Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b00iDHkbX6Fg2d_dQX-mSLKztXI.roa
File: b00iDHkbX6Fg2d_dQX-mSLKztXI.roa (raw, json)
Hash identifier: 3vyNp7+RLIRcyVeAZPNlRssRWXeYMKjZlbpKuBNlu+U=
Subject key identifier: 6F:4D:22:0C:79:1B:5F:A1:60:D9:DF:DD:41:7F:A6:48:B2:B3:B5:72
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018461F823D176F960DF411F587D0FBEB41A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b00iDHkbX6Fg2d_dQX-mSLKztXI.roa
Signing time: Thu 10 Nov 2022 14:36:02 +0000
ROA not before: Thu 10 Nov 2022 14:36:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 84.32.69.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:f8:23:d1:76:f9:60:df:41:1f:58:7d:0f:be:b4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 10 14:36:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f4d220c791b5fa160d9dfdd417fa648b2b3b572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:38:62:0c:5e:f0:80:e8:d6:b3:25:3c:0b:
5e:06:d2:ac:68:08:e6:c1:72:9e:7a:ba:10:aa:49:
43:89:65:e4:dc:a5:51:c4:86:dc:18:88:23:89:55:
d9:1b:6b:56:02:09:8a:ed:d1:2d:1f:ff:43:6e:e2:
99:0c:49:07:54:e2:f6:72:6c:37:a1:88:74:5c:ce:
90:06:d7:89:85:bd:f7:0a:40:52:0a:48:85:82:ca:
e5:e9:60:14:33:2c:9a:9e:cd:0e:f0:4b:e3:be:bf:
9d:4b:a5:f2:97:26:28:5f:f6:7a:5e:bd:d2:6e:09:
39:2b:75:cd:ba:82:cf:4f:9a:b1:02:07:b2:49:32:
fb:7b:d1:af:75:e2:ff:c5:ce:e8:e1:72:04:10:2d:
86:64:a1:82:50:c5:7b:39:6c:95:4b:0b:9e:7c:64:
79:87:fb:c2:84:88:cf:b8:e3:b5:7b:c8:5d:1a:99:
19:6b:af:98:da:99:b7:00:fd:38:36:9d:ab:2d:1d:
fe:80:c6:5e:b2:05:70:6a:ad:2d:80:64:e7:e5:51:
2c:41:c3:53:2e:f2:aa:77:3b:eb:b4:74:77:a7:af:
be:35:5a:09:9d:16:b6:5b:2f:09:d9:e1:9d:11:43:
59:23:19:d6:f1:28:e9:7c:ce:54:d1:22:0c:94:90:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:22:0C:79:1B:5F:A1:60:D9:DF:DD:41:7F:A6:48:B2:B3:B5:72
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b00iDHkbX6Fg2d_dQX-mSLKztXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
84.32.43.0/24
84.32.69.0/24
84.32.242.0/24
88.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:39:37:c5:82:2e:3f:0a:50:d2:11:b9:bb:99:5f:3b:d6:23:
b1:d1:48:04:b0:6e:15:ca:97:72:46:e1:ae:c2:22:18:1f:e4:
75:27:23:d1:f3:fb:29:24:4b:1c:d5:f4:79:b1:d6:90:c5:f9:
e2:07:e2:9c:9d:7f:dd:07:9e:2e:d3:76:c0:f4:da:37:90:fd:
96:f4:64:5e:f5:9a:11:0a:ed:15:45:fc:6b:40:fa:52:8a:4b:
fc:ff:88:b2:5e:30:03:48:2b:89:12:d9:08:88:6d:4b:bd:cd:
3e:1b:6b:75:47:1d:32:61:ee:d0:a7:0c:45:c9:38:6d:94:c1:
27:af:ab:7d:8b:43:17:ab:1f:d3:b8:51:79:86:9f:d5:1e:3f:
38:a8:bc:4d:1d:65:5a:e0:b9:0c:eb:ca:dc:0b:00:5d:31:53:
6c:19:fd:86:7d:fe:36:eb:9d:d5:16:2c:6f:ad:db:16:a2:9f:
6a:39:1e:0a:8e:a8:08:c4:21:c4:d2:02:3f:c0:cc:1f:b2:fa:
98:1f:d9:56:a9:18:23:d8:2c:2b:49:37:5e:7b:c9:ae:d9:4e:
66:44:8e:3d:ed:69:1f:e5:4e:f8:0f:98:8f:0f:d2:7d:1d:74:
f6:e6:f2:a8:80:e4:0a:1b:fb:67:15:a5:31:55:72:8e:d3:cc:
82:e5:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org