Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YNa9Fr4VOXsCq7El4Jdb4s2yh8U.roa
File: YNa9Fr4VOXsCq7El4Jdb4s2yh8U.roa (raw, json)
Hash identifier: PKdvdiDXmfPg4UWA8A2zDdLeA/vvAajGyb7rtNQiP70=
Subject key identifier: 60:D6:BD:16:BE:15:39:7B:02:AB:B1:25:E0:97:5B:E2:CD:B2:87:C5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018507A554D2F21AAD29778F69926F77CA9E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YNa9Fr4VOXsCq7El4Jdb4s2yh8U.roa
Signing time: Mon 12 Dec 2022 18:42:33 +0000
ROA not before: Mon 12 Dec 2022 18:42:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 84.32.69.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.40.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:a5:54:d2:f2:1a:ad:29:77:8f:69:92:6f:77:ca:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 12 18:42:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60d6bd16be15397b02abb125e0975be2cdb287c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:d5:7b:60:fb:56:aa:70:39:de:cb:98:64:
6d:9f:db:ea:91:09:16:e7:8b:05:13:b0:1f:17:98:
80:a4:8a:55:c9:85:52:4c:f8:17:10:2f:0f:a1:9c:
34:29:63:7e:c2:4c:c3:2c:e8:8e:9f:b6:12:4f:af:
23:88:59:df:74:2f:ba:ef:2c:8c:81:00:d7:5b:bd:
da:95:20:23:92:38:94:d3:24:8e:50:1f:05:df:fc:
2f:83:bb:6a:14:c1:af:9b:f6:41:4c:3d:a1:bf:95:
90:89:99:82:d9:30:2c:93:8b:b9:9a:48:23:2a:da:
65:76:9f:3c:ef:ae:60:3d:30:76:b2:84:6f:29:8d:
c3:d4:fc:96:c1:1b:90:b8:94:e1:3c:12:08:1d:8e:
a5:21:71:b0:07:d4:2b:61:6c:f8:98:8b:79:fc:b6:
c0:21:01:f4:51:e5:54:26:80:fe:bb:b4:1c:1b:3c:
cb:db:07:de:1e:bf:3a:9a:4c:d1:9d:ba:a7:26:42:
c0:55:0e:0c:e0:46:1b:2b:06:21:10:0d:cc:11:2f:
48:06:01:73:50:94:8c:53:94:f5:2f:84:2e:7d:e7:
db:38:6b:fe:fb:0b:b2:a8:3f:31:a2:e7:86:94:e2:
77:d5:74:f1:2a:5f:ac:64:c9:ca:ff:6d:53:8a:76:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D6:BD:16:BE:15:39:7B:02:AB:B1:25:E0:97:5B:E2:CD:B2:87:C5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YNa9Fr4VOXsCq7El4Jdb4s2yh8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
84.32.43.0/24
84.32.69.0/24
84.32.242.0/24
88.216.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0f:8e:e4:da:1c:04:66:6d:ee:2a:f9:cb:4c:9e:05:c7:a0:
a6:97:54:7c:22:2b:8e:52:1c:62:46:b7:7f:9b:13:05:e2:61:
ff:29:3f:50:ca:ff:cb:32:1b:55:7e:39:ff:11:f4:28:99:9d:
aa:eb:26:a5:85:db:fe:98:07:74:99:ac:00:d7:c8:5d:5a:92:
e4:35:1f:dd:ff:bc:b2:a0:f9:57:0c:39:f4:08:38:57:c1:9d:
60:74:c4:57:81:70:19:96:0b:fd:02:e7:14:4c:0e:cc:95:32:
3c:6d:73:da:9c:44:c9:8d:07:20:af:95:9d:27:7e:f1:92:67:
91:07:f7:20:67:1a:de:5e:ff:d8:8c:0d:fc:f3:28:18:e2:68:
c2:70:bb:26:f9:c0:99:74:38:f6:2d:46:f4:1d:83:bf:51:dc:
23:7b:43:35:49:f9:e3:42:c5:56:3f:c7:8d:7b:50:fb:b8:c1:
fd:d0:e3:1b:7d:1d:fb:02:54:26:c4:2d:0a:0e:19:83:6a:b3:
63:59:e0:04:f6:c3:f1:a2:c0:56:41:8f:e8:bf:69:d1:f3:3c:
7c:c3:92:06:c6:53:65:11:3e:eb:aa:fe:e1:e5:ac:c8:36:f6:
da:31:0d:4f:54:0c:3e:50:02:17:fd:53:0d:14:f3:ba:2f:d5:
f0:3c:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org