Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YXa-teUhznjpCKaoiJkymTvhQA8.roa
File: YXa-teUhznjpCKaoiJkymTvhQA8.roa (raw, json)
Hash identifier: cW818dCFVRNnCKtc4jBBPi02ptZHlkq2ZBPA8PX5piw=
Subject key identifier: 61:76:BE:B5:E5:21:CE:78:E9:08:A6:A8:88:99:32:99:3B:E1:40:0F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184657A49C1CFB13A493DACD9C27290BE86
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YXa-teUhznjpCKaoiJkymTvhQA8.roa
Signing time: Fri 11 Nov 2022 06:57:03 +0000
ROA not before: Fri 11 Nov 2022 06:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203511
IP address blocks: 84.32.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:7a:49:c1:cf:b1:3a:49:3d:ac:d9:c2:72:90:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 11 06:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6176beb5e521ce78e908a6a8889932993be1400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:38:e5:37:24:bd:49:2f:b4:e6:3b:56:62:
dd:25:60:83:62:58:f4:91:87:8e:a4:98:a0:7c:7b:
b9:44:f7:66:5f:66:6e:40:28:38:f5:2f:fe:7b:92:
9b:ca:7f:be:d5:57:a0:43:b5:43:54:0c:2a:7b:35:
5a:cb:bd:3a:28:6e:3c:fb:91:a0:d1:69:08:f6:7f:
e1:91:9f:4c:76:8b:c1:ce:94:36:61:35:6a:c5:4f:
71:21:24:1e:78:3d:1e:fe:8a:e6:78:fc:ee:b5:b2:
ea:37:c7:fe:35:0b:ce:63:4f:cd:5d:41:de:64:13:
04:42:0a:34:08:1a:20:bc:00:c6:23:39:9e:39:20:
de:05:f4:ca:8b:4a:2b:24:6e:4c:3b:f1:14:1b:58:
32:f6:1d:e1:68:80:5f:90:f7:f2:cd:aa:20:8f:c5:
3f:70:d5:3c:5d:af:15:07:e3:77:2f:8a:c5:75:88:
1f:02:41:fc:88:df:e5:72:7b:8d:e8:da:c4:43:db:
f5:59:cf:ae:01:eb:0a:4e:50:dc:d8:09:96:5b:00:
bd:d2:a3:a4:59:09:f9:db:05:42:54:f8:f1:7d:b1:
4e:98:14:d2:7b:ea:9b:7d:58:76:fc:1f:06:60:d6:
a8:d2:23:6d:2c:4b:98:ab:dc:e9:bb:c2:bb:0a:65:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:76:BE:B5:E5:21:CE:78:E9:08:A6:A8:88:99:32:99:3B:E1:40:0F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YXa-teUhznjpCKaoiJkymTvhQA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:76:4d:d4:7e:66:2a:c1:99:8b:d5:71:fe:2a:90:fa:9f:5a:
58:ce:f8:69:d1:d1:44:56:48:84:e0:c0:d3:c8:4d:a3:fc:ad:
a7:45:e9:d6:31:0e:be:de:b8:c3:3f:d4:32:a4:a6:ce:61:fa:
ca:ea:d8:b0:e8:51:27:d9:ea:3d:8e:c6:09:09:bb:26:cf:69:
bf:ed:65:8b:ef:c0:e9:d1:c9:a7:03:4b:20:e2:92:6d:d9:92:
db:a4:d1:32:d5:d0:08:08:aa:a2:7b:d8:d6:f6:73:f4:77:fa:
ce:a1:e4:89:a4:5f:d9:35:ac:b5:89:53:d2:fa:65:04:02:ad:
1b:90:70:b9:17:9b:60:eb:9c:61:05:3b:9b:5b:10:e5:ba:d4:
0a:0a:1d:08:90:90:8d:35:01:d6:20:79:da:69:d9:72:a9:7d:
35:22:e3:ad:5f:6d:eb:19:28:0a:6f:72:3a:e4:20:e4:91:c7:
28:d1:87:36:3b:e8:93:00:f5:86:d3:e5:78:b3:57:c0:77:4a:
99:23:9e:88:92:f4:57:46:cd:8a:e7:93:b3:1c:df:74:b5:ff:
40:ea:e6:fc:ca:0e:c9:60:c2:54:be:3b:3f:6d:fa:25:e5:f5:
59:f0:e1:57:7e:95:f2:1c:b7:e7:74:18:83:12:0b:f6:80:41:
e2:3a:19:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRleknBz7E6ST2s2cJykL6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMTExMDY1NzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTc2YmViNWU1MjFjZTc4ZTkwOGE2YTg4ODk5MzI5OTNiZTE0MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOE45TckvUkvtOY7VmLdJWCDYlj0
kYeOpJigfHu5RPdmX2ZuQCg49S/+e5Kbyn++1VegQ7VDVAwqezVay706KG48+5Gg
0WkI9n/hkZ9MdovBzpQ2YTVqxU9xISQeeD0e/ormePzutbLqN8f+NQvOY0/NXUHe
ZBMEQgo0CBogvADGIzmeOSDeBfTKi0orJG5MO/EUG1gy9h3haIBfkPfyzaogj8U/
cNU8Xa8VB+N3L4rFdYgfAkH8iN/lcnuN6NrEQ9v1Wc+uAesKTlDc2AmWWwC90qOk
WQn52wVCVPjxfbFOmBTSe+qbfVh2/B8GYNao0iNtLEuYq9zpu8K7CmXjwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGF2vrXlIc546QimqIiZMpk74UAPMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvWVhhLXRlVWh6bmpwQ0thb2lKa3ltVHZoUUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAEMA0G
CSqGSIb3DQEBCwUAA4IBAQBrdk3UfmYqwZmL1XH+KpD6n1pYzvhp0dFEVkiE4MDT
yE2j/K2nRenWMQ6+3rjDP9QypKbOYfrK6tiw6FEn2eo9jsYJCbsmz2m/7WWL78Dp
0cmnA0sg4pJt2ZLbpNEy1dAICKqie9jW9nP0d/rOoeSJpF/ZNay1iVPS+mUEAq0b
kHC5F5tg65xhBTubWxDlutQKCh0IkJCNNQHWIHnaadlyqX01IuOtX23rGSgKb3I6
5CDkkcco0Yc2O+iTAPWG0+V4s1fAd0qZI56IkvRXRs2K55OzHN90tf9A6ub8yg7J
YMJUvjs/bfol5fVZ8OFXfpXyHLfndBiDEgv2gEHiOhlp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org