Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YYfJn3eOrOsqQ8se7LCjtLXWZg8.roa
File: YYfJn3eOrOsqQ8se7LCjtLXWZg8.roa (raw, json)
Hash identifier: Su9wC9mvB4dXFnbAZjiV08Wxkmg6y1ktqB+vObpJbds=
Subject key identifier: 61:87:C9:9F:77:8E:AC:EB:2A:43:CB:1E:EC:B0:A3:B4:B5:D6:66:0F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01843D6D4B4DAAA16CC107109FC73572AF71
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YYfJn3eOrOsqQ8se7LCjtLXWZg8.roa
Signing time: Thu 03 Nov 2022 12:18:03 +0000
ROA not before: Thu 03 Nov 2022 12:18:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
88.216.196.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.37.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:6d:4b:4d:aa:a1:6c:c1:07:10:9f:c7:35:72:af:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 3 12:18:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6187c99f778eaceb2a43cb1eecb0a3b4b5d6660f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:30:79:ba:47:b5:42:40:11:65:1e:71:66:
1d:18:e4:a4:87:61:9c:d7:a9:b0:a3:23:55:b1:3f:
8a:c0:3d:1e:65:8e:46:f5:93:82:4f:f6:56:b0:be:
0e:b1:05:5f:4b:ae:4d:69:2e:9c:a6:e4:49:e0:ba:
09:9c:d7:31:3e:86:95:2a:25:2f:9d:a0:dd:53:f2:
d7:cd:8a:fd:fe:f0:50:7a:07:9a:52:59:b8:89:7b:
93:49:7f:d8:f9:19:1e:eb:49:a8:0f:11:a1:5c:a3:
85:e7:c6:1d:3d:7a:a4:55:30:f1:9c:64:54:fb:98:
bc:96:9b:bd:46:b5:27:7f:a4:6e:8b:0c:2f:26:6a:
bd:68:d6:0f:9e:20:65:07:12:f0:2e:ac:67:e3:4a:
6d:94:15:d7:ca:28:ea:a9:f5:e2:7c:f0:2d:8e:74:
e3:de:7a:61:aa:13:bb:20:c8:a6:52:53:a9:92:6f:
19:0f:49:6e:4a:83:0e:6c:d8:f4:f3:94:4e:a8:38:
15:3a:b7:04:76:8c:52:cb:72:40:7c:32:fb:74:b4:
63:b7:b1:4f:0f:6d:a5:15:b7:7e:95:93:0b:b8:99:
0b:4f:60:c5:2c:5e:83:8d:0d:ca:6b:38:41:a9:ac:
7c:3b:ef:6b:81:76:cb:87:98:52:ac:54:a8:08:84:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:C9:9F:77:8E:AC:EB:2A:43:CB:1E:EC:B0:A3:B4:B5:D6:66:0F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YYfJn3eOrOsqQ8se7LCjtLXWZg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.57.0/24
84.32.67.0/24
84.32.85.0/24
88.216.37.0-88.216.38.255
88.216.100.0/23
88.216.130.0/24
88.216.187.0/24
88.216.196.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b9:f1:3e:21:82:ac:4b:17:07:28:92:3f:63:94:48:e3:1f:
79:61:4d:0b:b2:cf:cc:b2:d2:98:15:71:12:48:29:a0:09:7c:
fc:e9:a7:a2:52:b7:40:e8:18:5d:6a:6a:d4:ad:e4:d0:d8:e6:
25:d7:ff:b5:fa:68:62:e3:d6:30:c7:d0:eb:63:fd:29:a1:43:
b2:bf:63:a2:6b:44:ea:63:d1:01:c5:9d:4a:49:80:db:20:e0:
f8:20:96:45:ef:80:44:a6:18:a4:46:60:00:5c:c5:e3:17:7b:
88:09:bb:f7:67:8e:c0:03:f5:da:08:22:c9:79:5f:95:fa:34:
0e:08:9a:77:10:be:4c:db:ce:14:c0:28:9c:92:f0:aa:76:32:
8d:f0:4e:9f:f4:af:46:bf:f0:e6:5d:6c:97:e3:f4:e2:2c:c0:
f9:73:73:3d:85:e5:41:7b:e1:6c:56:3e:fe:62:14:06:13:ac:
de:34:65:e1:f5:36:89:57:f2:b4:3d:31:46:07:2b:92:77:05:
57:c0:d2:bd:f6:b0:91:63:c5:5b:d1:7b:4d:83:9e:f1:ce:f1:
c7:ac:a8:44:c8:f8:ba:56:d2:9e:51:f9:30:c7:c0:95:9f:04:
f3:9c:94:6e:9d:53:86:c4:76:c0:23:af:d5:4d:02:fb:1b:18:
2a:f9:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org