Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y6Ot9p4MpeRaiKbsBzRBwyt9GTM.roa
File: Y6Ot9p4MpeRaiKbsBzRBwyt9GTM.roa (raw, json)
Hash identifier: ulX4Vd3yKRIWchhxZpXves0oYnhG9u4rKBl4Zxh3hVg=
Subject key identifier: 63:A3:AD:F6:9E:0C:A5:E4:5A:88:A6:EC:07:34:41:C3:2B:7D:19:33
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185085C6E26E790EB9F58989DDAC0063D1D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y6Ot9p4MpeRaiKbsBzRBwyt9GTM.roa
Signing time: Mon 12 Dec 2022 22:02:33 +0000
ROA not before: Mon 12 Dec 2022 22:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 84.32.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:08:5c:6e:26:e7:90:eb:9f:58:98:9d:da:c0:06:3d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 12 22:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63a3adf69e0ca5e45a88a6ec073441c32b7d1933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:c8:5c:3b:f6:18:a2:d6:3b:f7:40:ff:d9:
5a:81:57:ca:fe:74:ca:f8:a6:94:59:f7:15:5f:10:
0e:b0:26:18:ab:11:22:fe:d1:56:d5:f0:2b:be:87:
e0:87:ef:dd:d6:35:66:eb:d0:f6:3a:fb:a6:48:7b:
12:2a:d3:73:b3:07:7b:68:19:d1:de:7e:d4:de:85:
a8:cc:62:af:5a:ec:7e:dd:74:86:3f:99:0a:45:6c:
9b:68:2e:72:ed:13:78:8b:5b:19:8b:d6:97:55:6d:
a1:f9:b7:ab:31:20:26:bd:18:3c:6a:9f:0d:3b:05:
0e:bf:be:10:98:f9:2c:9f:66:4e:18:72:49:6f:cb:
a9:f9:b6:9d:4e:26:9e:cf:19:a6:05:cc:f8:d7:88:
93:e4:17:1d:0f:15:0b:7f:66:1d:80:3a:61:3a:34:
3f:20:cc:57:3b:b4:03:ab:c7:47:1e:49:5f:20:7c:
24:0d:1c:95:56:3b:89:c8:4f:91:5a:67:9f:cc:52:
2a:20:b3:fb:64:fc:ce:1e:b0:a1:a0:67:d5:e0:29:
7d:51:65:bf:df:df:3a:e1:cf:fb:fa:20:89:4f:12:
7e:56:84:99:45:b2:b7:c4:ef:c6:86:84:be:a5:bd:
6e:11:af:85:74:94:1f:fb:0f:fe:e0:d8:6f:82:3e:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A3:AD:F6:9E:0C:A5:E4:5A:88:A6:EC:07:34:41:C3:2B:7D:19:33
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y6Ot9p4MpeRaiKbsBzRBwyt9GTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.229.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ba:c5:a8:e1:7d:f0:26:0c:8b:e8:f5:8e:19:05:a2:a2:ff:
d2:ef:83:72:57:32:71:26:e8:00:b3:4c:3e:eb:8d:da:c0:17:
14:68:8e:7c:e8:04:68:bc:8a:99:ef:dc:18:66:ef:20:d9:13:
20:a6:6c:17:ff:a4:64:f5:17:d7:c6:a2:7a:31:26:6d:fe:c9:
bb:9d:8f:94:3a:4b:b6:b2:4b:8b:db:93:98:0b:21:36:9d:3d:
a0:13:91:fa:bd:85:d2:8f:56:42:82:bf:04:d8:9e:b5:59:36:
ea:aa:ac:8e:34:d5:95:8e:33:75:14:2c:7b:3c:d8:0a:b9:fa:
bc:62:11:f9:b8:97:3d:69:eb:fc:6c:04:48:03:1e:5a:6a:a4:
d1:88:62:40:73:e9:e0:fe:5a:1d:9c:8d:34:ef:6f:36:5d:d3:
27:ae:ce:d5:c2:2f:0c:3d:4f:6d:f8:12:78:0b:09:c0:52:d9:
c1:52:7f:85:8a:a7:46:45:33:4c:d6:b2:3b:e2:db:1b:20:f0:
8a:4c:e9:57:d7:0a:44:13:64:a9:6f:fb:41:93:44:ba:81:d6:
ae:a3:56:8e:20:15:a3:b7:88:a7:23:d5:5e:5c:f1:cb:97:a1:
dc:ae:ed:dc:5c:1f:8f:07:96:29:ec:3e:2f:6a:70:47:7e:b2:
01:22:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org