Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slQ0k7qu0e8P3y3QOd4a0s0TYcY.roa
File: slQ0k7qu0e8P3y3QOd4a0s0TYcY.roa (raw, json)
Hash identifier: ZL2O285GvFcGsl/EMTReDTdASq8/ONinxbJ0ZWL+KSk=
Subject key identifier: B2:54:34:93:BA:AE:D1:EF:0F:DF:2D:D0:39:DE:1A:D2:CD:13:61:C6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A6D88F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slQ0k7qu0e8P3y3QOd4a0s0TYcY.roa
Signing time: Thu 30 Jun 2022 16:20:02 +0000
ROA not before: Thu 30 Jun 2022 16:20:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.128.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27711631 (0x1a6d88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 30 16:20:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2543493baaed1ef0fdf2dd039de1ad2cd1361c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:38:b4:73:ed:56:68:25:04:b8:5a:7a:8f:
d6:bd:31:dc:cc:4c:f9:90:f3:46:7c:92:8c:3b:ac:
79:f9:e4:29:62:0c:af:d2:8c:c6:62:04:ae:a2:8d:
a0:5c:d9:ec:1a:35:a5:5a:90:2a:63:ee:04:ff:49:
1b:31:bc:d0:a9:d6:0c:da:64:86:b7:0b:cc:20:17:
d7:30:51:58:29:3e:6c:73:98:16:2a:b0:3e:ab:db:
1d:a0:83:f0:04:5d:7e:03:c2:3a:55:c2:ec:c6:0e:
70:0e:03:66:ee:18:fa:46:9e:32:3b:68:7c:b5:38:
3d:3c:d1:8b:13:96:4f:1a:fa:9e:89:43:64:81:1b:
b8:64:e1:bf:a3:a0:28:51:52:df:09:50:e2:e8:60:
7f:54:a1:75:84:09:47:13:6b:a7:54:8f:5f:52:af:
63:f5:b6:81:36:73:16:50:2e:92:2d:95:ae:dc:62:
6f:e0:01:db:cb:bf:04:36:04:8c:d1:f6:87:ac:fc:
19:50:b2:f3:ba:33:f6:1f:dd:8a:df:76:71:e0:0f:
d9:fa:fe:e9:2c:42:24:a9:6c:05:45:c3:23:87:c9:
bc:33:04:3b:e0:3e:62:06:5a:a1:a6:57:52:69:5c:
99:aa:7b:23:3c:e7:3e:da:c0:40:2f:87:1c:8e:a6:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:34:93:BA:AE:D1:EF:0F:DF:2D:D0:39:DE:1A:D2:CD:13:61:C6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slQ0k7qu0e8P3y3QOd4a0s0TYcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.128.0/22
Signature Algorithm: sha256WithRSAEncryption
32:65:79:c8:c7:a0:09:81:08:f5:9d:6b:f4:b2:bb:3c:f6:ec:
c3:e4:d1:56:2a:02:8d:cf:24:5e:8c:62:28:1f:fa:b3:5e:d5:
1d:84:03:7b:00:73:35:9f:3f:2c:5e:f5:6c:be:51:d5:27:2d:
aa:05:9d:c3:b9:a7:cc:c2:42:b3:c9:a8:d0:98:eb:e9:07:b1:
ff:d1:b8:6f:51:cb:d0:ba:33:0e:53:3a:43:e6:d3:dd:a5:bb:
84:2c:ea:9d:4b:b4:ac:b2:0b:b9:a0:84:e6:21:d2:79:3c:85:
90:85:3b:90:3b:46:ea:9e:a0:36:74:70:fc:54:c3:9a:55:fd:
1f:1b:e2:ad:86:4c:6b:a7:45:00:ab:c2:1f:19:4c:b2:81:88:
1b:0a:7f:d3:60:6e:ad:e3:fa:f4:02:aa:7b:f6:91:3c:ea:95:
64:cf:05:a0:9d:35:e3:eb:3d:8e:b4:2e:1d:7e:cb:63:66:c4:
2a:8b:85:99:3f:0d:0d:a6:60:f6:85:63:84:5e:a0:d7:e0:33:
3d:31:55:ca:77:bd:85:20:da:f6:b7:87:ff:e0:6e:ef:a0:c5:
3e:9b:bd:42:4a:dc:83:26:e8:03:11:6a:26:f1:cf:67:57:91:
5d:29:2e:a2:32:86:49:d1:9e:6d:c3:64:0c:a6:28:77:b8:4c:
84:95:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org