Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bdXUTxP1U58DrH8POyDvi3nof3w.roa
File: bdXUTxP1U58DrH8POyDvi3nof3w.roa (raw, json)
Hash identifier: A5yTExNnijbGbCfEGJISn2bdoXDpmlnQngx9KzOhXOg=
Subject key identifier: 6D:D5:D4:4F:13:F5:53:9F:03:AC:7F:0F:3B:20:EF:8B:79:E8:7F:7C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184AF37AA54B5963FBCB0D0349BE9915473
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bdXUTxP1U58DrH8POyDvi3nof3w.roa
Signing time: Fri 25 Nov 2022 14:36:11 +0000
ROA not before: Fri 25 Nov 2022 14:36:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.59.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:af:37:aa:54:b5:96:3f:bc:b0:d0:34:9b:e9:91:54:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 25 14:36:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dd5d44f13f5539f03ac7f0f3b20ef8b79e87f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:21:17:48:6a:16:47:c3:99:ee:26:6a:de:
15:95:a6:c8:f9:e7:27:bf:98:b9:ce:6f:eb:b6:6c:
14:6e:f2:46:d6:50:dd:fe:1c:c1:39:50:cc:59:d6:
f9:3a:ac:65:40:17:48:a7:58:7b:3f:9b:10:f8:44:
4c:6d:19:f8:ed:41:e9:c0:de:2e:dd:3e:2b:d6:6b:
3c:c7:71:c2:23:47:c5:c4:23:ee:c4:bd:02:20:8a:
f4:20:c2:ec:c3:f0:9c:43:b1:79:e2:e7:4a:31:da:
ff:50:9f:e4:be:52:7c:d9:5d:fd:7b:81:f8:e9:4f:
fa:ec:9b:54:57:9c:76:25:da:9b:db:d3:17:93:2f:
0f:f0:c6:30:9e:f4:af:87:72:46:54:50:c8:82:be:
56:06:6e:bb:31:e0:27:a7:87:c2:16:d3:d9:cf:41:
12:1c:d1:c6:ba:11:d9:2f:34:c8:09:25:04:ea:f4:
5a:76:0d:50:91:51:18:ad:7f:bc:44:99:7b:07:42:
60:dd:15:20:4b:d7:98:dd:a2:bb:5e:d1:d8:40:11:
1d:68:a6:0d:eb:8d:38:17:99:f5:d1:79:01:26:3f:
25:59:c8:4b:7f:70:e9:56:f8:f0:9f:95:36:33:8c:
c4:a1:9b:9b:d8:f3:29:c8:cf:2d:a3:41:01:23:a1:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D5:D4:4F:13:F5:53:9F:03:AC:7F:0F:3B:20:EF:8B:79:E8:7F:7C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bdXUTxP1U58DrH8POyDvi3nof3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.45.0/24
84.32.59.0/24
84.32.95.0/24
84.32.228.0/24
88.216.34.0/24
88.216.36.0/24
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ad:4d:0c:00:28:77:98:f9:13:dd:9a:91:cf:96:ab:f9:7b:
13:ef:78:c3:ff:b8:0f:d0:85:9b:d0:ee:1b:f7:07:d3:fc:31:
c3:1d:5e:91:32:31:ed:a2:30:b5:f9:2e:f2:01:14:02:62:0c:
35:74:63:82:8a:72:ee:d4:70:24:76:e9:3c:e9:e1:9b:ea:f3:
f1:c4:6d:b2:93:6a:8e:1f:c9:84:ad:c5:fe:38:22:f2:64:54:
52:d6:2e:9a:70:ab:cc:d9:2f:da:68:f3:ea:75:53:19:eb:d0:
09:9d:4d:83:ab:c1:61:f0:87:d4:5e:aa:4b:59:06:6e:06:45:
ea:b7:a1:f2:7b:97:1c:e5:3a:b4:ad:3e:a2:fa:fc:91:4e:e5:
88:f6:f9:aa:a8:f9:9f:fb:71:df:9b:89:f2:d0:ca:d6:2f:09:
bf:49:10:76:25:71:0d:b6:34:71:62:34:77:61:9a:e9:4f:51:
a8:27:cb:07:50:22:6c:a3:71:ee:e2:87:e4:2f:ed:9e:c5:30:
a9:e9:d2:46:df:7f:72:f7:c2:87:0b:a6:c1:f4:6c:51:0e:c0:
9d:ba:f6:44:a0:91:88:09:35:7f:1b:f4:87:4c:a1:de:8f:e5:
84:1a:62:04:36:1b:1e:bc:ce:9b:53:63:6a:84:7e:28:ba:37:
4c:9b:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org