Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e6K5HX-GtZ1oo0aQc5pDyvnuahI.roa
File: e6K5HX-GtZ1oo0aQc5pDyvnuahI.roa (raw, json)
Hash identifier: cKPmuCOEqu3vKbO7zLF+BV7dFCCiv3aKW/UCSLd7cqI=
Subject key identifier: 7B:A2:B9:1D:7F:86:B5:9D:68:A3:46:90:73:9A:43:CA:F9:EE:6A:12
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184E3B51E3B6DF9D6BEA036E7973FE3F1A6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e6K5HX-GtZ1oo0aQc5pDyvnuahI.roa
Signing time: Mon 05 Dec 2022 19:13:28 +0000
ROA not before: Mon 05 Dec 2022 19:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 84.32.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:b5:1e:3b:6d:f9:d6:be:a0:36:e7:97:3f:e3:f1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 5 19:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ba2b91d7f86b59d68a34690739a43caf9ee6a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:ff:52:01:52:20:6a:36:ae:b4:ca:74:41:
69:13:35:c5:aa:89:ef:02:14:60:12:1d:e0:87:4e:
21:1c:67:08:47:c5:cf:23:b8:c4:21:b4:28:16:bd:
43:2d:91:74:7b:1a:24:c1:45:d9:f7:9a:04:7d:e7:
8d:c3:31:86:b9:39:90:d6:24:f6:5c:c0:b4:e5:0c:
a4:94:94:04:66:4f:87:8f:a5:81:9e:7e:10:d6:c3:
8a:0f:66:34:4b:9f:30:d4:b9:13:43:c6:45:83:30:
56:52:45:20:be:30:98:a1:e2:ce:0c:52:3e:6e:d5:
93:67:85:bd:dc:5d:ca:cc:a1:6e:d9:2b:fb:20:50:
d3:03:9f:af:95:24:cc:05:9b:c9:08:c0:90:1e:aa:
22:d6:23:e7:d7:e9:7a:6f:52:1c:38:91:3f:f9:a9:
18:e4:ac:89:91:e0:7b:6e:f5:2b:75:f4:55:80:03:
d0:d5:b7:c5:f1:00:fa:09:3e:0b:9b:48:70:da:a3:
4b:2c:cc:32:99:b0:1a:04:50:dc:bd:a6:79:ff:00:
59:2c:4d:d3:73:29:eb:ff:f4:00:c0:fc:a4:f4:d6:
77:e7:a6:70:36:d2:1e:37:2a:2b:d8:bc:dc:bc:d2:
32:fc:be:6b:09:ed:8c:59:76:16:69:69:70:19:37:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:B9:1D:7F:86:B5:9D:68:A3:46:90:73:9A:43:CA:F9:EE:6A:12
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e6K5HX-GtZ1oo0aQc5pDyvnuahI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.61.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e6:fd:9f:98:0c:f0:f4:b9:ac:e7:c4:4b:e5:08:fd:bd:41:
83:16:19:c7:da:2a:81:24:03:fd:df:0f:14:a7:49:d8:dd:52:
20:07:91:61:02:0e:2d:4d:52:ba:ca:66:ce:77:2f:fd:1b:7f:
fb:b3:b8:30:ba:59:48:81:7f:52:80:21:cf:fa:eb:58:c5:c6:
7a:37:49:07:b2:37:c8:d9:8b:63:30:49:7d:d4:0e:84:3f:59:
c0:83:2e:8d:cd:b1:95:72:94:ed:45:bd:a0:ec:ec:cc:eb:57:
79:96:f3:40:84:4a:99:98:9b:8c:82:4c:d0:08:98:ff:c4:c9:
40:10:cc:ec:df:58:a9:97:bf:79:7a:67:99:98:20:38:b8:d2:
42:67:cd:cb:83:cd:aa:3e:ad:0c:ff:72:6c:01:d9:df:4f:b2:
e6:13:88:03:56:a3:35:bd:6d:20:c2:07:95:2c:91:d0:11:73:
0d:93:98:18:a0:67:79:11:8e:0f:d0:c6:9c:14:a6:9b:cd:3c:
94:5b:5e:3e:9d:27:6c:01:03:a9:37:e6:55:60:6d:00:58:58:
3a:12:77:d1:3d:b0:18:af:10:f5:1d:a6:4a:36:ba:4b:c4:50:
3a:9a:63:d1:fd:62:40:50:59:58:fb:9b:92:54:1c:62:b9:ad:
a6:5d:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org