Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fg16YAGR5VcjAEwLpXq3VDghdOw.roa
File: fg16YAGR5VcjAEwLpXq3VDghdOw.roa (raw, json)
Hash identifier: nm5h/KHTsKe+XvJf1pUjcoj1W3onkEjh2WZ5e1vdcZk=
Subject key identifier: 7E:0D:7A:60:01:91:E5:57:23:00:4C:0B:A5:7A:B7:54:38:21:74:EC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01848B85DC6A8CD16BA0896D6D68576744F0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fg16YAGR5VcjAEwLpXq3VDghdOw.roa
Signing time: Fri 18 Nov 2022 16:15:16 +0000
ROA not before: Fri 18 Nov 2022 16:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 84.32.235.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:85:dc:6a:8c:d1:6b:a0:89:6d:6d:68:57:67:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 18 16:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e0d7a600191e55723004c0ba57ab754382174ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:c1:d9:57:59:fc:03:e9:3a:2e:e5:87:6f:
af:94:9c:ad:bf:4b:d7:d2:71:88:c1:a7:fe:08:f0:
61:d7:a6:3a:db:17:87:de:e8:39:b5:27:43:6f:cd:
ed:6f:86:19:85:dd:72:44:2b:8d:f4:2b:cd:02:ad:
b8:a6:df:14:81:e7:ec:18:46:60:a1:b8:ce:ea:e5:
e0:16:42:80:65:76:26:fe:54:e2:49:9f:ab:d9:47:
e7:c5:9e:f9:dd:ca:35:ce:32:c7:ba:b4:05:f6:59:
3d:7e:38:69:05:0f:13:6e:fb:a0:fe:32:b2:93:b0:
da:49:ae:a7:d7:8a:c4:6c:48:47:e8:24:aa:0e:e8:
9f:d9:a1:aa:05:a2:03:57:31:61:ac:fb:d6:d3:b7:
68:dc:5c:67:9e:f3:e7:2c:be:d2:1d:b2:f5:4d:5b:
57:bd:b5:9b:1e:57:7e:cd:df:a1:b1:97:03:da:96:
84:c1:39:6e:60:51:c9:b7:d1:13:13:23:53:71:46:
9a:57:e8:b8:40:e8:c7:9b:a0:c8:a9:e9:a2:b7:b0:
e2:f2:cd:c1:23:13:37:2f:18:85:4a:98:8b:16:f2:
76:93:1f:91:c2:1c:50:10:9d:cb:4e:60:25:12:37:
88:a0:42:40:22:ab:cd:83:c6:4d:97:fb:2f:a1:01:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0D:7A:60:01:91:E5:57:23:00:4C:0B:A5:7A:B7:54:38:21:74:EC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fg16YAGR5VcjAEwLpXq3VDghdOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.235.0/24
88.216.35.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b6:30:91:54:e7:d4:ac:ce:ac:da:87:2c:ab:28:35:a3:43:
ee:7d:86:d2:23:45:64:4e:35:5b:40:4d:a1:a3:1f:f1:54:ac:
47:b6:dc:26:4b:8b:87:e7:ff:89:19:82:31:8c:a8:1a:f6:87:
b2:b4:02:05:49:e6:38:39:be:82:8b:5f:33:75:e7:e0:ed:19:
8e:8f:94:c3:a1:c7:1f:00:65:bc:b2:e6:cf:4e:3c:03:d2:00:
e7:7d:86:e8:35:2d:b8:eb:19:51:71:0c:b9:35:5d:d9:df:45:
03:f8:29:b7:f4:cb:d4:69:69:26:40:1e:92:87:0d:72:04:2a:
21:bf:05:a4:2c:84:65:51:ed:f2:f3:4a:2f:36:24:6a:8f:5d:
ae:81:e5:0a:3b:40:0d:03:4f:9d:e0:5a:04:db:59:9d:01:f8:
ea:e5:2e:14:0b:bd:a0:9b:b0:0a:b1:d3:53:1e:5d:f8:56:da:
dc:b3:6f:df:b2:1a:8c:89:a2:de:77:19:b9:22:31:ce:fb:1f:
61:1b:68:5c:59:a1:a8:69:46:d1:2d:7a:9a:68:a4:57:d9:41:
e7:4f:5f:0a:de:4c:ba:17:40:60:78:e4:e8:13:79:79:a7:c3:
f1:92:63:98:ab:cb:96:4c:e6:f6:62:05:96:88:f6:95:a7:9f:
4e:be:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org