Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XLnNjx5cCwfMMZ3oKqUrjRGzBMI.roa
File: XLnNjx5cCwfMMZ3oKqUrjRGzBMI.roa (raw, json)
Hash identifier: JrX+2aU4r2Yk3IycfxkZbjKuHKtlkGRZgEn0TkfKmzk=
Subject key identifier: 5C:B9:CD:8F:1E:5C:0B:07:CC:31:9D:E8:2A:A5:2B:8D:11:B3:04:C2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018507A46A18646B099A357BBDA5163AB5B0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XLnNjx5cCwfMMZ3oKqUrjRGzBMI.roa
Signing time: Mon 12 Dec 2022 18:41:33 +0000
ROA not before: Mon 12 Dec 2022 18:41:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 84.32.230.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:a4:6a:18:64:6b:09:9a:35:7b:bd:a5:16:3a:b5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 12 18:41:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cb9cd8f1e5c0b07cc319de82aa52b8d11b304c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:1e:46:1e:d3:ba:62:e3:99:a6:0b:c3:d6:
5c:c6:58:ae:56:9d:5c:18:79:d6:f0:b6:d4:63:fa:
25:72:8d:9f:a7:54:6a:ea:45:49:a3:10:c6:aa:65:
74:73:f1:42:6c:0d:a5:cd:e9:7b:5f:15:94:a7:c3:
52:59:03:cc:f7:8c:b3:b0:e8:e5:c6:f9:e0:4b:89:
3b:ce:b8:d0:f8:21:c0:ca:f0:17:3c:f4:3e:cc:d7:
42:12:b2:22:1f:e6:de:67:9f:9e:f9:7a:f5:6e:ee:
d6:21:7c:e5:9b:ce:b8:c2:6c:e8:c6:b7:72:c0:a7:
6c:6c:34:2b:35:9a:fe:9e:ce:d4:72:e0:6f:cd:cd:
1f:f0:32:7b:71:0d:b4:c8:79:d8:56:9c:5e:30:80:
50:2a:68:f4:57:4e:58:4f:1c:21:6a:2f:03:78:8b:
5d:0b:01:01:05:18:d7:88:cc:18:4a:b2:64:86:18:
a6:f3:97:f2:e2:64:92:69:c8:1a:dc:21:da:47:34:
8a:97:6f:87:8a:69:7c:08:37:f0:4c:7f:6a:53:e5:
13:59:51:44:97:2c:a2:63:cd:ba:eb:2b:e4:a7:20:
13:89:e8:0b:38:ae:df:86:36:4a:77:95:2d:78:21:
dc:a8:dc:b8:90:13:2a:80:17:63:50:54:d4:a8:3b:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B9:CD:8F:1E:5C:0B:07:CC:31:9D:E8:2A:A5:2B:8D:11:B3:04:C2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XLnNjx5cCwfMMZ3oKqUrjRGzBMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.49.0/24
84.32.230.0/24
Signature Algorithm: sha256WithRSAEncryption
29:51:0b:42:e9:0b:ff:9c:ec:cf:a6:95:9b:2a:45:17:51:4c:
f4:f3:ed:a7:4c:15:66:ba:ee:9e:09:32:f1:04:ad:24:96:54:
d6:a3:58:08:e8:d1:f3:38:2c:9a:ad:12:78:6a:d6:c6:70:47:
90:6a:72:13:61:c7:dc:f8:0a:f6:f1:d8:43:51:97:e6:0f:91:
45:54:8f:2b:c1:2f:2e:2d:3a:a4:42:04:df:a6:59:76:9c:da:
62:35:c8:50:68:c2:f5:a0:d3:23:0e:ee:2d:60:0a:5c:9a:ef:
76:8b:49:b9:26:6e:86:26:36:2d:69:68:e5:f0:aa:9f:3a:a0:
cb:d0:1d:49:03:31:a4:24:36:99:ff:5e:8c:e1:72:c4:cd:6a:
32:71:49:ba:fe:e5:24:d9:3e:33:1b:19:25:ad:a7:91:63:7c:
c2:b1:24:82:6d:eb:18:dd:ac:1d:57:9a:f0:ee:d7:5d:c5:4a:
f0:45:23:ba:db:d6:39:ea:56:7b:89:26:ec:1f:f4:5d:68:1a:
91:69:c6:45:c1:0e:d9:b0:a4:25:5c:cb:6c:c8:65:de:a0:f9:
7a:72:f5:88:66:d8:30:8b:f9:8e:ac:a4:37:a9:f4:a2:7d:64:
23:b7:d8:4a:40:f3:9a:4e:fa:86:3a:7b:15:87:17:46:83:71:
44:2e:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org