Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mXG3aB_CRTsqS7QcokQowKcsROg.roa
File: mXG3aB_CRTsqS7QcokQowKcsROg.roa (raw, json)
Hash identifier: TssAE8JnAgGZn/rqFPnqNcJbNI8KqnDgBDsFS/sO0tk=
Subject key identifier: 99:71:B7:68:1F:C2:45:3B:2A:4B:B4:1C:A2:44:28:C0:A7:2C:44:E8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0176A5B7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mXG3aB_CRTsqS7QcokQowKcsROg.roa
Signing time: Tue 14 Jun 2022 16:57:44 +0000
ROA not before: Tue 14 Jun 2022 16:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 84.32.83.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24552887 (0x176a5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 14 16:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9971b7681fc2453b2a4bb41ca24428c0a72c44e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:66:2e:69:31:5b:13:32:03:b6:15:87:59:
a8:fa:b4:be:c0:2d:09:ff:4e:4a:17:d5:6d:e2:c0:
8c:af:72:97:e6:f7:6f:5b:91:c3:28:21:67:48:52:
97:dd:31:0a:9e:9c:1f:ce:5e:3e:23:44:16:0a:8d:
4c:7b:30:76:8f:96:ce:60:3e:a6:71:a1:52:76:b2:
94:36:54:0f:3b:c7:95:8f:51:cf:01:0a:cf:e7:7c:
92:7b:5f:14:08:40:2e:53:ff:b9:3a:49:70:bd:e6:
ce:ec:6e:17:c5:c2:c7:56:55:68:8b:f9:9d:21:48:
81:56:5e:d8:4b:06:fc:50:22:5d:d6:e0:aa:c8:64:
33:05:cb:ff:38:20:0d:13:d2:4c:80:8f:51:dc:b8:
c2:00:69:66:51:aa:ca:d3:aa:ea:03:bc:a5:b0:2a:
09:1f:90:60:02:dc:ab:ce:73:bb:cb:7a:e8:00:7f:
1f:18:c6:a1:3a:26:bf:a8:e9:7a:74:d5:23:cc:71:
bf:90:1f:6e:a8:e1:be:dc:8f:f1:50:7e:ff:0e:10:
8b:5d:bd:cd:df:ec:80:a2:78:fa:a3:2c:0a:bd:18:
2e:26:54:35:79:ed:25:f8:39:a1:e5:e6:43:7c:26:
1a:73:27:3c:99:4a:5d:da:05:d7:f0:5e:9e:41:af:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:B7:68:1F:C2:45:3B:2A:4B:B4:1C:A2:44:28:C0:A7:2C:44:E8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mXG3aB_CRTsqS7QcokQowKcsROg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.83.0/24
88.216.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:75:43:08:55:65:7d:e3:dd:d2:45:4f:2c:17:a9:45:5e:86:
79:f4:34:ce:f1:01:85:88:8c:a5:7c:65:e4:58:92:9f:26:6f:
a6:0c:67:59:8c:4f:82:0f:e1:f2:c3:e1:5c:4d:71:8d:7d:a5:
51:dc:f4:48:98:30:ad:e6:35:89:25:1a:f3:67:b5:e8:1f:d8:
02:d2:1c:29:7b:9b:3d:8b:6f:04:0f:40:a6:0e:72:8c:0c:68:
ee:c7:e3:58:41:d1:6c:2e:93:46:24:3a:c2:00:9a:14:27:67:
84:f4:3a:d1:67:a9:6a:61:41:05:aa:8d:80:ab:00:eb:e3:7e:
a4:d6:12:80:ad:38:87:f4:58:02:4a:63:12:6d:65:de:53:5a:
18:b4:c7:5f:ef:9a:44:85:b7:4b:61:f4:e3:d2:64:06:62:9b:
bc:8c:c7:57:42:fa:08:3c:34:21:2e:07:a5:f9:a5:ad:a5:14:
99:b4:bd:34:52:2b:e6:6e:b9:7a:de:ac:9e:c3:4b:49:1c:e3:
de:11:ca:82:0a:7e:25:e1:ed:7c:74:5c:32:a4:2c:c8:94:89:
b0:1c:fe:5d:1b:a6:fc:71:3b:62:24:09:ca:90:cd:58:0f:1e:
80:4d:0a:c3:9c:8e:99:de:11:92:c2:b8:87:7b:12:4a:99:ee:
d7:34:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org