Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RGLNyvJAZ7ePZ6Yoo_wdf290C9M.roa
File: RGLNyvJAZ7ePZ6Yoo_wdf290C9M.roa (raw, json)
Hash identifier: mT6b6SbiLNQDijfUXyYQTAYcAbyCQdCBQ4B8Hk+zS/U=
Subject key identifier: 44:62:CD:CA:F2:40:67:B7:8F:67:A6:28:A3:FC:1D:7F:6F:74:0B:D3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 017631BD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RGLNyvJAZ7ePZ6Yoo_wdf290C9M.roa
Signing time: Tue 14 Jun 2022 11:32:44 +0000
ROA not before: Tue 14 Jun 2022 11:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49994
IP address blocks: 84.32.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24523197 (0x17631bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 14 11:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4462cdcaf24067b78f67a628a3fc1d7f6f740bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:32:1e:bd:f7:bf:08:6a:fa:cd:84:0f:7f:
de:fc:19:e7:8a:20:40:36:d6:c3:13:ba:f9:ca:7f:
81:03:d3:6a:29:48:05:99:82:e5:f9:d2:da:8b:01:
60:81:28:10:ee:60:a7:70:ee:b8:5c:f9:52:50:c1:
1b:cc:1f:c3:67:70:c0:55:b5:7d:bf:67:d6:b0:b4:
28:5f:06:d4:13:07:5d:4f:7f:59:e1:e4:21:0e:3e:
6e:e5:3f:04:db:e9:0c:b9:21:07:1a:db:f4:bd:e6:
73:00:28:e1:50:e9:1a:cf:0e:e6:6a:b3:a7:db:df:
8c:c7:2b:9e:17:e3:39:34:b5:7b:29:ee:7d:c4:ab:
c4:c6:a7:04:7e:cc:a4:f5:3d:1d:a2:04:ae:6e:a3:
c4:7c:60:a7:58:d7:4e:66:c6:0c:e8:75:86:13:f2:
35:0b:00:9c:b7:a6:a9:d6:86:f5:ac:60:b4:d2:11:
f0:86:47:91:e4:0c:f5:25:bd:aa:7a:3d:99:d0:c0:
29:f0:6b:43:d6:66:d9:dc:e9:f4:c9:8d:47:08:fa:
fd:42:4f:31:a9:47:6b:8f:41:2e:c3:0c:25:7e:ed:
7e:0a:4b:be:9a:9a:fe:27:e8:b8:c1:36:84:dd:ba:
60:1c:16:6a:76:45:89:59:13:ff:f2:42:f3:6f:15:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:62:CD:CA:F2:40:67:B7:8F:67:A6:28:A3:FC:1D:7F:6F:74:0B:D3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RGLNyvJAZ7ePZ6Yoo_wdf290C9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:54:7c:78:50:32:1b:80:ef:78:84:0e:45:a3:6e:65:b3:5f:
9e:47:cf:6b:41:52:af:9a:ba:4d:ab:38:8b:72:8d:fa:08:62:
e0:e5:bb:e5:c6:c5:bf:e0:ca:17:d3:3e:ff:37:19:8b:4c:1a:
69:78:c9:c9:27:2e:a9:78:2c:04:5b:ac:92:3f:8a:83:47:b7:
ee:ac:f0:5d:78:f2:38:12:76:81:b0:66:c7:13:ea:ee:9e:9d:
aa:30:23:49:97:77:b3:d4:d5:aa:79:57:2d:14:5e:2b:e8:f1:
c5:69:80:25:5d:54:0d:ab:d4:ea:5f:a2:e4:85:a5:5f:b1:73:
96:80:5b:d3:e0:ab:4b:10:30:65:bc:be:6c:41:99:09:34:79:
68:e7:9f:89:d3:7f:06:c9:9b:d3:d1:0f:72:cf:eb:6d:cb:3f:
bf:fd:4f:c5:a3:ce:ff:e2:42:d6:a2:0f:b1:d8:1a:ac:1b:84:
b2:a9:1a:14:19:c8:12:fb:f2:fd:4c:f4:92:e9:42:8e:27:bd:
95:5a:f1:88:df:bc:71:74:9f:8d:8d:ee:54:c2:9a:84:64:94:
85:8e:b1:b2:ea:7d:f3:92:2a:ef:37:43:e8:60:28:fe:3b:37:
15:c6:d1:38:93:17:21:0c:cb:a3:8f:ee:0f:72:95:b5:61:62:
e7:61:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org