Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sn8Pe2kzihChziNLOKmOmD49Ro8.roa
File: sn8Pe2kzihChziNLOKmOmD49Ro8.roa (raw, json)
Hash identifier: QZbQo027x1OoXwK7AV+r9MKNqOQjpXo3AXF+Yt9MMOk=
Subject key identifier: B2:7F:0F:7B:69:33:8A:10:A1:CE:23:4B:38:A9:8E:98:3E:3D:46:8F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184E104A8212B81D72BA667E850D3BE117C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sn8Pe2kzihChziNLOKmOmD49Ro8.roa
Signing time: Mon 05 Dec 2022 06:41:29 +0000
ROA not before: Mon 05 Dec 2022 06:41:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:04:a8:21:2b:81:d7:2b:a6:67:e8:50:d3:be:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 5 06:41:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b27f0f7b69338a10a1ce234b38a98e983e3d468f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:49:a0:ed:7b:75:50:2f:62:2c:ff:d6:d5:
56:ff:4e:ce:3c:9a:9d:1c:92:64:ca:a6:1f:e1:b6:
2c:7c:8e:8a:50:31:86:56:33:b4:b0:2f:3a:38:0a:
0c:1f:a9:69:c3:c2:9c:37:3e:3e:c6:e4:88:6f:79:
ea:df:3b:d2:d7:9c:ee:ec:09:85:f3:f4:64:a1:8f:
17:39:65:15:40:39:84:10:c3:1a:a8:0e:38:dc:23:
2f:d6:f7:95:75:6a:bf:e7:17:c2:44:b3:c4:c1:bd:
0e:38:d0:37:70:61:96:6e:b6:c4:a9:16:44:03:1e:
c7:8c:88:a2:fb:a8:bd:52:c5:c6:32:fd:ef:58:30:
f3:d6:36:61:31:77:f1:9e:c8:eb:5a:98:e6:8a:b9:
0c:63:67:76:37:08:6b:02:f7:5b:de:fa:0d:9a:66:
bb:9d:d2:c7:72:99:30:ff:63:53:f2:19:52:33:7d:
4c:a5:b0:0c:43:af:b0:ae:63:01:9c:c9:b3:ee:5d:
af:3c:b9:09:80:1d:ba:23:a0:e3:4b:79:2c:b8:34:
20:72:72:07:bc:92:24:50:5a:0f:6c:eb:ff:2f:21:
41:56:27:1d:db:20:1c:24:b9:b9:d0:58:9f:dc:0b:
9f:03:fc:a3:40:e3:b2:2e:c9:ff:ff:95:d6:4f:4d:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:0F:7B:69:33:8A:10:A1:CE:23:4B:38:A9:8E:98:3E:3D:46:8F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sn8Pe2kzihChziNLOKmOmD49Ro8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.44.0/24
84.32.46.0/23
84.32.59.0-84.32.60.255
84.32.65.0/24
84.32.86.0/24
84.32.90.0/24
84.32.92.0/24
84.32.94.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.40.0/24
88.216.102.0/23
88.216.188.0/24
88.216.190.0/23
88.216.198.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a5:d8:a0:3a:c0:d0:32:88:f7:80:09:65:1d:1e:05:7f:e8:
a8:54:a3:ac:43:d6:a2:88:1d:4f:66:7f:13:df:12:68:e9:31:
bc:e5:94:7a:58:02:f8:3c:a9:1b:37:b0:18:ec:3f:74:01:4d:
7b:e1:ac:b1:3c:ff:b0:51:ae:93:20:49:0d:92:2d:a0:00:89:
2c:e5:29:aa:ae:a9:28:9c:f7:75:d9:70:5f:67:2d:06:1b:ad:
31:53:59:64:eb:38:54:ff:04:eb:1f:f5:59:24:28:bf:8f:3b:
e6:f0:d2:94:2f:f5:ea:24:f6:e6:57:56:9a:91:65:f2:d2:49:
75:cd:0e:26:a6:64:45:c2:ee:09:0c:d8:da:34:98:90:1a:1a:
2a:8e:9c:2f:a0:57:c2:99:6e:6d:f8:39:4c:a4:55:25:8c:07:
00:79:42:d1:fc:b8:0a:d8:9e:52:c3:fc:c6:45:26:e5:30:76:
6b:d5:44:b0:9f:6c:90:d8:79:2e:8a:2c:96:65:5c:1c:df:21:
0d:96:fe:11:64:f5:1b:e6:ab:8f:6e:10:cd:a0:35:35:d6:23:
a7:50:1f:27:cb:fb:c8:79:d4:dd:53:ab:0b:82:e2:49:20:c4:
9e:19:d6:89:dc:2c:fb:9a:d3:79:72:37:11:f5:d4:e3:0b:ab:
f6:79:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org