Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VjZrbGgHae5iPNkfidlg0fa4la0.roa
File: VjZrbGgHae5iPNkfidlg0fa4la0.roa (raw, json)
Hash identifier: 3AjtS1OmiDfr3hlOnTyhA8xeCF3GA61BFR96dUHKF8o=
Subject key identifier: 56:36:6B:6C:68:07:69:EE:62:3C:D9:1F:89:D9:60:D1:F6:B8:95:AD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018517ACC0405607AA17CC185B81F47B41BF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VjZrbGgHae5iPNkfidlg0fa4la0.roa
Signing time: Thu 15 Dec 2022 21:24:35 +0000
ROA not before: Thu 15 Dec 2022 21:24:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 84.32.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:ac:c0:40:56:07:aa:17:cc:18:5b:81:f4:7b:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 15 21:24:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56366b6c680769ee623cd91f89d960d1f6b895ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:2b:2a:80:00:6e:79:8f:3a:a7:38:41:01:
d2:0b:fb:f0:5c:5c:5d:fe:68:05:e3:ba:fb:b9:a0:
69:0f:ad:a9:b7:9c:b2:2a:1d:c3:29:9e:65:65:f4:
f9:ac:b5:54:3f:5b:23:3e:7d:5f:c0:56:bd:4b:51:
cd:dc:fd:7a:68:f3:f2:71:3b:fe:46:66:98:ae:5b:
a9:c7:54:56:45:2d:aa:88:f9:f7:98:4f:49:83:a6:
fa:92:b8:59:5c:af:aa:48:b3:45:f1:a7:df:5d:c3:
f9:7d:1f:e4:43:6f:01:1d:b2:b4:1f:78:74:b6:26:
af:a3:f9:3b:76:84:04:b1:5d:64:92:6d:8f:f2:96:
b5:b7:ec:7e:a9:2c:d9:d8:06:e1:a1:7e:96:ad:43:
84:55:56:12:6b:07:2d:ee:8c:c9:e5:d9:81:0d:3e:
e3:20:3b:24:d4:77:7b:57:6a:13:d0:c2:0b:f6:4d:
0b:fe:1d:69:d4:89:b1:ab:55:b8:86:d3:88:72:86:
38:30:b9:07:a1:e8:43:fc:59:b7:87:18:fb:99:39:
a5:b1:cb:55:88:6d:c6:e9:58:a1:d4:f8:68:49:c1:
9e:9b:77:3e:0e:29:7e:7e:ae:81:8e:c2:f4:e3:01:
1a:4d:a6:67:7c:e6:3a:77:d9:f4:d7:c4:89:65:7c:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:6B:6C:68:07:69:EE:62:3C:D9:1F:89:D9:60:D1:F6:B8:95:AD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VjZrbGgHae5iPNkfidlg0fa4la0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7b:03:c6:40:67:f2:31:e2:87:1b:c1:b4:75:9b:2b:d5:a9:
e9:21:6c:8e:92:20:b5:f3:0d:e5:9d:5d:3e:66:8b:c7:a9:48:
c4:1b:40:7b:1b:ed:46:d4:e0:d6:8c:a5:6f:40:a9:19:b2:97:
72:d2:44:ed:7c:5c:9f:a7:06:55:c7:e4:8b:f1:97:c9:16:7c:
58:fe:b5:05:70:cb:8d:05:cf:f5:9b:33:8e:be:54:6f:77:fc:
24:95:d3:f6:ae:e4:db:11:7f:8f:27:7c:f8:f3:4b:c2:34:4b:
98:df:71:3a:15:14:40:14:3e:eb:3a:ab:e3:cc:95:90:c8:97:
60:18:cc:e2:23:e8:f1:b5:3a:70:30:9a:29:84:20:a6:82:93:
9b:c4:bc:4e:33:89:d2:c3:87:d7:d0:0a:a8:96:3f:bd:7a:58:
84:d8:43:8a:c3:ae:20:23:82:73:c4:68:fd:f7:ab:89:0d:99:
18:ef:04:b7:fc:f2:5a:41:8a:4a:3e:64:ee:8d:8f:3b:24:a7:
6e:2f:97:b7:6a:c9:23:a0:2f:3d:b2:f9:22:00:c6:01:d6:33:
14:f4:23:19:a5:0d:18:4d:ac:e9:59:11:3c:3e:3d:1a:fd:08:
e7:59:74:32:fe:ac:68:47:53:88:b5:85:08:05:4b:4e:75:3c:
2b:13:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org