Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f-dOG5RGgvEo1lbnLg6Mkj3A0qo.roa
File: f-dOG5RGgvEo1lbnLg6Mkj3A0qo.roa (raw, json)
Hash identifier: 8r6YnP/oakzdpK1xEYQP8bajfyO64wsCTd29ZTxNoH4=
Subject key identifier: 7F:E7:4E:1B:94:46:82:F1:28:D6:56:E7:2E:0E:8C:92:3D:C0:D2:AA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01882583
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f-dOG5RGgvEo1lbnLg6Mkj3A0qo.roa
Signing time: Sun 19 Jun 2022 18:17:46 +0000
ROA not before: Sun 19 Jun 2022 18:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60068
IP address blocks: 84.32.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25699715 (0x1882583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 19 18:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe74e1b944682f128d656e72e0e8c923dc0d2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:c7:74:96:38:8f:2d:dd:cc:74:d4:9b:85:
bd:aa:61:2b:54:88:d6:65:2e:17:a9:3a:34:94:31:
84:bc:52:65:38:6e:41:a8:d9:bf:d4:37:63:36:d8:
8c:b4:7f:85:17:37:9e:0d:00:29:4b:0c:69:b5:b2:
3d:bb:2c:c6:1a:fc:b4:80:64:6b:7f:a9:9f:a9:f6:
bc:f9:2e:6a:45:ff:a0:0b:d3:80:c9:e0:45:cc:d0:
ee:02:b3:d3:76:69:d0:98:f8:af:68:f5:ac:d9:bc:
40:f1:6e:c4:28:90:7b:9a:28:dc:14:51:f1:7b:46:
dd:16:b2:4a:e5:1a:39:8d:dd:fc:80:c8:49:ee:7e:
b4:d1:1c:e6:3a:dd:d3:77:19:27:55:8f:c3:e8:20:
84:c0:ed:3b:ac:29:8d:a3:47:df:cb:97:1b:27:9f:
8a:5d:06:3d:19:83:e1:90:70:e6:46:9f:c2:e3:bb:
fe:71:a0:61:20:24:63:4f:b0:4f:27:fe:eb:e0:6a:
b8:29:fe:ab:b3:36:a7:14:6f:60:40:89:d4:2b:cf:
87:ab:e6:ab:bc:51:83:1d:cc:74:ce:2c:9f:b8:be:
6e:b5:c8:1b:28:7f:9b:a8:57:81:c5:d8:f4:22:c4:
c3:9d:da:69:35:84:75:ea:d9:ca:43:ca:b8:65:90:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:4E:1B:94:46:82:F1:28:D6:56:E7:2E:0E:8C:92:3D:C0:D2:AA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f-dOG5RGgvEo1lbnLg6Mkj3A0qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
Signature Algorithm: sha256WithRSAEncryption
50:4d:a9:cd:26:da:ef:8e:98:c1:ea:9d:c2:dd:80:87:8b:0d:
0e:92:4a:db:7b:f6:5d:11:f2:3a:0f:ca:73:e5:28:fc:26:55:
1e:f2:cf:7f:1e:c9:6e:35:0c:f1:95:4a:33:f6:70:88:10:68:
85:cb:40:5d:32:c9:2f:22:37:ec:ff:7b:10:f1:c1:a7:f3:01:
bd:cb:31:a8:56:91:fa:46:8f:58:67:b2:8a:70:17:ee:d1:d0:
4a:bf:15:0d:eb:62:f5:a1:66:bb:1a:fa:c7:86:e8:05:d2:5c:
d8:f3:ef:f8:47:4a:17:b1:5e:86:9a:24:de:13:49:4f:b7:73:
5e:22:44:7d:6e:cc:75:cc:9d:75:4e:fc:3e:cd:63:18:62:e3:
dc:8f:bd:3e:62:87:60:40:c3:2b:03:7c:1a:d2:0b:ad:17:0e:
7e:b8:de:2e:c5:1c:6f:04:d2:2d:5b:f1:dd:7a:a9:05:b0:ca:
c8:f0:cf:be:f4:09:7d:ca:13:3c:f5:0d:57:9d:d8:97:ce:2a:
f5:e3:47:b4:3b:5d:f1:82:69:a0:b8:e9:82:5a:dd:39:8d:1d:
00:1b:11:55:ac:e2:ce:ba:00:42:f1:9c:7e:46:26:b4:4e:34:
29:58:57:e1:7d:e2:b3:19:ad:55:01:f5:c0:5c:ca:99:20:29:
cd:bd:d2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org