Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fLJNLLo8kiXzDOD3NIp6odqzNJs.roa
File: fLJNLLo8kiXzDOD3NIp6odqzNJs.roa (raw, json)
Hash identifier: CTWsGEs42g9O1HZhhTMswDkCL95rDkZ3xpefLjsDXjA=
Subject key identifier: 7C:B2:4D:2C:BA:3C:92:25:F3:0C:E0:F7:34:8A:7A:A1:DA:B3:34:9B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018502593C32555FD68F571B40FFAED86033
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fLJNLLo8kiXzDOD3NIp6odqzNJs.roa
Signing time: Sun 11 Dec 2022 18:01:20 +0000
ROA not before: Sun 11 Dec 2022 18:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 84.32.174.0/24 maxlen: 24
84.32.173.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.90.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:02:59:3c:32:55:5f:d6:8f:57:1b:40:ff:ae:d8:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 11 18:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cb24d2cba3c9225f30ce0f7348a7aa1dab3349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:0e:38:97:76:43:c7:ef:b7:3a:e6:c3:a8:
c3:33:0b:0e:60:fb:03:cf:69:8f:75:42:4f:b3:fb:
fe:f6:f3:a6:61:6e:b0:e3:52:bb:1c:0f:1a:14:8c:
87:b9:f0:8b:fb:2f:61:6c:4d:88:25:6a:0e:bf:be:
dd:27:26:d2:25:e1:23:ad:aa:76:86:0d:a3:8e:db:
d9:ce:b4:34:26:5a:6b:7a:9c:b3:64:ec:ed:bd:27:
1e:a5:9a:90:62:ef:b0:e0:16:83:84:ce:db:0a:61:
14:cd:46:61:20:6b:41:a8:1a:85:fc:9a:b2:0e:bb:
8b:b8:7f:9d:5a:c5:e5:40:27:26:c7:c8:eb:65:88:
76:9e:ff:f4:4c:b0:16:0e:38:27:8a:ff:f2:c3:46:
a6:b9:b1:26:88:f8:bb:17:ba:e4:1e:b1:1d:06:4b:
f1:e1:7b:db:61:63:d9:ac:18:b6:ff:1f:0b:dc:c9:
a5:62:89:eb:f1:e0:db:91:b8:22:cc:11:95:42:ba:
77:c2:64:73:1c:19:fe:5e:cb:cb:16:85:e3:8a:2a:
4e:04:7b:ed:8d:01:d3:3b:90:34:86:f6:6c:60:3c:
2d:ed:e5:da:c0:27:81:46:7d:e4:3d:ea:0d:19:2c:
06:9b:f9:e3:fe:c5:5a:00:a7:a6:67:68:5f:e7:9d:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:4D:2C:BA:3C:92:25:F3:0C:E0:F7:34:8A:7A:A1:DA:B3:34:9B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fLJNLLo8kiXzDOD3NIp6odqzNJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.173.0-84.32.174.255
84.32.223.0/24
84.32.240.0/24
84.32.249.0/24
84.32.251.0/24
88.216.90.0/24
88.216.181.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5b:6b:93:4d:61:a7:30:8c:65:38:e7:8c:12:d0:49:04:33:
ff:5b:e7:f7:a4:ca:d2:10:45:af:da:f9:05:28:c6:6f:17:15:
50:ee:47:0f:b5:ec:5c:46:7d:e3:08:e7:d6:64:96:d2:f3:07:
ea:ac:50:f3:42:92:61:63:09:46:08:6a:e2:b4:e5:68:73:7a:
95:be:a7:fe:ec:7b:51:14:b4:cd:d5:39:ec:7e:b1:70:0c:ac:
5c:1f:c1:2c:10:e9:ba:08:a2:7f:de:30:99:ee:b3:e1:d6:2a:
98:5e:e1:3e:45:42:c3:a4:01:fb:00:4c:b1:36:17:4a:45:05:
e6:f0:55:1b:22:64:1e:20:52:be:4b:7e:57:1e:fb:33:ab:e4:
d9:6d:03:49:18:75:0e:70:2c:ea:73:c0:4c:78:d4:60:cc:38:
1e:72:be:4b:2c:19:9b:9d:96:a0:5a:48:37:b1:6c:e6:d5:cf:
b5:29:2c:15:6c:69:9d:4f:47:e3:15:61:43:d9:4d:cc:62:fa:
7b:00:f5:8f:23:03:8d:ba:8d:d4:30:a7:25:ed:39:6c:d1:79:
2c:90:18:5e:57:32:aa:ae:51:0d:13:eb:55:78:77:a2:24:89:
46:50:6c:00:07:da:5e:0b:ad:5e:6d:f2:5f:38:7b:e0:23:65:
07:70:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org