Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YwnKy716rM50PW6ps8L42r7uWkc.roa
File: YwnKy716rM50PW6ps8L42r7uWkc.roa (raw, json)
Hash identifier: KG+goHSYpwcqbyo6z9oBh6xGHHPHMakfvWi3APapxkA=
Subject key identifier: 63:09:CA:CB:BD:7A:AC:CE:74:3D:6E:A9:B3:C2:F8:DA:BE:EE:5A:47
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183D0827E339F086A5BC2E164E6581EA7BC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YwnKy716rM50PW6ps8L42r7uWkc.roa
Signing time: Thu 13 Oct 2022 08:42:36 +0000
ROA not before: Thu 13 Oct 2022 08:42:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.68.0/22 maxlen: 24
88.216.208.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:82:7e:33:9f:08:6a:5b:c2:e1:64:e6:58:1e:a7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 13 08:42:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6309cacbbd7aacce743d6ea9b3c2f8dabeee5a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:2d:75:6c:a0:57:69:9b:f8:2e:68:79:2e:
dc:34:ea:1d:ac:43:d9:58:1a:29:3c:63:40:40:8c:
c3:3a:b6:bc:76:04:ff:d5:5f:e2:5e:08:78:ce:14:
1f:5e:94:28:e6:67:4e:98:a8:c1:f5:46:b9:43:7a:
87:0c:b0:7d:76:13:67:46:08:87:dc:ec:24:d8:1b:
1b:f8:ae:8f:26:97:23:4a:db:57:17:1b:6f:9b:73:
c1:9a:3a:87:d7:19:ef:c5:09:0e:2c:8c:bf:70:df:
85:2e:63:32:2a:35:a9:03:8a:d7:ae:6d:e4:8d:cd:
78:b1:69:b9:b9:c1:7e:c0:03:98:17:0e:d3:0c:02:
cb:cb:db:c5:53:ed:14:65:e9:35:eb:98:cb:bf:02:
50:31:65:49:c2:92:c3:89:aa:6e:f2:fe:93:19:9f:
3a:fc:bb:83:22:30:79:4e:cd:c8:49:ac:9a:ab:68:
6f:99:9e:a9:02:78:01:cb:08:6f:20:75:9c:18:f2:
a6:f0:2c:de:c4:6f:a2:1c:43:f4:26:00:83:8f:09:
c1:1f:64:5b:60:c0:cd:d7:d3:d6:18:97:80:47:4e:
c7:7b:48:fd:a7:8a:f2:9c:c0:0b:81:2e:b3:88:e3:
87:53:f6:9a:da:0f:d7:70:e0:a6:18:da:b6:48:0d:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:CA:CB:BD:7A:AC:CE:74:3D:6E:A9:B3:C2:F8:DA:BE:EE:5A:47
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YwnKy716rM50PW6ps8L42r7uWkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.20.0/22
84.32.48.0/22
84.32.68.0/22
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:74:c7:88:a1:f1:7d:6e:2e:85:db:0f:22:4e:5a:3b:eb:f0:
6f:7e:c4:42:c7:71:54:8e:6f:5a:54:72:6f:20:17:1c:30:4d:
ed:d3:dd:80:e9:d9:d6:c0:6f:a3:73:82:ca:b7:0d:6e:58:2e:
ba:24:ee:fa:28:c3:a1:64:99:5d:9d:2d:5b:44:84:97:1e:58:
3d:24:48:92:0e:4d:16:23:ae:c0:68:7d:94:c2:38:a0:21:4b:
92:5d:ce:37:9f:09:97:c7:ec:3f:0a:3d:fc:67:02:43:fc:60:
da:a6:5e:27:63:22:a7:99:b1:89:55:09:25:35:be:2a:7a:de:
68:12:67:c9:25:69:6b:e2:87:96:3e:cf:b3:8a:dd:d0:c3:65:
4a:19:5d:46:87:5f:4c:fd:e6:41:16:e3:bf:ba:2b:81:68:ce:
7a:62:97:8e:26:9e:dd:3e:b4:34:48:25:bf:4d:2a:76:5d:41:
96:0f:ce:73:8c:ed:74:ed:df:40:be:29:48:0b:94:05:f5:ed:
0c:fb:85:be:d6:a8:75:50:0c:3d:eb:20:6c:2a:c4:7a:a8:91:
4f:8b:d5:cc:6b:88:bd:02:22:b5:65:0b:54:d1:88:25:0d:ba:
07:c6:08:1f:1b:69:cb:87:8f:64:2a:1d:fd:25:d6:7c:69:77:
e0:f8:4f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org