Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cahAjUYV1VoD43I3MusE06PmT20.roa
File: cahAjUYV1VoD43I3MusE06PmT20.roa (raw, json)
Hash identifier: CGWzJhpfUzfUJpUVCXksnMUC8krgcP+nq9Td2ZfS9cE=
Subject key identifier: 71:A8:40:8D:46:15:D5:5A:03:E3:72:37:32:EB:04:D3:A3:E6:4F:6D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01850AAAF13B650B322876CC2592DAD24E86
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cahAjUYV1VoD43I3MusE06PmT20.roa
Signing time: Tue 13 Dec 2022 08:47:33 +0000
ROA not before: Tue 13 Dec 2022 08:47:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 84.32.174.0/24 maxlen: 24
84.32.173.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.90.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:aa:f1:3b:65:0b:32:28:76:cc:25:92:da:d2:4e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 13 08:47:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71a8408d4615d55a03e3723732eb04d3a3e64f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a0:db:75:d0:e4:c6:87:20:10:9e:73:6f:c4:
e3:bd:25:a3:f2:65:08:8e:24:60:fa:6c:f2:ee:b0:
7e:85:e4:83:fe:75:17:96:2c:32:80:9d:f2:b3:89:
8f:97:e5:85:5a:3f:12:ca:58:b3:10:51:55:62:4d:
0c:d2:4c:64:0c:b4:43:c6:82:ae:ca:0f:c5:0b:26:
93:43:5c:e1:00:81:d3:5e:f8:54:9f:f3:ac:f0:63:
db:75:33:27:92:9a:c8:15:b7:55:13:e1:b0:1c:ad:
87:69:0b:f6:c0:b0:d1:be:51:de:6e:f3:10:98:c1:
3e:af:b5:19:e9:8e:06:e6:75:7d:98:98:0e:0f:fc:
6b:7e:1d:f4:24:ba:19:b8:ff:1f:c2:1a:b5:fa:c1:
52:40:61:da:21:1c:b7:ae:b2:5b:9b:84:b5:b4:01:
de:a0:53:5f:28:b1:48:60:44:a4:20:c8:64:7d:dc:
ed:b0:ef:72:68:b7:da:f0:c6:c8:8f:6d:e3:93:ab:
d3:e6:7b:fe:15:ec:b4:1a:d2:21:6f:aa:ba:d0:ff:
79:71:85:91:db:83:24:a4:86:7f:ec:af:63:b5:bf:
8c:69:6e:c7:19:c3:33:e9:df:18:21:cd:ae:c4:93:
5c:6f:07:ee:9b:c4:b3:9e:c6:11:9f:1d:69:e0:cf:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:40:8D:46:15:D5:5A:03:E3:72:37:32:EB:04:D3:A3:E6:4F:6D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cahAjUYV1VoD43I3MusE06PmT20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.173.0-84.32.174.255
84.32.223.0/24
84.32.249.0/24
84.32.251.0/24
88.216.90.0/24
88.216.181.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b5:e2:b1:ab:30:f1:c9:12:ba:29:75:33:2b:2d:11:75:8f:
54:d3:ab:f4:63:0e:5e:41:b3:6e:1b:e2:d8:62:30:18:d5:69:
67:32:f3:b4:01:e2:df:92:c2:77:67:27:33:bf:d6:6e:0c:f6:
79:6c:bf:92:d6:10:f8:e8:06:a8:d5:a3:04:f2:eb:fc:1d:22:
7b:bc:8a:68:b8:ab:78:20:db:35:16:a7:b2:28:0a:78:93:e3:
da:2f:72:ef:26:f6:e6:2d:cc:0a:17:b2:20:39:ea:ee:e2:47:
ad:94:de:5a:32:50:18:df:8f:9b:fd:dc:ea:db:b2:c5:ae:75:
e4:94:16:83:f5:da:96:2f:49:0c:05:80:6e:b0:bc:c8:e6:4a:
26:a6:b7:94:89:86:0d:79:b2:d2:5f:bd:22:3f:d2:8a:90:a8:
f6:6d:cb:c4:8e:c4:56:55:d3:09:1b:ec:e7:d3:3a:90:15:b0:
55:f4:82:e0:95:29:03:91:62:04:51:d8:97:e9:f0:a9:e8:a3:
53:24:bd:c3:6b:d0:7e:ea:ac:89:50:7f:fd:06:02:7f:46:0b:
f2:ea:8a:fb:7d:ee:cd:0f:82:db:38:0c:d1:5c:71:d4:6b:b8:
38:5e:39:7e:1e:a1:80:d1:22:b3:8a:d9:5e:e4:55:52:82:36:
4d:e2:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org