Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e3jrEtepmU_ZeC8uHJvp2aDO7qg.roa
File: e3jrEtepmU_ZeC8uHJvp2aDO7qg.roa (raw, json)
Hash identifier: t8zxor82F60xd78aNE6JCM5FVbHiPkn/THcbNHxAecA=
Subject key identifier: 7B:78:EB:12:D7:A9:99:4F:D9:78:2F:2E:1C:9B:E9:D9:A0:CE:EE:A8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01841080E2F25B251E65B58D8E39B3D735BB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e3jrEtepmU_ZeC8uHJvp2aDO7qg.roa
Signing time: Tue 25 Oct 2022 18:56:32 +0000
ROA not before: Tue 25 Oct 2022 18:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:80:e2:f2:5b:25:1e:65:b5:8d:8e:39:b3:d7:35:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 25 18:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b78eb12d7a9994fd9782f2e1c9be9d9a0ceeea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:75:57:f7:96:0b:31:e4:94:92:7c:c0:3e:
7e:1b:73:11:8b:4c:38:5c:ac:53:01:ac:60:cf:e4:
4f:0a:87:16:b2:75:16:b8:e1:ff:07:74:87:9a:27:
a7:66:b7:74:bf:9b:0b:d0:7f:32:cc:8f:e6:a5:fb:
a1:9c:4f:c9:42:1d:1f:a2:ce:8d:1d:ca:d2:ce:dd:
7f:91:34:28:de:c8:7e:7c:6c:2c:9d:9c:b0:43:24:
cb:f1:78:92:44:7c:99:39:ee:3f:a3:84:db:f2:a7:
52:c0:7f:d7:d9:fd:af:d6:d3:40:8a:9a:e1:85:00:
e5:37:99:2c:84:b2:64:66:e8:ca:35:b9:11:d8:2b:
20:ea:9a:48:5b:73:db:9c:3a:d4:94:37:ca:87:16:
50:1b:e1:fd:30:74:d1:51:8a:2d:ee:71:b0:d7:f9:
96:9e:b6:43:d5:47:44:eb:dd:e6:eb:36:1f:fb:d5:
23:36:a0:58:2c:eb:eb:cf:b0:7d:7f:40:ff:12:a6:
11:52:a4:72:da:27:6b:72:96:18:2c:ae:b6:f1:66:
d8:d8:6a:8a:c8:6b:12:46:5a:05:c9:5d:40:c1:b1:
83:70:61:e9:5b:99:bf:a1:71:e3:22:05:b9:b4:f6:
b5:6b:d5:f6:46:f0:ff:2e:45:8f:74:a6:c2:ab:08:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:EB:12:D7:A9:99:4F:D9:78:2F:2E:1C:9B:E9:D9:A0:CE:EE:A8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e3jrEtepmU_ZeC8uHJvp2aDO7qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
Signature Algorithm: sha256WithRSAEncryption
62:55:fd:0b:b3:aa:d4:08:fd:10:d8:68:ef:b0:c1:8a:48:2c:
a0:a1:5d:c3:2f:8e:7a:23:18:4e:a0:c0:74:e1:47:6e:32:f3:
e2:20:c5:16:1b:63:3c:8b:7d:8e:85:34:d9:cd:6b:db:f4:be:
f6:31:64:29:6a:5c:c6:19:95:73:84:1f:9c:2c:6d:f6:a0:46:
7d:a0:fc:fb:8e:d0:c5:72:3a:2f:64:37:10:2f:48:9e:c6:7a:
af:ce:a1:0d:9e:73:3d:76:f4:a2:fd:92:69:da:16:69:1d:90:
1c:98:a0:22:ca:12:a9:94:4e:6c:5a:39:55:40:a2:c9:06:3c:
5e:ac:9b:d0:d0:5c:4c:a8:99:a9:4d:6e:e9:6d:66:6a:42:0b:
0b:3b:9b:9f:d4:c4:0e:e2:21:f0:28:27:cd:b3:99:96:b1:35:
79:43:ae:0f:d8:49:79:1d:60:fd:6e:4f:e3:01:47:a3:23:c6:
09:12:01:72:ee:33:28:5a:36:52:3a:85:69:c3:c7:4f:24:16:
05:c0:20:25:ab:b7:d8:d7:2d:17:09:64:22:c1:55:83:91:ea:
b4:91:d4:f8:ec:37:2b:8b:d5:42:1b:b0:cc:52:c5:fe:ca:f4:
77:41:29:28:e7:e3:72:75:85:26:54:8b:02:2c:2f:5e:f4:96:
0c:c9:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org