Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k55wKNemC9mfmuwNFKWABaHb4kM.roa
File: k55wKNemC9mfmuwNFKWABaHb4kM.roa (raw, json)
Hash identifier: rT1CPjUmuymKPxERDLmGGr0PMBgw52hxhePHXJhLigg=
Subject key identifier: 93:9E:70:28:D7:A6:0B:D9:9F:9A:EC:0D:14:A5:80:05:A1:DB:E2:43
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018529460DE7FC49B682F22C5C9871E39525
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k55wKNemC9mfmuwNFKWABaHb4kM.roa
Signing time: Mon 19 Dec 2022 07:25:35 +0000
ROA not before: Mon 19 Dec 2022 07:25:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.52.0/22 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
84.32.6.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:46:0d:e7:fc:49:b6:82:f2:2c:5c:98:71:e3:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 19 07:25:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=939e7028d7a60bd99f9aec0d14a58005a1dbe243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:ca:75:71:42:c2:1c:d3:a4:fe:fb:d2:e3:
f8:40:73:5c:47:95:06:d2:36:24:8c:f1:9c:62:9f:
da:88:13:10:ba:0a:da:38:b8:46:75:48:87:5f:87:
c4:d3:dc:95:9f:56:8d:c8:67:5b:13:c7:9b:cc:47:
24:c6:26:8c:01:c7:58:1f:04:c0:ca:ad:ec:ed:cb:
a0:b2:b8:93:f7:ad:28:fb:49:40:0c:ec:12:ce:b6:
f5:3c:30:75:07:7d:e5:87:01:80:35:67:ac:3e:6b:
57:4b:02:14:c9:29:e6:2f:4e:a7:13:ec:8e:55:68:
68:77:e8:56:c2:bb:f8:83:fc:fc:aa:99:18:43:1e:
d7:9f:f2:88:2c:a5:7b:ce:0f:39:9e:22:89:fe:b2:
9b:60:47:29:79:8e:0f:dc:69:6c:01:b0:83:d4:94:
3f:53:0d:95:0d:0c:51:e7:0f:43:06:79:ce:08:80:
ef:36:a1:8c:c3:dc:5b:4a:6b:16:07:d1:d3:bc:3f:
df:35:98:37:be:40:a7:db:7a:21:4e:43:2d:cc:a6:
5e:91:4e:8d:39:75:83:94:bf:85:6a:42:76:b6:5c:
3c:52:65:6a:da:01:6f:d7:80:a9:17:4c:91:a9:6b:
6a:4a:b3:ef:dc:52:fc:01:4c:9b:f3:19:b7:7b:d7:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:70:28:D7:A6:0B:D9:9F:9A:EC:0D:14:A5:80:05:A1:DB:E2:43
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k55wKNemC9mfmuwNFKWABaHb4kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.42.0/24
84.32.52.0/22
84.32.76.0/23
84.32.240.0/24
84.32.243.0/24
88.216.17.0/24
88.216.36.0/24
88.216.40.0/24
88.216.43.0/24
88.216.98.0/24
88.216.132.0/23
88.216.190.0/24
88.216.214.0/24
88.216.228.0-88.216.247.255
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ff:1b:eb:c5:ca:64:1d:ab:9d:fc:28:2c:19:e3:c6:e2:b8:
2c:29:1e:c2:03:66:f0:3e:28:57:71:c2:b5:1b:eb:16:a0:9e:
5e:db:00:6d:41:45:b5:b3:56:40:54:ac:74:15:3f:a9:22:de:
9c:a4:75:77:aa:27:db:71:b4:a7:49:f8:da:2a:4f:4f:58:37:
c6:39:5d:1c:42:18:aa:8d:2c:0b:5a:bb:7b:a9:c1:81:6a:27:
96:8e:ae:28:f9:6f:49:5e:f3:48:d4:1e:b7:65:fa:4f:44:00:
4e:5a:d2:43:0e:05:d6:b3:e5:b9:61:9a:55:58:83:98:d4:60:
42:2e:9e:fa:63:0d:73:e4:c1:45:b6:21:b5:ac:a0:60:ef:12:
2c:d2:86:76:f1:11:4d:b9:ba:f5:11:7c:dc:4b:06:4b:25:5f:
5b:fd:b0:2e:ab:2e:fe:f8:87:fb:3b:79:7f:07:10:c4:c8:17:
bd:82:4d:61:aa:62:86:24:b9:28:18:e8:d5:32:2f:09:b3:fd:
0b:96:02:a2:0d:50:19:3b:1b:f5:93:58:f3:27:d4:60:67:31:
0a:70:41:ca:11:52:25:3c:9f:cd:83:f7:da:cd:c9:73:ce:e8:
6b:73:72:ff:58:ab:39:7d:81:45:58:22:46:e9:8a:bc:ef:86:
c9:1d:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org