Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q1bqTKiyw26pxEoqhZiYVouuDho.roa
File: q1bqTKiyw26pxEoqhZiYVouuDho.roa (raw, json)
Hash identifier: 5TIHAPQcZqhkrDourl4OXBy8JtiGzstcbvBwEvvZ5qo=
Subject key identifier: AB:56:EA:4C:A8:B2:C3:6E:A9:C4:4A:2A:85:98:98:56:8B:AE:0E:1A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01848B4D1A961E13DC869C09E9F8A755CC31
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q1bqTKiyw26pxEoqhZiYVouuDho.roa
Signing time: Fri 18 Nov 2022 15:13:16 +0000
ROA not before: Fri 18 Nov 2022 15:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.41.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:4d:1a:96:1e:13:dc:86:9c:09:e9:f8:a7:55:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 18 15:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab56ea4ca8b2c36ea9c44a2a859898568bae0e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:f3:db:15:f9:b3:1e:05:b7:e8:35:b5:06:
d9:14:48:c5:b4:61:5f:6a:cb:1a:bc:c3:d8:ec:9c:
75:47:2f:74:31:26:7f:ea:9f:aa:20:35:ae:a5:56:
7e:f0:78:e5:f0:14:71:a6:5b:db:23:bb:f4:ed:8e:
72:2a:7a:a1:e6:33:ad:07:03:0a:ea:c3:31:48:f3:
1d:4e:e1:43:99:7d:3c:68:ec:a0:0b:42:35:04:02:
98:cc:ba:e4:52:d6:4c:8a:1d:08:e6:6c:80:34:2b:
f4:08:a6:38:93:16:5d:a6:2c:31:cf:19:df:cc:2f:
a8:b8:24:82:bb:26:61:3b:4c:c3:83:a9:41:41:23:
7d:e1:1c:ce:8a:1b:e2:29:5e:f2:9a:72:15:26:11:
3c:8a:f8:dd:ac:f9:77:9b:86:46:69:2d:f5:a3:74:
57:95:0f:29:56:1c:9c:99:22:97:d3:99:d6:07:41:
b3:9b:4a:73:05:e0:a8:1a:3f:c6:c6:43:06:72:93:
f4:a0:0f:14:35:a3:46:d1:9b:92:1a:a0:83:49:e0:
71:92:a4:1f:3e:55:56:31:1d:0a:37:34:a7:fe:a6:
b2:f4:e5:37:e3:1f:d1:15:9b:a8:ec:40:db:f0:bb:
66:e8:06:60:57:52:0f:29:38:e3:ec:7a:87:62:48:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:EA:4C:A8:B2:C3:6E:A9:C4:4A:2A:85:98:98:56:8B:AE:0E:1A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q1bqTKiyw26pxEoqhZiYVouuDho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.41.0/24
84.32.48.0/24
84.32.50.0/23
84.32.58.0/24
84.32.71.0/24
84.32.93.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.199.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b6:36:59:ec:39:ea:c8:c9:82:30:51:35:5e:d0:a7:74:a3:
f6:94:91:7a:34:8e:57:63:1e:1e:fb:bf:f3:b9:03:a1:ad:0b:
23:59:62:a1:b4:67:70:0d:02:5a:a1:b7:be:06:f3:bf:5b:e4:
60:1a:00:d6:a6:0a:f2:bd:8b:4a:40:ae:fe:cb:16:07:91:e7:
63:fc:66:b0:fa:74:4d:ee:6c:4f:8a:ba:04:44:d3:91:d4:ec:
59:a1:51:08:ae:f9:ac:0e:88:c0:75:49:80:d4:57:b9:7c:5f:
e8:f9:5d:dd:86:7a:e5:c7:1b:a4:68:d1:29:25:48:97:80:95:
47:68:99:f0:06:14:77:e2:6b:50:6c:4c:eb:a7:bd:03:8a:95:
f0:d5:1b:b1:fe:fd:19:75:a0:45:7c:dd:ca:94:df:f5:c4:f4:
d2:c0:bc:eb:d9:ec:05:eb:ac:85:24:ac:79:74:d1:e6:43:f5:
07:19:e2:bc:15:9d:c9:e4:e4:31:92:2c:19:0d:90:f2:2d:f6:
a5:09:a9:72:86:53:cd:0d:71:8c:f1:ab:c6:0d:f6:c1:a9:76:
44:f4:98:ff:52:16:6e:f3:7e:10:90:23:e3:2a:2c:02:2d:09:
34:53:e3:51:97:da:5a:e1:cc:8d:c4:dd:75:2d:3c:4c:9a:d2:
f8:98:f8:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org