Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_9iPPlVTslrcg9mPRA_aXldncxs.roa
File: _9iPPlVTslrcg9mPRA_aXldncxs.roa (raw, json)
Hash identifier: NOPxtWRjoek+Wb2pj7m4PM/auDHO84gNo4uR48STDIs=
Subject key identifier: FF:D8:8F:3E:55:53:B2:5A:DC:83:D9:8F:44:0F:DA:5E:57:67:73:1B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183ABD60D9B73E981AF4D41A9084FF95795
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_9iPPlVTslrcg9mPRA_aXldncxs.roa
Signing time: Thu 06 Oct 2022 05:47:55 +0000
ROA not before: Thu 06 Oct 2022 05:47:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 84.32.68.0/22 maxlen: 24
84.32.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:d6:0d:9b:73:e9:81:af:4d:41:a9:08:4f:f9:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 6 05:47:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffd88f3e5553b25adc83d98f440fda5e5767731b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:48:3c:05:44:ea:e0:e3:9a:44:da:c3:3f:
41:08:e3:e6:1e:4f:28:24:cc:5f:ec:a3:3c:a4:26:
e8:dd:85:6d:3b:75:6c:e0:20:65:fc:06:af:5d:f0:
87:ed:51:67:d3:da:e4:ad:a5:e2:62:2b:18:15:12:
32:55:c0:f3:76:97:62:99:89:eb:99:3f:0e:2b:03:
53:b4:53:9e:54:79:c5:ae:7f:c6:43:f6:f0:d9:b9:
b7:16:b8:7a:ab:6c:53:ec:f1:8f:65:37:0f:76:d6:
71:b9:50:6a:53:be:bc:8b:ed:fd:00:fd:94:63:fd:
07:46:91:bd:b4:46:5d:17:0e:99:c7:f8:8e:5d:73:
93:13:f6:56:28:db:08:f9:72:b9:e9:ac:64:14:dd:
32:a4:fa:fd:f1:ec:30:ca:87:80:87:6d:d4:31:17:
f9:27:7e:72:d7:b9:63:24:63:71:d4:94:a0:67:32:
03:d7:be:67:be:53:d9:ad:c5:14:fc:8d:3b:58:8b:
d2:7c:e0:cf:c0:70:27:19:ce:0f:72:3c:88:3d:97:
05:4c:d8:0a:d0:3a:14:d5:b9:b9:43:72:6b:09:45:
62:05:aa:d5:a4:80:d6:38:98:9c:d0:82:f1:83:6f:
33:bb:ed:67:21:62:60:27:36:6d:06:e8:bb:16:3f:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D8:8F:3E:55:53:B2:5A:DC:83:D9:8F:44:0F:DA:5E:57:67:73:1B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_9iPPlVTslrcg9mPRA_aXldncxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/22
84.32.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:c8:d7:31:3f:22:d7:a9:7c:4c:f2:fe:12:74:47:ca:54:a9:
93:93:42:b3:77:87:96:70:2b:5d:f5:14:43:86:f3:1e:27:c7:
39:2c:ff:fd:8e:8c:d6:ef:7a:6f:eb:8e:ff:58:58:cf:b2:92:
04:4e:31:70:77:93:ea:93:f4:c6:db:0b:07:8e:71:7d:22:44:
22:4b:03:dc:ec:2a:6b:0b:e0:ec:13:7b:8d:26:58:67:7d:e4:
62:6a:51:54:fe:ec:ad:ce:7b:60:a1:50:4f:be:db:1c:1c:62:
39:3b:b3:21:52:12:36:64:fa:11:cb:8c:10:4e:59:8f:c3:04:
47:cc:27:10:80:b8:04:21:fa:bd:85:98:6c:06:b8:c3:25:83:
e2:fc:27:e3:fd:2f:8e:94:89:4a:0d:dd:3f:10:ac:78:29:0b:
bb:a1:2f:c0:3e:a2:ab:21:16:ee:b5:5f:f9:b3:80:84:54:20:
db:15:22:cc:51:bd:71:72:53:50:3e:5a:8d:dc:c2:e6:7f:4e:
0f:21:2a:f0:02:27:05:ea:a9:73:02:e2:cb:26:bd:c5:d5:9d:
b7:11:fa:d3:80:bc:24:8c:74:21:96:42:89:dd:f3:ec:e8:f5:
c4:e7:27:9b:bc:6a:35:e5:93:c1:93:aa:2c:1b:5a:b3:d9:84:
bf:49:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org