Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qeKzOUhOXlcmrteH_LA1FlhFTJI.roa
File: qeKzOUhOXlcmrteH_LA1FlhFTJI.roa (raw, json)
Hash identifier: 3d6Arv5Az3IVunP0QblXRgaZCC38KeYiTAFrYwI9BhI=
Subject key identifier: A9:E2:B3:39:48:4E:5E:57:26:AE:D7:87:FC:B0:35:16:58:45:4C:92
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: E3B5E4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qeKzOUhOXlcmrteH_LA1FlhFTJI.roa
Signing time: Fri 29 Apr 2022 12:05:15 +0000
ROA not before: Fri 29 Apr 2022 12:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 84.32.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14923236 (0xe3b5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 29 12:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9e2b339484e5e5726aed787fcb0351658454c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:04:18:5b:7f:c1:2b:ad:a7:58:98:53:13:
e7:9a:49:1b:d4:0b:18:f7:56:7e:e8:2b:d6:ef:46:
33:fa:69:ad:97:bb:f8:88:8a:4e:d1:06:e2:e6:e4:
21:c5:e9:be:04:e5:7a:fd:19:4b:38:6f:93:bc:e6:
da:f9:d8:b7:3e:0a:ab:b5:d3:10:b1:ed:11:bc:51:
67:59:fe:71:2e:b5:8c:fd:c6:10:4c:3c:1a:f7:30:
fc:0f:3a:9d:09:19:c6:c8:55:ed:32:0f:7f:b9:bb:
37:77:0b:a8:70:2d:09:81:2f:88:49:42:2e:82:d5:
fc:d0:de:51:07:16:b4:89:20:12:08:04:0e:9b:ec:
e7:1e:15:65:0a:b9:7f:15:e2:16:5a:b6:57:51:4d:
6c:3b:76:28:9c:e3:6e:76:f1:9d:45:db:56:ad:e8:
37:01:c9:84:c6:4a:b1:35:06:88:29:24:27:5e:6e:
c8:ab:69:db:29:f2:87:08:ff:b8:2a:70:e4:00:dc:
64:f7:51:16:3a:12:80:c8:ef:a2:f4:e7:b9:b5:f3:
2b:1c:fc:7c:c3:a6:6f:b5:16:0b:9d:4d:63:20:33:
69:e6:6a:6c:a6:9a:2e:f7:cd:35:a0:43:7d:a4:20:
fa:e6:d8:cb:50:70:ff:05:a0:e4:de:84:85:11:d2:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:B3:39:48:4E:5E:57:26:AE:D7:87:FC:B0:35:16:58:45:4C:92
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qeKzOUhOXlcmrteH_LA1FlhFTJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.76.0/22
Signature Algorithm: sha256WithRSAEncryption
60:15:8b:8e:e1:dd:7a:3b:f3:c0:45:01:12:14:07:f7:cb:43:
32:ca:ef:c1:40:0d:af:c8:72:75:39:80:7c:21:75:88:7d:cc:
57:47:5d:04:e8:21:4e:94:e1:d2:4f:a4:c1:98:cd:81:71:cd:
35:76:17:58:4e:e6:4e:0f:94:9d:ed:1c:ce:da:48:05:e4:32:
65:83:6b:d9:b9:c5:c6:e3:3e:a6:fb:27:c3:4d:62:55:19:ac:
7e:96:e1:3a:62:81:94:5b:9e:ae:ae:dd:5d:a4:4f:e5:3f:9c:
14:df:45:02:35:fd:15:86:dd:19:7f:ef:ae:91:51:e2:da:0f:
4a:11:dc:c6:b2:62:65:64:09:49:3f:ae:9a:94:94:46:97:bf:
4d:24:58:e8:eb:29:03:91:7a:d6:5e:71:45:dc:9c:8d:37:f9:
5c:21:1b:39:e2:48:3d:87:5e:a1:ef:e1:dc:23:44:bb:74:ae:
4a:b3:88:1f:65:70:6f:fe:2e:0e:7f:d8:f4:ec:55:a7:a1:16:
69:ea:59:8f:31:b4:1d:27:2d:1b:11:37:9c:35:4b:32:b0:1e:
85:c2:ad:d5:00:e3:f0:2e:03:df:12:4f:68:4e:01:13:a6:a7:
77:4a:78:3e:b7:e7:8f:34:44:f0:7b:c1:f3:f2:3b:96:32:3f:
ed:1e:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org