Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rKzYJI9yMiGDCBF-LF3dr_uMatQ.roa
File: rKzYJI9yMiGDCBF-LF3dr_uMatQ.roa (raw, json)
Hash identifier: BE+MhC2gfsOrWgdCc5umoTrh+PM9QT1kGIKJCXqksJs=
Subject key identifier: AC:AC:D8:24:8F:72:32:21:83:08:11:7E:2C:5D:DD:AF:FB:8C:6A:D4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0154567B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rKzYJI9yMiGDCBF-LF3dr_uMatQ.roa
Signing time: Wed 01 Jun 2022 15:43:23 +0000
ROA not before: Wed 01 Jun 2022 15:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.52.0/22 maxlen: 24
84.32.56.0/22 maxlen: 24
84.32.60.0/22 maxlen: 24
84.32.64.0/22 maxlen: 24
84.32.68.0/22 maxlen: 24
88.216.180.0/22 maxlen: 24
88.216.208.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22304379 (0x154567b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 1 15:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acacd8248f7232218308117e2c5dddaffb8c6ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:11:39:04:04:ab:ed:10:4f:a7:0d:67:dc:
1c:ca:e3:7b:bd:9d:1c:f6:00:2c:8d:72:8d:24:35:
03:f8:3e:06:e6:19:0f:e3:d8:c4:7b:3e:00:48:a7:
09:26:d5:b2:1b:e1:96:8f:23:7b:37:24:c4:cb:f8:
7b:b5:f8:b6:4a:f3:4c:7f:9e:28:0b:9a:70:a7:f2:
33:9c:e1:dc:93:27:32:c8:0c:d8:01:ec:90:ce:37:
5b:8d:88:41:96:23:e4:b9:2f:2a:91:dc:46:10:a8:
37:48:03:ea:ee:65:73:df:97:e1:5a:db:51:ef:df:
62:bb:66:94:96:e5:bf:53:1b:65:b7:11:9d:dd:49:
67:e9:96:73:1f:87:64:bb:03:2b:38:1e:da:7f:76:
d2:b2:1a:6f:65:17:89:1b:4c:8c:f9:08:36:b7:56:
14:63:f5:b2:c8:7e:60:fe:2d:01:e7:10:0e:9c:9e:
60:23:c2:f5:80:f1:67:35:93:bf:88:5b:24:f4:4e:
06:2e:db:47:db:d1:03:65:1b:c7:e5:25:fb:38:0e:
b9:dd:9c:3a:2a:1b:83:b4:b0:8c:c3:c7:0e:c0:da:
d5:f0:48:4f:15:af:5e:32:b0:a1:4f:78:ae:82:c8:
76:06:67:eb:08:25:55:74:b6:a6:b0:7f:2a:8d:dd:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AC:D8:24:8F:72:32:21:83:08:11:7E:2C:5D:DD:AF:FB:8C:6A:D4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rKzYJI9yMiGDCBF-LF3dr_uMatQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.20.0/22
84.32.48.0-84.32.71.255
88.216.180.0/22
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c9:71:a0:fd:1c:79:08:a2:25:51:a3:86:d4:c3:84:57:4a:
30:71:d1:62:d8:8a:66:f6:01:a2:38:1d:5f:09:5a:9a:e1:cc:
d6:56:7d:4e:03:2f:79:34:76:93:7c:b2:60:95:13:08:31:69:
ed:28:1a:c1:70:dc:ad:f3:52:80:a3:c1:bc:27:01:93:9a:65:
96:9f:f0:93:34:e1:d7:d0:1f:2b:dc:26:7f:cc:ec:1d:d3:57:
5e:41:08:0d:f4:b6:28:c5:5a:18:fa:df:e1:8d:03:df:c9:c4:
27:1f:50:f0:a6:f2:68:ba:8d:e8:51:b0:6a:ac:c2:b3:5d:f0:
0f:d9:f0:96:ea:0a:7b:cf:1e:5b:30:08:01:59:ad:46:f6:98:
98:3a:82:7e:f8:0d:c2:52:11:60:6e:85:45:61:87:02:41:82:
a6:7c:57:de:6f:f0:73:4c:be:1b:a8:d3:50:32:9a:ea:de:0c:
04:e9:f2:26:e0:ca:64:98:0d:31:a2:55:66:fb:fc:7f:cb:1a:
3a:0b:75:3c:7e:49:3a:f1:ef:98:de:73:61:ab:be:47:43:f6:
ec:30:a0:c1:b1:a2:89:08:4d:c2:bd:ce:ec:9d:23:c3:f4:45:
b1:95:d8:2c:a8:6d:93:e3:e3:41:73:e9:b2:75:a2:b6:56:3c:
c4:68:e7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org