Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kcibPHh6Cefqu8Eb1hHJ6CTw7KU.roa
File: kcibPHh6Cefqu8Eb1hHJ6CTw7KU.roa (raw, json)
Hash identifier: LNYu5J6cRiw6rR2VXan9MxhtVxModTTG6WM+AjHjHTo=
Subject key identifier: 91:C8:9B:3C:78:7A:09:E7:EA:BB:C1:1B:D6:11:C9:E8:24:F0:EC:A5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01851F36AFF752FB6FAB9B9741CD10C80F3E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kcibPHh6Cefqu8Eb1hHJ6CTw7KU.roa
Signing time: Sat 17 Dec 2022 08:32:35 +0000
ROA not before: Sat 17 Dec 2022 08:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 84.32.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:36:af:f7:52:fb:6f:ab:9b:97:41:cd:10:c8:0f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 17 08:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91c89b3c787a09e7eabbc11bd611c9e824f0eca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:57:b4:d1:bc:7b:50:6e:fe:a9:98:0c:de:
94:99:b5:2b:5f:7a:40:e5:8b:f5:34:66:c5:90:6f:
cd:3e:d1:f9:69:4c:6c:23:2a:ee:c3:e6:50:15:11:
98:80:c8:23:15:02:90:3a:61:75:b0:78:e1:93:b7:
75:f2:ef:54:c6:d5:b3:c4:6f:d1:7a:07:bc:67:a2:
4d:af:5d:63:8b:9c:c3:1b:85:7c:3c:f3:b5:71:ca:
64:11:f3:13:76:af:24:80:56:0f:e7:52:e2:cd:58:
21:5f:a6:3b:74:4f:c1:69:83:c5:7a:7d:4a:3d:e0:
9b:ef:78:e1:91:ae:00:7d:4d:aa:59:1e:74:8c:40:
f9:58:ed:1e:d6:10:ff:88:90:67:de:d6:c2:a9:30:
78:33:4d:42:58:17:fa:66:e9:da:3a:f1:74:f6:63:
ae:48:18:f6:ee:61:e3:3c:d5:d5:52:1f:17:1b:d7:
dc:a4:aa:cd:9b:d8:91:19:8b:4e:d6:6d:c5:ed:8f:
b3:be:15:ab:d0:b0:19:14:0c:04:4b:79:a7:72:dd:
b1:73:2f:c2:1f:92:bb:6b:f5:6e:46:04:00:96:bd:
d8:98:1f:31:ab:1c:03:3e:0e:44:26:15:bc:12:e6:
91:d6:70:6f:93:4f:ec:cf:8e:87:19:4f:59:60:06:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C8:9B:3C:78:7A:09:E7:EA:BB:C1:1B:D6:11:C9:E8:24:F0:EC:A5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kcibPHh6Cefqu8Eb1hHJ6CTw7KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.49.0/24
Signature Algorithm: sha256WithRSAEncryption
29:10:1b:10:75:24:13:81:82:64:7c:e4:d0:fb:26:ce:b3:48:
3c:47:54:2c:96:1a:cf:0f:48:3c:56:91:fa:0b:3f:b4:36:29:
8e:f1:84:1d:bd:09:14:ff:c6:82:e3:7d:7b:d5:6d:95:e1:cd:
18:06:2e:cf:85:81:3b:de:5d:7f:f9:19:be:4d:da:46:90:d2:
3e:31:69:d7:74:d9:0a:a7:a7:e7:fc:3a:59:ba:94:f1:79:95:
ce:e1:37:3d:0c:b4:d1:a5:6a:31:2f:8c:65:b9:28:44:1b:8e:
9c:e5:3e:4d:c7:4f:da:a8:54:62:35:d6:15:51:fe:57:57:41:
d1:b7:33:c1:8c:7f:e9:57:1f:d2:5f:72:05:56:9c:1b:c7:7e:
3e:87:62:c0:a0:7b:43:bb:57:50:c6:ce:1c:47:47:b5:8e:ec:
41:f0:1d:5d:19:93:e4:41:9b:c0:d3:e9:b1:e5:50:cd:bc:d8:
52:39:0e:de:60:b3:50:54:5d:ec:f0:3f:cd:32:5c:c5:8d:b3:
c9:82:4f:0f:15:c6:ab:44:eb:c8:00:30:05:ec:1e:cf:30:b2:
d4:91:93:d9:ab:f0:cd:6f:c6:74:55:76:c7:d0:ce:9b:e9:6f:
11:0a:b9:d2:29:8e:62:5e:25:5a:6c:94:50:ee:0e:51:04:f6:
a4:c1:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org