Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UtGo4dIt5cQZTjQjRWIG6KTRvAw.roa
File: UtGo4dIt5cQZTjQjRWIG6KTRvAw.roa (raw, json)
Hash identifier: Gc/Ys4f3HDoGJRxizGbnK2VFYrOjbKXnAPPN/HoItoE=
Subject key identifier: 52:D1:A8:E1:D2:2D:E5:C4:19:4E:34:23:45:62:06:E8:A4:D1:BC:0C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018517ACBF728C3F018AE61AB0F7B4986656
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UtGo4dIt5cQZTjQjRWIG6KTRvAw.roa
Signing time: Thu 15 Dec 2022 21:24:35 +0000
ROA not before: Thu 15 Dec 2022 21:24:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:ac:bf:72:8c:3f:01:8a:e6:1a:b0:f7:b4:98:66:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 15 21:24:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52d1a8e1d22de5c4194e3423456206e8a4d1bc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:6c:4b:86:df:d0:c1:b9:00:0f:a7:f0:47:
04:08:2e:2b:19:bc:1c:25:c0:7f:2d:1d:2f:f6:49:
0b:c0:7d:55:48:fd:0a:a9:eb:54:42:33:f7:69:de:
3d:59:0c:68:90:4f:70:ab:ea:a2:39:1d:bf:0a:58:
4d:c6:a9:05:87:9c:ed:92:96:cd:20:7f:57:3e:b5:
7d:41:9d:7c:b0:d1:9f:2f:a1:51:0f:f6:45:b0:3f:
21:68:64:f1:99:69:54:ef:68:3d:c3:6f:fb:cf:5a:
a6:2c:cd:03:66:7a:f1:ab:5d:b2:ba:b4:61:d4:4c:
e1:9c:c2:46:a2:b9:d9:31:3e:82:6f:4d:af:86:48:
59:70:a0:8a:27:05:3f:67:08:e3:99:35:af:ba:c8:
04:9b:ac:c3:90:a3:08:f7:b4:fc:ae:dc:b0:85:81:
03:9e:42:7d:1f:7d:f5:b2:6b:f3:c7:15:74:eb:6c:
7c:df:e1:06:3f:bf:46:d3:76:47:8a:59:f8:c7:2b:
9a:e3:0b:90:65:7c:f1:ab:b2:8b:65:a2:a4:f6:6e:
6d:b1:f3:2f:74:90:bf:41:1b:23:01:4b:35:b6:18:
83:60:c8:47:8d:b2:82:39:86:e2:85:7e:04:99:7d:
42:75:ae:c3:11:11:fa:c4:d1:b2:1f:b7:c8:42:6c:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:A8:E1:D2:2D:E5:C4:19:4E:34:23:45:62:06:E8:A4:D1:BC:0C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UtGo4dIt5cQZTjQjRWIG6KTRvAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.30.0/24
84.32.44.0/24
84.32.46.0/23
84.32.59.0-84.32.60.255
84.32.65.0-84.32.66.255
84.32.68.0/24
84.32.90.0/24
84.32.92.0/24
84.32.94.0/24
84.32.219.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.95.0/24
88.216.102.0/23
88.216.188.0/24
88.216.198.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:83:83:08:d6:74:50:ab:34:d7:20:3e:4e:54:c6:4d:f2:c0:
66:5d:66:de:fc:f9:9e:33:33:37:ff:25:23:33:47:8a:74:f7:
5c:ae:8a:62:7c:39:01:2a:a0:39:17:6c:ee:b8:5b:00:8c:c8:
49:82:58:d0:47:3b:b6:7b:29:f7:43:9b:40:fa:59:29:b2:c0:
71:c3:5c:e4:c7:c8:1d:26:9e:ec:db:7f:97:fe:68:6f:08:cb:
cd:22:d2:8a:3e:77:5a:da:a1:69:7b:28:73:e5:94:8b:17:d3:
87:9a:fd:e4:5d:39:d9:08:8c:90:14:b4:f2:4a:fd:02:2a:3b:
1c:50:99:b1:62:32:f1:56:ad:73:9b:b1:45:e3:80:4a:da:ba:
2d:6b:08:ef:08:81:4a:14:d7:0a:aa:a6:0e:5f:1f:84:77:11:
57:b9:db:fe:3c:55:e0:80:82:e7:9f:71:e7:4f:40:c8:44:20:
2d:3f:08:c0:b3:ae:24:b1:e2:29:fb:e9:93:e1:d5:9a:46:77:
f0:32:ab:b7:d7:3c:5b:cf:c6:be:f0:e5:50:1a:35:bc:ca:e2:
c5:26:92:b2:8f:27:3c:e2:36:95:c6:67:0d:ce:10:5b:86:5e:
0b:f2:60:28:9a:2c:db:0d:99:cb:05:e4:9f:8e:58:36:15:7a:
6c:22:bb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org