Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/igGVU8x2K7b4DmVvl3Nv11Pjd6E.roa
File: igGVU8x2K7b4DmVvl3Nv11Pjd6E.roa (raw, json)
Hash identifier: UPod1FM9ZdwvDn6dtuZa+8UdgnoBoAOeu3fqVwKWLMg=
Subject key identifier: 8A:01:95:53:CC:76:2B:B6:F8:0E:65:6F:97:73:6F:D7:53:E3:77:A1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A0E0A8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/igGVU8x2K7b4DmVvl3Nv11Pjd6E.roa
Signing time: Thu 30 Jun 2022 14:58:02 +0000
ROA not before: Thu 30 Jun 2022 14:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51358
IP address blocks: 84.32.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27320488 (0x1a0e0a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 30 14:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a019553cc762bb6f80e656f97736fd753e377a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:83:8a:b4:30:da:6e:d4:68:13:b4:11:0c:
01:d2:a5:30:e1:5d:3b:00:95:a8:8d:9b:ed:f8:65:
c1:f7:c6:a8:46:78:c0:4a:8d:55:6a:6e:bd:ac:87:
06:2c:1a:66:95:d6:1a:87:43:e0:49:f3:1a:cb:d1:
00:e1:ca:49:9e:6f:66:2e:10:4e:30:27:55:d7:76:
10:3c:b0:a8:2e:6e:5d:77:59:39:ba:01:d7:ff:0d:
34:a6:9b:74:6b:ba:ae:91:4f:dc:0d:61:8f:31:e2:
40:7a:21:15:5f:e4:b3:b8:f3:20:eb:57:84:ce:96:
f2:bb:84:6e:09:14:48:2e:55:ed:36:2e:36:fd:c4:
09:f4:9e:fd:ed:22:85:16:25:e0:be:66:eb:29:a6:
24:be:b6:72:c8:bd:57:70:2d:99:11:a9:9b:4c:78:
43:51:b3:42:a3:a5:51:a7:e2:7a:67:72:94:cf:68:
96:42:af:a6:d2:c0:5b:0e:13:84:ed:6d:6d:f3:2f:
7a:8b:46:dd:6e:2f:e5:cd:22:6b:db:4b:4a:af:23:
ed:f7:fa:83:3b:77:e7:24:20:c5:79:32:9c:22:c7:
bb:60:3a:f3:d7:15:da:a6:a4:86:d5:1e:ae:06:36:
9d:9c:40:43:c2:aa:ea:33:01:9e:78:85:41:de:c9:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:95:53:CC:76:2B:B6:F8:0E:65:6F:97:73:6F:D7:53:E3:77:A1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/igGVU8x2K7b4DmVvl3Nv11Pjd6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.33.0/24
Signature Algorithm: sha256WithRSAEncryption
31:90:34:1b:1d:4f:72:f4:c2:51:f3:01:bc:04:af:e0:da:89:
08:b4:d9:67:0c:92:ee:71:51:8a:25:1a:3a:d6:1f:9f:01:d5:
08:80:af:aa:4b:b6:33:b2:3e:af:fa:b4:69:74:a1:94:3d:dc:
4a:71:5f:12:95:cc:bc:b4:cf:5d:57:25:b0:b4:fe:ff:45:dc:
f6:da:39:d7:83:53:83:af:cf:4e:f3:3b:a5:82:3b:47:07:2b:
f0:af:82:d3:ba:33:69:d4:63:1e:0e:c9:67:da:f8:e0:7f:46:
71:57:7b:37:b6:15:34:5a:8f:cb:fc:aa:6f:48:3e:9d:0b:a3:
c2:53:80:ce:7d:01:f7:53:57:d1:46:d9:3d:ec:82:bd:da:f8:
35:a3:e6:82:f7:3c:01:fc:be:65:3e:d5:22:39:c4:ff:ed:71:
5f:3a:3b:8b:10:ce:17:d6:41:de:5d:78:32:16:ed:11:75:a8:
a2:3c:c0:84:db:ab:10:6a:2e:ce:82:bb:d1:ba:b2:42:37:75:
48:33:56:51:42:e6:da:05:52:1f:98:2f:fe:07:c7:06:24:7d:
f9:36:41:ec:95:a4:5b:95:c3:8a:1d:6d:10:79:06:8b:b4:f7:
4a:e5:38:78:cd:88:e4:12:e1:d5:73:db:81:df:75:77:77:b9:
89:a1:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org