Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Qg4bSMqVAzqF_WQnl3RPYIpxFqY.roa
File: Qg4bSMqVAzqF_WQnl3RPYIpxFqY.roa (raw, json)
Hash identifier: EMgoE0jY4l5j65gMNvNvPdTM8R3L7MnOYbDQfoIZYLo=
Subject key identifier: 42:0E:1B:48:CA:95:03:3A:85:FD:64:27:97:74:4F:60:8A:71:16:A6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018446A75106A463377EFE7C5F9D8D5FFD34
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Qg4bSMqVAzqF_WQnl3RPYIpxFqY.roa
Signing time: Sat 05 Nov 2022 07:18:01 +0000
ROA not before: Sat 05 Nov 2022 07:18:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150303
IP address blocks: 84.32.61.0/24 maxlen: 24
84.32.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:a7:51:06:a4:63:37:7e:fe:7c:5f:9d:8d:5f:fd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 5 07:18:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=420e1b48ca95033a85fd642797744f608a7116a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:82:2b:e0:96:d3:b9:58:77:25:d1:3d:ea:
fa:c4:90:1c:62:48:bc:07:02:c2:9e:66:ed:2a:2f:
56:b2:e8:c2:1c:f1:38:e3:4e:3d:db:da:39:5d:07:
7d:38:04:ea:d7:7f:28:bd:e4:90:3d:82:08:a1:a1:
0c:a1:7f:11:42:15:fa:7a:3c:17:b8:c0:b6:f0:8b:
ec:4d:80:c4:15:7e:e0:1b:33:01:0f:03:8d:2d:84:
e4:3d:85:a0:78:7e:7c:ce:b8:82:b9:26:c8:94:15:
0d:4e:b2:0b:64:e6:06:01:18:d6:de:1e:15:b5:dd:
c0:a7:3f:07:02:59:93:2d:74:eb:c9:95:e0:09:c5:
11:f5:2c:33:0a:c1:42:25:5a:34:2f:d9:3e:85:9b:
ab:7a:de:0a:5a:90:1d:8e:3d:dd:4e:be:c9:b4:64:
08:ce:ea:35:e1:d3:88:6d:fe:b7:35:1c:49:35:1e:
dd:0b:83:a3:47:1f:84:45:67:4f:16:ee:3f:27:42:
e1:88:2f:fc:e8:04:0c:09:3a:12:dd:6d:58:19:e0:
bc:18:63:90:d3:a1:8b:3d:ed:d9:58:46:15:ab:e4:
f4:93:d5:d9:ec:ab:69:ff:cf:1b:64:48:f3:ab:08:
a1:62:a2:50:ac:dc:f0:b3:67:1e:7d:aa:5b:af:c7:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:1B:48:CA:95:03:3A:85:FD:64:27:97:74:4F:60:8A:71:16:A6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Qg4bSMqVAzqF_WQnl3RPYIpxFqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.61.0/24
84.32.78.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f6:0f:d3:77:1c:00:66:f1:29:2a:06:6a:5e:12:06:3d:95:
4b:68:dd:df:b9:f6:70:10:42:dc:91:e4:9f:0e:70:ba:b6:dc:
8d:eb:5e:37:2a:f4:9b:15:cd:5a:d4:47:9d:7e:e0:46:bf:4f:
f6:53:b7:19:34:b3:b4:ef:69:ab:7c:f7:48:5e:f1:db:65:e8:
8c:11:91:cc:a0:56:ca:37:e7:55:3d:0c:61:3a:05:4e:8b:f4:
b7:9f:f6:33:f1:2b:f5:3d:53:72:d3:fa:f4:ca:b2:fe:1e:6d:
36:92:3f:39:f8:be:38:d0:7b:bd:6f:25:88:57:8a:56:d0:6d:
b4:ef:5d:c3:25:d8:5b:48:2d:85:24:ac:f5:ef:e1:84:e3:1d:
07:f2:86:53:d6:1a:9f:4c:28:37:63:2f:60:1c:3c:2c:a0:d4:
6a:42:6d:7f:67:c3:0c:f9:d0:53:ec:08:74:92:13:1d:f5:7d:
dc:ed:77:2d:80:a3:20:19:fd:93:c1:ab:65:df:d2:c9:6b:c9:
28:69:07:bb:49:36:b2:65:14:7a:99:fc:18:65:fe:4f:93:a3:
c3:b5:80:28:2e:cc:38:f3:d7:98:ae:0d:7d:a9:d6:ae:63:ac:
a0:59:9e:2b:d7:6d:13:87:51:03:af:86:14:e7:32:49:98:e9:
8b:ed:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org