:88:f3:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:68:2D:69:9E:65:EE:28:96:C3:0B:26:2E:F7:5C:7D:D7:B4:B1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QIJoLWmeZe4olsMLJi73XH3XtLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.50.0/24
84.32.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:28:ae:48:75:bf:8c:cf:bf:2a:2e:9e:16:c9:bb:9d:76:22:
ce:21:39:a0:a7:78:44:0b:fa:4a:5e:13:8a:1e:ab:9e:cc:ba:
09:c7:79:a2:a3:43:3a:cd:9c:58:2a:7c:5f:6b:4a:eb:0b:62:
b1:19:1b:8b:10:7e:6a:84:25:b9:f3:10:cb:d1:0d:b5:fc:59:
c4:8b:00:ea:f8:72:f3:82:d8:6c:71:6c:2b:af:4d:fd:66:65:
23:9e:9a:84:09:05:c9:c2:d2:38:89:2b:20:0f:e8:af:65:cd:
86:5b:61:0a:52:2f:2e:28:e7:c0:77:6f:67:a3:4f:f8:1b:93:
12:cf:be:a0:45:9e:b6:2c:ce:c7:f4:a3:27:e3:cf:77:4d:5d:
5d:b3:29:56:4d:d7:c5:4c:f8:10:a7:62:18:44:2c:61:4a:05:
ee:e6:43:ce:5f:c5:e8:83:0f:fb:6e:85:e2:fb:8b:39:99:e1:
8e:48:b5:d4:44:ba:2f:09:3f:b6:3a:01:27:6b:21:69:86:ac:
48:d9:34:6e:89:ca:ae:56:6b:a3:1f:a4:54:e7:3d:86:bb:a1:
50:c6:15:c5:b7:56:27:74:07:28:50:71:1d:e0:e0:3b:3f:ad:
13:55:6c:6e:fb:71:c5:5c:c7:26:3f:ce:b5:ff:7d:4b:22:4e:
1e:b1:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org