Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cSOuz3M8d7sg7XM_7OuKD0xYxLk.roa
File: cSOuz3M8d7sg7XM_7OuKD0xYxLk.roa (raw, json)
Hash identifier: FEESl6iFkyjFNePcMFlAdyPiadB1OVKwfmI6Q7CacVI=
Subject key identifier: 71:23:AE:CF:73:3C:77:BB:20:ED:73:3F:EC:EB:8A:0F:4C:58:C4:B9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 8320F2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cSOuz3M8d7sg7XM_7OuKD0xYxLk.roa
Signing time: Fri 01 Apr 2022 19:32:52 +0000
ROA not before: Fri 01 Apr 2022 19:32:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 84.32.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8593650 (0x8320f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 1 19:32:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7123aecf733c77bb20ed733feceb8a0f4c58c4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:5d:fd:35:d7:6c:e5:db:74:99:f7:31:4b:
cc:7d:72:c1:ad:d8:91:a1:ec:af:d4:be:1d:1c:73:
8c:5a:39:7e:71:5e:27:6e:77:27:14:a6:41:28:8f:
bf:70:b6:53:e3:5b:87:12:6a:de:c8:ea:05:f7:c2:
01:9c:83:95:cb:9c:9e:80:cb:91:1f:53:ed:66:ca:
00:a4:9b:01:7f:7b:ca:94:ba:b6:f1:9c:7d:89:82:
ba:1d:45:28:c7:68:c6:53:08:a3:1a:ae:d5:30:ee:
b2:b3:2c:fe:cd:91:0f:41:a0:63:31:b2:5f:9f:dd:
3a:88:f9:e7:52:9f:bc:25:a4:e4:15:44:61:e3:5a:
18:d2:f8:16:39:bb:a5:b8:5c:ce:27:bc:b7:7d:ce:
0f:86:d2:33:ef:d4:81:dd:d1:f4:8e:0c:35:2a:70:
fd:a9:9b:ed:84:c8:be:da:e0:e4:c6:96:aa:9c:11:
3e:15:1a:07:3a:7b:aa:d9:54:0f:f6:a4:59:48:37:
84:4f:84:f9:db:23:29:a4:47:be:0b:43:0f:75:34:
fa:8d:8c:4a:fc:f0:6c:83:fe:d0:3e:5e:0d:46:3c:
66:69:fa:b8:5a:1c:55:63:74:bd:73:f1:25:ab:ee:
e9:84:f1:03:5c:66:61:09:c2:b6:6c:cf:ec:cf:ce:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:23:AE:CF:73:3C:77:BB:20:ED:73:3F:EC:EB:8A:0F:4C:58:C4:B9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cSOuz3M8d7sg7XM_7OuKD0xYxLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:f5:d0:70:89:80:61:6f:57:04:37:78:7c:69:12:12:11:62:
47:38:85:db:35:08:f6:c2:6a:d2:50:d5:14:51:56:76:b4:f9:
42:a9:02:11:43:13:d0:1a:86:9f:f0:61:03:d7:94:f5:54:b8:
33:f3:1b:6a:d5:7a:1e:16:9d:11:f7:6e:9d:ec:84:c6:c7:38:
ce:ae:a7:37:8e:c4:41:8f:0c:fa:ee:cf:84:17:cf:0d:37:21:
85:0c:d3:ef:4b:dd:61:9f:d0:00:1c:2f:7b:e6:fb:ad:3e:01:
e3:49:79:be:65:b3:6f:72:a5:d1:4b:c5:f6:2d:68:fb:bf:b5:
ae:e1:3a:0e:5b:1d:fb:c8:80:a4:b3:b8:23:41:78:b0:ed:51:
0f:15:1b:f8:e5:a2:97:49:e5:c6:9c:95:be:28:e6:63:59:bd:
44:2c:43:9f:ac:88:0a:8a:06:be:e6:47:ba:54:b0:c5:a0:ec:
37:d1:1a:62:6b:04:1b:31:98:59:85:66:0b:8b:31:0a:b4:34:
f5:96:93:7c:f0:3f:b6:ab:87:19:9f:ed:ae:f7:7e:f6:28:43:
1f:1b:2b:75:d0:cd:4c:c5:72:fd:a9:78:66:ea:3a:17:aa:64:
f7:20:a1:e6:33:59:83:fb:57:9d:b0:72:32:aa:04:71:02:0e:
4f:e8:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org