Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aiDcGo0NKAufGmeTOVbyhg9f4fU.roa
File: aiDcGo0NKAufGmeTOVbyhg9f4fU.roa (raw, json)
Hash identifier: CLcTrKJUaTdotlnkfn9AD1prZZR97YEA/ko6grPrUEc=
Subject key identifier: 6A:20:DC:1A:8D:0D:28:0B:9F:1A:67:93:39:56:F2:86:0F:5F:E1:F5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01842F3988B4B1D5F64FBEF31E9AD14F8BD6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aiDcGo0NKAufGmeTOVbyhg9f4fU.roa
Signing time: Mon 31 Oct 2022 18:06:50 +0000
ROA not before: Mon 31 Oct 2022 18:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 84.32.87.0/24 maxlen: 24
88.216.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:39:88:b4:b1:d5:f6:4f:be:f3:1e:9a:d1:4f:8b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 31 18:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a20dc1a8d0d280b9f1a67933956f2860f5fe1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:4c:77:f7:c6:52:d2:13:b8:6c:fd:95:e3:
59:aa:a4:b9:74:e5:54:6d:52:e1:81:51:28:d4:d9:
47:f9:71:08:52:1d:26:f6:c2:d8:25:ae:44:bc:5e:
d4:af:ee:35:dc:20:22:92:3b:f8:c5:56:77:b9:2b:
91:59:b2:01:94:e4:c9:e8:9a:1b:56:88:11:3a:a9:
35:30:c0:a8:4d:0e:1a:ad:b5:9b:63:ba:8c:2e:33:
92:76:02:bb:3b:53:e2:37:b9:88:5e:63:73:ee:bb:
4d:45:94:fe:0c:99:e4:90:0a:4a:d2:be:63:24:23:
f3:31:01:71:8e:13:58:8a:4d:5e:02:c0:45:19:f7:
70:49:8a:c5:3c:f5:0a:a3:b0:fe:f9:24:f7:fa:e2:
0e:f0:7f:42:45:b7:86:33:1e:4f:44:c8:d3:6e:d6:
38:42:ce:96:89:68:d7:56:cf:18:9c:2d:78:b5:eb:
40:0a:da:1c:7d:01:69:bd:2a:68:36:82:cb:f9:81:
38:33:a3:79:45:37:ff:fb:8a:ef:b8:fb:6e:4d:4a:
90:2a:49:00:1c:e4:e5:f6:6e:29:9b:66:56:d7:ae:
5b:1a:94:24:76:9a:98:a3:92:c7:db:5a:bb:f3:11:
d0:b7:8a:c7:a8:dd:13:cd:9f:f3:bd:0a:a9:22:85:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:DC:1A:8D:0D:28:0B:9F:1A:67:93:39:56:F2:86:0F:5F:E1:F5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aiDcGo0NKAufGmeTOVbyhg9f4fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.87.0/24
88.216.96.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a2:f9:c4:5d:31:4c:39:f8:14:a0:b8:81:75:59:b5:9b:66:
e7:2a:c5:c3:5a:02:76:08:a6:9c:e5:b7:b2:5a:bd:0c:f9:7c:
16:14:27:5a:85:09:d1:58:91:27:19:18:ca:99:e2:b3:cc:ef:
ca:d3:41:c2:77:6c:64:f9:26:35:4c:2a:7d:d7:fa:79:9a:70:
66:a7:2b:c3:f7:a3:eb:7d:c2:54:f6:7e:f3:2b:32:62:b8:ba:
40:72:c3:16:72:4e:ff:f5:d5:fc:45:33:f1:dd:e6:98:6d:f8:
83:fa:a6:ac:10:d0:36:ad:c5:ab:12:62:9d:33:e1:45:16:93:
69:99:9a:ba:59:32:67:77:cb:28:63:8b:b1:f3:78:46:4f:da:
0b:e0:ae:45:f6:ac:6e:f7:d1:a5:ab:be:06:c8:42:33:4e:d1:
72:40:59:af:a1:cb:a2:e8:fc:42:2c:6a:15:04:1d:b7:1d:1f:
f2:d8:82:d9:65:a5:c4:2b:23:19:63:5a:cb:da:0b:e3:07:69:
69:56:c1:54:64:a9:2f:d2:07:30:9b:63:dd:76:41:de:21:68:
2d:5e:7a:c4:c5:2e:2f:d5:fa:5c:8d:60:d2:f5:f4:88:da:d3:
d2:19:c5:75:c4:0e:9f:8a:99:26:5e:cd:ac:ad:f5:af:e6:3f:
08:46:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org