Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Xq-WQdaH1mf4BcIGVRoMbHdF-B4.roa
File: Xq-WQdaH1mf4BcIGVRoMbHdF-B4.roa (raw, json)
Hash identifier: 4vWAF+Nx92tv+XWyohUZVHtmU1ACcinPNR+Iu7uyrb0=
Subject key identifier: 5E:AF:96:41:D6:87:D6:67:F8:05:C2:06:55:1A:0C:6C:77:45:F8:1E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184CEF4E3746176049A327675C718331EF6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Xq-WQdaH1mf4BcIGVRoMbHdF-B4.roa
Signing time: Thu 01 Dec 2022 18:31:06 +0000
ROA not before: Thu 01 Dec 2022 18:31:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
88.216.91.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:f4:e3:74:61:76:04:9a:32:76:75:c7:18:33:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 1 18:31:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eaf9641d687d667f805c206551a0c6c7745f81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:6e:7a:76:bd:00:c7:c3:5d:3a:39:99:13:
70:46:3d:5b:1d:73:38:b1:90:15:23:64:31:e7:a5:
c3:c6:17:1f:e8:22:05:73:e0:83:25:e5:d6:8c:3c:
a4:8c:26:b6:d1:53:cf:5c:93:33:8f:b7:6d:05:f1:
33:7a:76:1e:d1:e7:77:f9:1d:b6:fc:44:f9:9b:a6:
b9:3f:27:c7:18:fc:f4:52:59:10:71:c5:5f:b9:27:
22:47:43:36:74:19:90:06:2f:b9:4c:7f:9e:4f:58:
55:83:4c:e1:af:19:86:9b:f9:0f:21:f5:c9:04:32:
79:fb:8e:95:ca:2f:a5:0e:eb:0e:18:ba:bc:87:eb:
b9:5d:9d:cd:c9:45:4f:3f:47:c1:b1:99:02:e7:51:
d1:25:dd:7e:3e:c1:cc:e2:91:17:d0:dc:ab:fd:59:
99:04:cd:b7:63:5b:df:ec:86:ef:71:c1:37:86:fc:
d3:3a:e5:cc:48:f0:04:fc:09:06:19:42:84:97:ff:
9e:06:f3:54:49:ae:09:f2:bc:7b:16:26:3a:1a:c5:
58:1e:d2:e7:93:de:e6:f7:18:3e:39:86:16:81:c8:
f0:cb:a7:e1:ae:57:eb:60:ed:81:5d:f6:59:79:ef:
79:5b:5a:b0:7f:fa:1f:d9:7d:ac:75:af:88:07:da:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:96:41:D6:87:D6:67:F8:05:C2:06:55:1A:0C:6C:77:45:F8:1E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Xq-WQdaH1mf4BcIGVRoMbHdF-B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.44.0/24
84.32.46.0/23
84.32.59.0-84.32.60.255
84.32.65.0/24
84.32.86.0/24
84.32.90.0/24
84.32.92.0/24
84.32.94.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.40.0/24
88.216.91.0/24
88.216.102.0/23
88.216.188.0/24
88.216.190.0/23
88.216.198.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6a:2d:6c:99:05:58:d8:07:31:5c:5d:04:0a:42:2d:6b:fc:
37:64:0d:49:42:61:19:2a:5b:91:52:a7:6d:fa:a2:db:d7:e3:
b3:83:6d:cd:14:04:ea:a3:a3:52:16:85:ce:b9:0e:a5:a2:0c:
14:55:e6:18:28:36:8a:a6:6f:5c:00:57:8d:eb:ef:92:b3:6a:
a8:18:bc:f0:49:5a:4b:48:39:a7:95:65:ab:23:60:a7:32:69:
fb:84:a5:5b:61:27:83:4a:c8:49:35:27:8f:b8:25:90:ae:74:
bb:76:5c:81:b4:2c:26:77:42:59:25:1b:42:73:87:f1:c7:f3:
96:30:93:bf:c0:3a:cd:e1:f9:29:78:69:e5:bf:75:85:99:98:
6d:14:68:b0:c7:8a:0c:c3:7f:32:d9:da:57:51:89:a4:3e:a4:
54:97:79:98:28:5a:8a:5d:d0:a0:34:f1:d6:10:f2:70:45:86:
f7:23:2e:88:3c:ff:3c:9f:c5:d5:3f:5f:32:0b:ff:68:1d:58:
f0:31:39:92:7e:a8:78:c2:13:a2:c6:a6:5f:e6:29:de:6f:5c:
96:e4:1e:8c:24:f4:35:ee:b5:ba:12:f3:fc:9c:4a:86:f4:b1:
03:dc:ac:59:26:fb:2a:3b:5b:f7:31:be:b8:21:3a:45:c5:28:
6c:fb:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org