Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UrJKVhfna87kiIHYYmbwvKFiCZg.roa
File: UrJKVhfna87kiIHYYmbwvKFiCZg.roa (raw, json)
Hash identifier: kQaeAkU5gK/34agK6FfRAv6Dd7cNYn9Ut2IIfAbPI8g=
Subject key identifier: 52:B2:4A:56:17:E7:6B:CE:E4:88:81:D8:62:66:F0:BC:A1:62:09:98
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018412F6C1F631A3EDBFDD90A76FBBF68A17
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UrJKVhfna87kiIHYYmbwvKFiCZg.roa
Signing time: Wed 26 Oct 2022 06:24:32 +0000
ROA not before: Wed 26 Oct 2022 06:24:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
84.32.41.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:f6:c1:f6:31:a3:ed:bf:dd:90:a7:6f:bb:f6:8a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 26 06:24:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b24a5617e76bcee48881d86266f0bca1620998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:71:1c:89:b5:08:d2:a8:a5:4f:0f:36:6f:
f7:18:70:27:79:d6:f0:b8:fa:1a:0d:5c:e8:f2:bc:
f8:93:5b:2a:87:b4:21:4f:e1:c3:1d:d9:1c:dd:2c:
24:b9:37:be:9e:0a:cb:72:c9:bd:8f:4e:48:9f:da:
c1:63:22:57:ea:73:05:e3:99:4d:83:d4:e1:e0:46:
ba:1e:f3:d8:48:cf:9a:43:24:c3:ad:18:59:f5:2a:
e3:1e:ba:72:db:0a:32:5d:4b:8f:f8:ea:75:65:84:
b9:23:f1:b9:1a:fc:75:65:a2:2a:dc:dc:a1:75:5b:
57:12:50:00:3c:ba:dd:df:bf:45:3f:90:12:f4:5d:
eb:ae:15:3b:40:32:0a:18:85:a0:16:40:d9:a3:68:
23:6d:0d:7a:0b:f1:df:f3:7a:a5:54:d9:5b:15:a8:
53:9d:ea:5b:ef:69:c2:d8:e7:44:7d:40:bd:12:08:
37:c2:6e:f1:47:04:8d:fb:09:64:ec:9c:1e:99:44:
b7:6f:95:4f:62:e6:bb:4c:d3:f5:c7:d1:9c:14:36:
9d:08:55:d7:dd:29:b1:d7:06:52:92:26:a1:46:84:
9f:d5:38:66:e8:8b:28:a2:9f:76:0a:e2:43:f1:22:
39:0a:c8:54:5c:00:d9:81:68:3a:42:97:6d:ff:c1:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:4A:56:17:E7:6B:CE:E4:88:81:D8:62:66:F0:BC:A1:62:09:98
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UrJKVhfna87kiIHYYmbwvKFiCZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.41.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.93.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
09:56:8a:14:1b:4e:3d:fd:86:5a:6c:b7:e3:0c:e5:6c:57:d9:
9b:ef:24:ca:86:e4:01:8d:61:d4:e7:37:71:e4:12:d3:85:dc:
8f:bf:78:6b:ba:51:9c:8e:90:77:e2:b5:6c:70:4f:ef:37:4a:
32:f5:2d:f5:45:bd:6f:ce:d4:a7:28:72:86:fb:3d:d5:dd:76:
40:88:29:bc:ee:1f:f0:4c:79:a0:eb:c8:0a:4b:61:d2:74:4c:
28:c1:91:56:f6:6f:3a:3c:8b:89:80:da:80:b5:00:47:7e:a6:
c1:6c:a1:0b:45:85:89:7c:7b:1a:59:ef:78:10:3d:f8:5b:48:
e4:9a:59:d4:7f:25:31:aa:f3:b3:b9:62:3e:d4:47:50:7a:f7:
6a:29:8d:cb:61:9c:3f:09:3f:53:41:74:fe:ee:96:11:23:bd:
73:eb:c7:a9:d3:ad:15:b2:d6:7a:08:51:29:ed:4a:80:da:18:
9d:10:b1:0d:07:b9:b0:a2:d4:26:c4:13:8f:ba:28:9d:32:a9:
b4:88:c3:e1:e1:81:12:fc:31:30:a8:11:24:83:2b:db:ec:9f:
82:7e:e7:ca:cc:55:87:54:ce:b4:14:3b:73:a5:e1:53:fd:05:
0d:57:34:59:97:7a:1d:c0:ee:f6:ec:cb:3d:be:d5:f1:4b:9d:
4d:99:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org