Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gMg9cc9hXWhjg-N6LG5DxRiqVUE.roa
File: gMg9cc9hXWhjg-N6LG5DxRiqVUE.roa (raw, json)
Hash identifier: 3QFvBskzzBAWI57X//VzE0K0KxdX6dyMCMHvnA1d9PA=
Subject key identifier: 80:C8:3D:71:CF:61:5D:68:63:83:E3:7A:2C:6E:43:C5:18:AA:55:41
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184F5CD42E64005314CF5B2D5BECEE02C54
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gMg9cc9hXWhjg-N6LG5DxRiqVUE.roa
Signing time: Fri 09 Dec 2022 07:33:00 +0000
ROA not before: Fri 09 Dec 2022 07:33:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 84.32.172.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:cd:42:e6:40:05:31:4c:f5:b2:d5:be:ce:e0:2c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 9 07:33:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80c83d71cf615d686383e37a2c6e43c518aa5541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:0e:d1:71:69:98:69:33:6d:c2:eb:bf:94:
b1:90:c0:5b:f5:fd:ec:4c:6c:8a:04:21:1c:fc:fe:
03:b2:d5:00:9b:d4:3f:a2:e3:4b:29:5f:fb:c6:b1:
5a:d7:8a:94:29:5f:ee:9a:f3:6b:59:4b:85:1d:cb:
f3:de:3c:d0:0d:a8:20:9f:fa:fc:f4:a4:f2:6b:6d:
21:7d:bf:c5:ff:f2:9b:23:1f:62:0f:ec:87:e4:16:
07:66:72:fa:5a:ef:fb:88:9f:0d:b9:a6:61:c7:4d:
84:e5:38:97:79:64:cf:4e:7d:d2:2c:74:25:1d:ac:
90:1b:22:c5:3d:4d:99:9d:e6:dd:b3:eb:32:80:42:
92:15:52:1b:a6:67:36:a4:b2:84:d8:77:8e:01:59:
c9:87:14:55:77:c9:ab:4f:97:2d:1e:39:c5:43:a4:
90:57:20:4d:ff:07:1e:61:a8:4b:4f:5f:85:a3:76:
17:ec:78:59:24:b8:0d:1b:ef:4e:90:bc:4c:90:a8:
99:c0:62:9d:b7:32:7a:3e:de:3d:aa:f5:bb:36:76:
3e:77:48:f2:ce:76:78:bd:59:d9:c9:24:fb:e6:7b:
97:0a:1d:d9:e1:e5:e4:75:2b:61:0a:43:7f:30:53:
fc:b1:d1:7c:19:a0:d6:03:28:76:64:66:77:61:f2:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C8:3D:71:CF:61:5D:68:63:83:E3:7A:2C:6E:43:C5:18:AA:55:41
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gMg9cc9hXWhjg-N6LG5DxRiqVUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.31.0/24
84.32.89.0/24
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.23.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c1:0a:dd:20:71:2c:c1:de:65:71:16:75:d1:ec:b7:95:3f:
03:12:05:0d:ac:fc:cd:82:bd:7d:43:13:d3:b8:ec:11:00:11:
e2:84:46:d9:67:e2:d9:e1:ac:c5:12:06:84:5f:5b:57:6e:f2:
76:6a:9b:10:b8:87:9d:a5:b1:27:41:d1:75:d3:22:ae:0a:d1:
57:e1:6a:f8:05:af:c4:c0:57:65:99:79:07:98:78:58:73:c6:
cb:87:2d:87:40:e4:5f:e2:0d:ec:d3:8c:b5:93:ce:96:a3:6e:
e3:a4:95:28:1a:9d:51:02:19:80:7a:96:53:61:f9:e2:45:c6:
05:8e:f4:e8:f1:2a:64:58:55:aa:f8:d5:70:8d:fb:31:9f:f3:
15:9f:76:52:80:d8:d5:eb:6b:fc:7a:f1:f3:59:45:e3:c6:5c:
14:8e:be:8f:09:2c:89:0a:36:f6:11:67:65:ac:bd:dc:0b:af:
5e:34:fe:b8:3b:5e:4c:35:ac:9b:10:92:dc:ec:9b:67:12:95:
a5:6e:e5:d9:5e:0e:81:62:b4:80:cd:13:0d:b1:17:70:a2:16:
b1:64:97:a9:f7:55:03:a9:b3:80:ea:d5:49:06:a4:33:08:35:
ba:ce:00:ae:e2:ef:cf:db:0a:82:46:0f:6a:a8:e5:d2:64:ec:
93:5a:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org