Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rT_vapq6U_agtFXc66ZAU5YJ0ow.roa
File: rT_vapq6U_agtFXc66ZAU5YJ0ow.roa (raw, json)
Hash identifier: CiN6nm8gCE6CaDWqwmH2+rhTETU/t1I2Qn+Egr7bdRs=
Subject key identifier: AD:3F:EF:6A:9A:BA:53:F6:A0:B4:55:DC:EB:A6:40:53:96:09:D2:8C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185588D6E707952BCBE3440F5661616D0E4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rT_vapq6U_agtFXc66ZAU5YJ0ow.roa
Signing time: Wed 28 Dec 2022 11:45:41 +0000
ROA not before: Wed 28 Dec 2022 11:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:8d:6e:70:79:52:bc:be:34:40:f5:66:16:16:d0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 28 11:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad3fef6a9aba53f6a0b455dceba640539609d28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:3f:3e:cd:fb:5e:d8:d6:c5:6a:71:25:4d:
fe:bf:d3:21:a4:83:d8:57:1d:3a:af:ae:fc:0d:97:
10:8c:10:64:0c:4e:51:32:0c:01:4a:35:f3:c7:38:
df:66:05:fb:3c:3e:de:50:a1:ab:b9:71:6d:3b:31:
40:ec:db:4f:da:37:bf:7e:6a:44:54:4c:ec:8a:8a:
9b:76:68:d2:09:70:a5:9c:25:2b:51:da:22:47:9a:
dc:a6:1e:01:b0:19:fd:66:4d:97:24:24:86:03:29:
4c:a3:83:92:e7:52:ad:dd:a1:9e:1e:aa:a1:83:fa:
ee:c8:dc:4b:56:53:17:9e:87:23:da:43:ac:f7:8c:
5f:6b:6d:c5:b4:5b:85:81:cf:7a:67:b3:94:49:7a:
10:53:42:e4:a1:28:b6:83:ae:10:db:e4:79:76:97:
e9:2e:5f:e9:b6:64:62:49:72:0b:4b:1d:e4:95:66:
e7:2f:9a:85:9a:02:64:5d:74:13:86:86:a4:d9:3a:
fb:01:c2:12:25:ee:c1:7e:04:b3:1f:76:51:d8:26:
1c:9b:56:71:f2:1d:10:92:05:03:d5:4a:64:3c:3f:
eb:57:b0:8d:8d:a8:a8:ee:91:fc:4c:e6:03:84:46:
10:5b:bf:9c:4c:d9:ff:39:c7:35:d3:74:c1:96:fc:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:EF:6A:9A:BA:53:F6:A0:B4:55:DC:EB:A6:40:53:96:09:D2:8C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rT_vapq6U_agtFXc66ZAU5YJ0ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.30.0/24
84.32.44.0/24
84.32.46.0/23
84.32.59.0-84.32.60.255
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.92.0/24
84.32.219.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.95.0/24
88.216.103.0/24
88.216.188.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
39:05:26:00:50:f5:f3:c2:20:b0:66:74:63:78:9a:fd:54:38:
5f:da:ad:ee:e9:fa:ed:df:2f:ec:e6:8c:ff:4b:01:95:ea:1a:
a3:3a:6c:64:b5:59:3f:38:4e:ec:29:8d:0b:49:6e:ed:6e:ec:
e1:6f:a7:f4:69:64:00:a4:9e:16:13:fb:ca:3f:ac:16:a9:57:
ce:1e:11:fd:84:ee:62:6c:fd:d7:e4:65:26:8e:9e:4e:fc:3f:
dd:8a:d0:7e:00:9f:91:1f:44:0f:f1:ac:5e:7c:59:5f:18:db:
40:f5:08:20:21:21:f3:58:74:12:98:f7:f0:7a:5f:b4:fc:2c:
0b:52:a2:b5:91:55:82:ae:05:55:b3:f0:2a:7c:9f:8c:6e:cc:
ad:06:87:4a:04:79:fb:b7:3c:ab:2a:e3:32:1b:af:29:6d:28:
06:c6:ca:71:f0:40:6e:73:e8:f2:dd:f9:5e:c3:dc:94:2b:c3:
07:9e:a2:d7:44:6d:20:f3:a7:43:b5:d9:29:48:06:2d:cb:1a:
ae:c3:1a:fd:58:97:2f:f8:e5:8c:b2:af:2b:62:8a:73:19:ac:
4a:1e:99:36:16:34:3d:6a:2f:53:4f:b1:bb:f1:be:05:c3:b6:
e1:75:43:af:d8:2a:8a:85:4f:16:78:be:38:2f:ed:06:c9:ad:
12:47:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org