Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/a8lh2NynEuX_Dgf5h8w_X2WKPyU.roa
File: a8lh2NynEuX_Dgf5h8w_X2WKPyU.roa (raw, json)
Hash identifier: Ne4qX4EsKbWaG1colhQSes/iEjWLsFwEJQi72zvkoF0=
Subject key identifier: 6B:C9:61:D8:DC:A7:12:E5:FF:0E:07:F9:87:CC:3F:5F:65:8A:3F:25
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183C849B2AAF4FBA83C1A5F8D1CA99793C7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/a8lh2NynEuX_Dgf5h8w_X2WKPyU.roa
Signing time: Tue 11 Oct 2022 18:23:36 +0000
ROA not before: Tue 11 Oct 2022 18:23:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.59.0/24 maxlen: 24
88.216.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:49:b2:aa:f4:fb:a8:3c:1a:5f:8d:1c:a9:97:93:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 11 18:23:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bc961d8dca712e5ff0e07f987cc3f5f658a3f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d1:4b:43:a4:15:5d:a2:07:b2:57:7c:8d:45:
c3:d5:f0:98:88:a2:85:11:5f:4d:35:86:e4:e0:70:
7f:95:67:f4:d6:82:45:fd:9c:79:74:d7:78:a6:3d:
33:8b:7c:3e:71:2a:b2:c9:e9:f1:bd:51:8c:68:30:
ae:04:38:9f:fa:e1:b8:74:9d:9e:b7:51:0f:3a:e6:
3c:94:7d:93:d1:85:cb:2d:1c:06:85:ec:9c:d8:0b:
51:a9:13:1a:7f:6e:9f:26:cd:10:eb:21:35:b0:54:
71:65:6a:93:e7:b3:91:ad:e0:62:ee:91:26:1a:60:
ec:65:7f:1b:d9:7f:a9:0b:82:bd:fd:4e:4c:a9:66:
4b:c4:54:9a:9d:aa:dd:86:46:ea:b3:fb:1d:30:bc:
28:ca:a6:2d:8d:e1:26:1e:fc:40:c3:73:0d:ab:d8:
43:91:1b:f1:44:6c:07:c3:6c:b4:bf:48:26:57:6f:
0d:f8:dd:90:b8:2a:53:4e:d7:49:d2:fa:f7:e7:a4:
d6:16:af:0a:52:73:a9:8a:23:0b:f6:19:79:db:63:
84:75:54:b5:e4:e3:c2:5d:0a:39:27:8c:46:89:3c:
d4:db:16:8b:18:94:96:3b:91:4f:43:ae:d7:54:d9:
00:2d:23:ac:2e:5a:44:5a:e4:95:23:cf:5f:4a:15:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C9:61:D8:DC:A7:12:E5:FF:0E:07:F9:87:CC:3F:5F:65:8A:3F:25
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/a8lh2NynEuX_Dgf5h8w_X2WKPyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
88.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3f:35:23:1d:c7:fd:de:fd:df:02:d5:71:77:17:b3:65:47:
81:ab:8f:3c:53:e4:86:8d:bc:22:74:74:20:a2:e8:43:11:ac:
fd:84:79:9c:61:ed:fe:2e:44:63:6e:86:f5:7e:1b:26:f0:df:
61:b5:bc:89:6a:c3:cf:3c:87:46:f9:c9:94:eb:e5:f8:d2:c2:
d6:c1:fd:a6:5a:cf:56:6b:7a:55:4a:17:fa:4f:85:09:9f:24:
8e:fd:90:d5:4d:60:ac:ff:90:9c:41:e7:bd:05:c0:eb:21:81:
6e:46:38:2f:95:f4:ed:97:e1:86:ff:d1:17:fa:7b:d8:22:7e:
ac:6d:2e:a6:93:66:2a:85:66:a8:e6:27:00:0f:f3:d7:0a:bc:
25:01:ed:d0:63:ec:a2:ec:26:16:5c:4b:09:f0:16:8c:c8:f9:
47:a7:29:b8:a9:a7:64:01:c3:21:5d:56:bb:1c:5b:65:90:d2:
91:2e:24:01:52:85:a1:b9:83:e7:e4:32:13:14:e6:85:13:11:
72:74:5e:93:76:e4:c8:52:59:ce:14:fe:50:1a:48:78:12:aa:
8f:32:b4:4c:32:37:64:70:2e:e2:e1:8e:48:d6:c6:27:ed:3b:
1e:73:a6:84:fe:7a:c0:8f:51:d8:94:09:b0:86:47:9f:49:17:
25:97:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org