Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fKO_tnn-FdDY4nxu3mZ3H9Zh6i8.roa
File: fKO_tnn-FdDY4nxu3mZ3H9Zh6i8.roa (raw, json)
Hash identifier: Goy888m1dtMr/VIplRIIVIQW7KetghWK2meu4ynnTUs=
Subject key identifier: 7C:A3:BF:B6:79:FE:15:D0:D8:E2:7C:6E:DE:66:77:1F:D6:61:EA:2F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01853DD51E8EB7116BB1A61C18D5EF3B9A14
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fKO_tnn-FdDY4nxu3mZ3H9Zh6i8.roa
Signing time: Fri 23 Dec 2022 07:14:15 +0000
ROA not before: Fri 23 Dec 2022 07:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
84.32.230.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3d:d5:1e:8e:b7:11:6b:b1:a6:1c:18:d5:ef:3b:9a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 23 07:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ca3bfb679fe15d0d8e27c6ede66771fd661ea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:5b:26:89:57:73:2a:0b:18:20:11:bf:4a:
55:04:38:90:80:15:d5:79:69:98:b1:a9:8a:9b:6d:
8c:db:37:04:ff:01:49:c6:ce:ad:a3:16:73:dd:aa:
27:b8:26:1e:a8:0d:f4:7b:69:95:81:38:3a:e3:52:
15:78:d0:a1:ec:e1:2b:f1:3b:76:21:ae:dc:51:cc:
5d:5d:70:a7:ce:31:fc:7d:7f:88:04:3f:be:d4:63:
ed:ea:18:15:d7:7c:6d:2a:59:72:83:8a:4a:2c:87:
16:f0:05:06:ca:28:91:6d:fa:da:bf:68:ab:86:ab:
bd:f8:33:92:39:5f:96:33:c3:2b:51:05:58:99:06:
37:a8:39:3c:62:d1:b2:69:ef:5d:a0:43:2c:62:c0:
c2:1c:fb:57:34:00:5c:77:35:d4:c2:68:a0:b1:ae:
7e:72:1d:22:0e:a4:e5:2d:0b:4c:73:8e:9c:a4:20:
0c:35:73:20:c7:2d:8c:18:4c:d6:2a:cb:76:dc:50:
46:b4:d3:87:c1:ae:a0:c4:aa:54:bc:8a:1a:d7:91:
7a:9f:5e:7e:fb:aa:fd:80:51:88:e1:ff:e4:67:8d:
c3:b4:1a:12:cf:3e:6a:0f:d5:d4:98:f8:6d:90:38:
66:f5:a8:d3:fd:b1:d0:8c:40:5b:46:bd:3f:d5:d3:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A3:BF:B6:79:FE:15:D0:D8:E2:7C:6E:DE:66:77:1F:D6:61:EA:2F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fKO_tnn-FdDY4nxu3mZ3H9Zh6i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.56.0/24
84.32.63.0/24
84.32.95.0/24
84.32.230.0/24
88.216.1.0-88.216.2.255
88.216.34.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
73:32:e4:29:9b:ef:5e:50:d6:bb:4d:56:66:bc:4f:71:ba:cc:
11:6c:bf:b8:51:25:7c:ab:12:8a:df:84:ac:db:4d:79:79:fe:
d9:dc:d4:15:42:0d:d0:ba:7e:2a:46:da:e1:dd:78:2d:f0:23:
db:cc:be:c2:3f:2c:96:15:88:3b:14:b5:50:3d:6d:85:68:5b:
0f:2c:6b:a2:9b:7a:8a:e9:b6:07:a7:41:23:d0:9e:55:6d:d9:
96:8f:d6:7f:73:bd:5d:bc:c9:65:a0:ce:f0:37:ab:98:4a:d7:
d0:70:ee:bd:0c:98:c9:f7:a9:35:7a:1c:19:3b:e7:53:02:78:
8d:6a:a0:e0:70:52:08:7e:13:7d:ec:77:ac:e9:52:98:f9:b4:
04:66:cf:47:96:36:dc:8e:3a:95:7a:99:8b:e6:04:c2:45:14:
16:92:28:11:67:e3:2f:5f:c0:58:b4:03:7b:84:2a:65:f9:81:
29:82:df:79:b1:fb:a3:ed:6d:ec:80:4d:19:66:72:61:ee:e1:
bd:15:44:3e:03:fc:0a:f9:f0:e3:19:a1:52:a1:c8:28:e0:fc:
02:a1:0c:7a:7b:42:14:e0:b6:17:15:78:d6:d7:70:6b:eb:6d:
ab:ae:53:90:cb:92:ac:87:16:e4:0e:a1:e8:e2:98:3d:45:6f:
31:41:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org