Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q5vCFX8z69U7pbfqsRYSzq1I6w0.roa
File: q5vCFX8z69U7pbfqsRYSzq1I6w0.roa (raw, json)
Hash identifier: oHvTFGw9TVfegU8D1iWf3Z81w/GO/l9sV6noTGrLOEw=
Subject key identifier: AB:9B:C2:15:7F:33:EB:D5:3B:A5:B7:EA:B1:16:12:CE:AD:48:EB:0D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01849E6C6CC3584CEDFDC462577AB3EA6D25
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q5vCFX8z69U7pbfqsRYSzq1I6w0.roa
Signing time: Tue 22 Nov 2022 08:20:16 +0000
ROA not before: Tue 22 Nov 2022 08:20:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.41.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:6c:6c:c3:58:4c:ed:fd:c4:62:57:7a:b3:ea:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 22 08:20:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab9bc2157f33ebd53ba5b7eab11612cead48eb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:58:80:bb:71:3c:59:8e:18:c8:34:21:73:
39:1a:7e:4e:5b:70:c2:13:1e:be:10:ab:8c:46:19:
92:6f:ff:c3:b6:e5:38:a9:a8:b8:c6:74:37:91:6c:
6f:bf:aa:63:17:87:ed:0c:ca:d3:69:4a:3c:8d:b5:
66:ec:89:aa:49:0f:84:f7:8c:05:b3:28:14:f6:ac:
8a:13:3f:dd:96:af:8d:d9:96:8a:ed:78:0c:5d:c4:
a2:75:af:23:29:fc:19:f1:e0:7b:fc:6f:d9:de:67:
da:19:78:99:26:84:61:e2:69:e0:a7:b7:8c:7e:a4:
c2:a1:89:63:ad:2a:66:f3:52:84:52:fa:1d:33:5c:
08:e6:78:22:5b:05:c0:2a:bd:7d:e0:34:f3:f1:14:
62:2b:63:12:39:fe:e6:73:52:d4:c2:af:8f:8c:ec:
e3:e2:29:f0:fb:5a:45:31:d3:8b:ca:05:2e:58:9b:
68:dc:34:f3:be:63:2a:08:02:8e:e2:24:2a:e8:d1:
0e:d6:8d:b5:39:3c:a9:0e:35:2c:34:d0:12:a0:80:
55:92:93:fe:94:fe:48:e1:94:f1:38:3f:55:7d:2c:
91:06:95:d9:d6:0c:6c:cb:c6:f1:30:10:db:c2:c2:
45:17:0c:a3:b4:2b:f3:c8:95:ad:e9:66:d5:a5:39:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9B:C2:15:7F:33:EB:D5:3B:A5:B7:EA:B1:16:12:CE:AD:48:EB:0D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q5vCFX8z69U7pbfqsRYSzq1I6w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.41.0/24
84.32.48.0/24
84.32.50.0/23
84.32.58.0/24
84.32.71.0/24
84.32.93.0/24
84.32.226.0/24
84.32.238.0/23
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/24
88.216.199.0/24
88.216.210.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d6:fa:0a:e6:f2:20:c6:b3:a4:e2:de:cc:be:09:9a:c4:c2:
9b:97:c4:f1:d1:7b:51:04:b6:86:2a:33:0b:89:b4:04:55:d2:
8c:95:69:a6:24:b4:ed:cb:1c:6b:3c:bd:31:44:56:23:73:f3:
57:34:10:c8:aa:bc:a6:24:9e:0b:4b:06:0a:5c:48:58:5d:6f:
b9:8a:1c:90:7b:f9:87:6a:ad:88:7f:f2:b6:d6:0f:eb:ea:a2:
7b:59:4d:1b:81:6c:fb:ef:26:20:02:53:08:5d:14:98:13:0b:
d6:2c:70:30:14:f7:55:40:18:40:a3:9e:88:81:0b:27:9c:0d:
7f:8c:70:c8:d7:63:78:3a:80:6e:5d:27:6b:36:55:18:b1:f4:
e0:27:4a:8d:3c:09:49:d1:33:3e:a8:f5:c5:dd:91:14:39:d7:
71:75:38:6b:eb:e5:ff:6e:00:95:61:19:45:a3:2c:dc:d9:75:
06:da:73:90:84:61:97:ca:a1:88:5a:73:44:53:99:7a:0a:69:
f3:12:6d:f7:2f:5a:a7:cc:13:ff:15:91:76:34:4b:ab:71:06:
48:3b:7e:5f:66:88:42:11:8c:18:f7:94:7b:3b:1f:5c:0c:e0:
60:27:8b:97:aa:0b:0d:e4:99:ba:3c:fa:6d:83:c4:4f:01:bc:
39:a3:3d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org