Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qysqpvZM_dZpjaZT5wFZnC-qIB0.roa
File: qysqpvZM_dZpjaZT5wFZnC-qIB0.roa (raw, json)
Hash identifier: iwm3C33czccwZvJVHA1K6YgJRglw1BeDe+a/M5YV33g=
Subject key identifier: AB:2B:2A:A6:F6:4C:FD:D6:69:8D:A6:53:E7:01:59:9C:2F:AA:20:1D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 69458F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qysqpvZM_dZpjaZT5wFZnC-qIB0.roa
Signing time: Thu 24 Mar 2022 17:31:53 +0000
ROA not before: Thu 24 Mar 2022 17:31:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.64.0/21 maxlen: 24
84.32.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6899087 (0x69458f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 24 17:31:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab2b2aa6f64cfdd6698da653e701599c2faa201d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:f6:68:23:7d:08:7a:be:1b:cc:4d:be:7f:
82:42:7c:bb:2f:84:d7:4e:15:b0:17:2b:d9:49:b5:
d7:f4:f4:d4:da:ba:a5:0e:30:70:04:a0:b9:d2:fa:
94:80:3c:dd:b2:e5:45:ed:76:2e:40:fd:a6:e8:91:
ef:1b:99:2d:a3:b7:bc:8c:9e:13:77:86:38:a3:55:
fa:39:97:9d:fd:07:d0:f0:40:5c:84:e6:ad:6c:3a:
0d:c1:96:4e:57:06:da:49:60:f2:2c:4e:e7:86:27:
59:73:be:8a:d7:a7:43:37:e4:0a:f0:b0:4f:83:55:
3c:e2:a9:e3:d4:89:90:fa:28:35:16:d7:16:2f:6e:
2d:d5:0d:7f:38:e1:fe:76:63:a5:4e:c1:c1:5b:dd:
86:48:22:5b:a5:b0:7a:4a:ee:d5:7e:0c:3b:cf:1b:
a5:03:2e:6b:d6:53:65:33:36:af:5d:fe:56:a7:1c:
62:7f:2b:08:18:d4:96:51:ea:43:ca:25:32:c5:0e:
81:7d:b4:f2:9a:48:0b:8c:b6:af:00:18:55:61:6b:
38:1b:92:ee:02:1b:ea:43:47:cf:db:52:95:78:e1:
78:d5:ae:f5:7f:96:f5:34:61:33:bf:e8:74:0b:2d:
8d:17:30:d4:e5:d6:d0:02:0f:5d:f9:72:b9:99:c4:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2B:2A:A6:F6:4C:FD:D6:69:8D:A6:53:E7:01:59:9C:2F:AA:20:1D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qysqpvZM_dZpjaZT5wFZnC-qIB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0-84.32.71.255
Signature Algorithm: sha256WithRSAEncryption
65:be:9e:32:b7:82:93:ce:14:e1:e7:60:a5:74:ab:29:a5:a5:
ad:46:4c:73:c5:35:1c:97:fa:3c:18:71:d9:11:25:e6:1a:ff:
f4:9f:fd:fd:ab:aa:de:25:51:91:4a:52:0b:2c:3a:c9:8e:3a:
a2:09:91:57:6b:43:d4:9e:0e:57:92:9b:75:76:52:e6:48:85:
31:61:6f:51:39:58:2a:4f:46:b1:91:1d:79:a2:16:97:43:59:
98:98:9a:3b:1b:c9:b0:4e:db:d0:60:f7:b3:0b:be:26:2a:a3:
e1:19:01:fc:ef:3b:f9:3d:d9:3c:fe:02:2d:bc:8d:69:0b:36:
78:2a:f8:20:72:a4:8f:74:37:65:fb:fe:28:1d:31:0c:12:34:
51:97:20:c5:d3:61:b8:1d:ed:c5:3c:f5:07:a3:de:29:73:5f:
e7:1c:aa:a6:93:65:c8:68:9e:a2:95:88:5e:83:81:81:8f:f6:
c5:b9:8c:27:0d:72:3f:76:ee:7c:b7:2e:14:3e:63:58:ea:34:
c0:4a:c9:72:e4:02:82:1e:3b:94:d1:05:4b:d0:d3:3e:6a:10:
7b:a7:a9:5a:20:24:d0:22:13:63:3a:08:9d:af:ff:aa:03:f8:
e1:13:ce:2e:d0:2c:e2:fe:c1:a1:2e:a7:0b:da:23:c8:b6:94:
25:23:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org