Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/p04vgf35-UYf0H4F2bX4B_ZhVM4.roa
File: p04vgf35-UYf0H4F2bX4B_ZhVM4.roa (raw, json)
Hash identifier: hvwXlbrGjlq8DNpnu03gmHKRZ/ke6j9g08vrpfLQSKI=
Subject key identifier: A7:4E:2F:81:FD:F9:F9:46:1F:D0:7E:05:D9:B5:F8:07:F6:61:54:CE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018502593E93BD88D1B697985F7345ADB97C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/p04vgf35-UYf0H4F2bX4B_ZhVM4.roa
Signing time: Sun 11 Dec 2022 18:01:21 +0000
ROA not before: Sun 11 Dec 2022 18:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 84.32.43.0/24 maxlen: 24
84.32.40.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:02:59:3e:93:bd:88:d1:b6:97:98:5f:73:45:ad:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 11 18:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a74e2f81fdf9f9461fd07e05d9b5f807f66154ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:a0:91:33:fb:c6:53:83:0c:94:3a:2c:4b:
84:90:01:71:89:ec:4c:23:8f:6c:1c:77:92:48:e6:
41:a8:f8:5b:fd:5a:67:16:e9:04:16:c3:6c:01:82:
d7:6f:88:86:8a:ca:df:c5:ed:61:bb:d6:73:ad:77:
71:0d:87:df:c6:10:aa:51:05:39:43:0f:e7:18:f4:
ea:a0:ca:ff:e1:9a:5b:96:6b:ad:17:37:56:6e:85:
9b:42:49:6e:61:23:6d:60:b1:16:45:d1:24:5e:f2:
58:43:ad:c9:1b:a0:89:67:89:2e:3a:3e:1e:d8:c2:
c7:e5:ce:38:fe:59:7b:df:fb:6c:6b:49:b1:a7:92:
09:18:5f:3e:65:37:05:02:ce:86:a4:d6:bf:38:16:
e1:a4:4b:57:1d:73:ac:b3:4c:52:bc:8a:28:3c:be:
df:1f:8a:61:0b:fb:ca:28:e7:66:2e:ed:2a:54:59:
bb:9b:21:5a:cb:f1:3c:ce:6d:80:cc:98:df:43:3c:
a8:d0:3e:14:71:d5:8c:83:11:e0:06:38:9b:a8:be:
fe:e6:6d:a8:6e:86:93:6d:41:88:8f:a2:e3:18:9e:
4a:25:9c:12:9a:ae:6c:15:d3:97:14:7c:3b:9e:6f:
b8:64:ca:32:26:d7:f5:80:d7:51:58:28:16:da:01:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4E:2F:81:FD:F9:F9:46:1F:D0:7E:05:D9:B5:F8:07:F6:61:54:CE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/p04vgf35-UYf0H4F2bX4B_ZhVM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
84.32.43.0/24
88.216.41.0/24
Signature Algorithm: sha256WithRSAEncryption
16:33:db:c8:5c:1f:eb:12:8e:89:5f:59:8b:f4:36:c9:c6:f2:
17:66:b2:73:86:37:90:80:4a:07:d0:7f:91:c6:e4:b9:e1:14:
f0:ea:71:e8:39:8e:c5:b2:3d:3e:35:8e:77:8f:8b:68:7f:a8:
74:cb:4e:d2:ba:1f:5d:ed:be:bc:1f:0c:8b:b6:19:a5:bd:d3:
02:2c:8a:20:59:93:7b:5b:15:c0:56:e6:30:1b:bc:3d:ca:c7:
d8:b4:d1:50:8e:c0:64:a6:57:24:59:ad:e5:bd:4c:cd:98:23:
5a:18:a5:dd:97:e8:e7:e1:4b:e7:a0:28:0e:58:8c:c2:70:b5:
d9:bd:8f:8c:b1:a1:dc:9f:70:64:aa:3b:43:0d:84:34:74:a4:
c7:21:1a:61:67:bc:aa:db:de:86:f5:68:c6:4c:11:1d:93:77:
a9:73:60:7f:ba:32:2f:64:16:f5:b4:87:a6:0d:bd:00:91:90:
13:ce:41:24:e7:80:9b:b9:d2:44:6b:73:a1:67:0c:90:80:b9:
3d:8b:3f:97:b4:13:da:2f:b7:4c:17:7b:6d:d6:ca:e7:6b:3d:
32:78:bb:9b:fd:8b:57:da:9f:12:e4:3e:dc:fd:cd:ec:ba:c1:
64:cb:38:89:0f:59:89:00:68:bf:3c:d1:fe:53:20:e9:18:97:
11:b6:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org