Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fQmFKAGKp27xGy6rM-STPsspql4.roa
File: fQmFKAGKp27xGy6rM-STPsspql4.roa (raw, json)
Hash identifier: UWX2Kae9AG5ho3EBaSPwqOQY8DNyOeYEjU8g64kqwB4=
Subject key identifier: 7D:09:85:28:01:8A:A7:6E:F1:1B:2E:AB:33:E4:93:3E:CB:29:AA:5E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184F61DDF9EBA60A538CED6443E7A08E05C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fQmFKAGKp27xGy6rM-STPsspql4.roa
Signing time: Fri 09 Dec 2022 09:01:03 +0000
ROA not before: Fri 09 Dec 2022 09:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 88.216.187.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:1d:df:9e:ba:60:a5:38:ce:d6:44:3e:7a:08:e0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 9 09:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d098528018aa76ef11b2eab33e4933ecb29aa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:ba:1e:38:22:78:37:f5:e0:db:3e:a9:a4:
bd:ed:41:6a:61:fe:cd:ae:9d:ad:8b:67:3d:50:4a:
3f:f4:4e:a4:59:0a:99:26:60:ce:f2:10:fe:31:94:
cc:9b:81:36:2b:48:8a:de:f4:28:7c:1f:a9:8f:70:
0c:b0:8c:bf:19:88:60:c9:34:91:bd:76:7b:3d:59:
09:32:a0:bf:6a:fc:99:8e:35:d5:00:03:61:f0:e1:
52:a0:7b:d9:07:60:74:c2:44:a3:68:1f:f1:35:73:
0c:86:6e:96:50:a0:ef:02:46:f4:e5:6e:af:7b:48:
5c:59:55:44:c3:68:36:fb:a3:de:55:c5:61:28:99:
4a:21:88:9e:f3:2e:1d:7d:c6:49:3f:6b:2e:9a:e8:
01:c0:1f:ed:99:e6:18:47:11:d9:05:33:ae:a2:fe:
e0:57:b9:6c:80:c5:10:b1:77:9f:30:6e:34:d4:4b:
dc:c6:8c:53:b3:3d:dd:66:67:8e:45:95:03:01:aa:
ee:88:85:63:62:7f:c3:85:01:cf:b2:8f:84:45:ac:
c4:e8:3b:c4:c8:f4:36:b0:8f:a6:03:9b:fe:e5:63:
aa:c9:cc:ab:73:e3:82:8b:b8:60:3a:4d:bb:40:c2:
6f:18:2d:73:ed:66:ab:a8:3d:5c:67:96:cc:5d:d5:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:09:85:28:01:8A:A7:6E:F1:1B:2E:AB:33:E4:93:3E:CB:29:AA:5E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fQmFKAGKp27xGy6rM-STPsspql4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.34.0/24
84.32.224.0/24
84.32.254.0/24
88.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4a:51:70:26:ef:29:47:e2:99:76:3e:a1:d3:de:48:59:73:
bb:5a:dd:f8:16:b6:c0:73:17:28:ce:0a:10:1d:e0:10:b8:1d:
95:6d:fb:dd:d6:86:ca:be:01:2d:60:f9:54:7e:e8:5c:6e:05:
57:bc:38:7e:35:1e:3b:ee:c0:82:16:fd:ac:6d:5f:1e:54:d1:
ed:d0:4f:fc:df:b1:cc:d0:21:60:14:4c:13:d6:8c:7f:8e:23:
ef:7f:5b:93:65:3b:87:ad:2c:5e:e4:56:47:7e:88:ff:bc:2d:
80:c2:05:29:6e:9b:d2:42:9a:d5:68:0e:46:f7:95:81:c0:57:
24:65:54:6c:95:b1:00:d2:b7:81:a7:c0:43:23:fa:e9:2e:6f:
38:04:42:29:ed:6c:71:a3:50:f9:f9:79:fa:7e:9d:0b:44:fa:
ec:61:e3:1e:32:e5:08:cb:8f:f3:81:35:66:f6:50:40:eb:2d:
4e:b3:11:4d:3e:96:33:53:70:43:e1:da:a1:33:fb:8f:56:86:
26:92:18:dd:07:e7:6d:07:42:df:42:84:63:a2:09:40:64:4c:
92:97:14:f8:2d:0f:be:77:9c:2c:f7:07:b4:21:5c:94:56:7f:
be:a6:7e:cd:3c:e7:ce:70:40:75:08:fa:cb:84:1c:6e:f7:be:
ef:02:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org