Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uCUZt5I9qKQwi6qc98lRJ_rg7qk.roa
File: uCUZt5I9qKQwi6qc98lRJ_rg7qk.roa (raw, json)
Hash identifier: tZHNeGSjibTbh10SFwY9DjD1K2irCmlNcfp/yz1FCsc=
Subject key identifier: B8:25:19:B7:92:3D:A8:A4:30:8B:AA:9C:F7:C9:51:27:FA:E0:EE:A9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018484DFB6613993DEAAD27DC2F6AD4F712A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uCUZt5I9qKQwi6qc98lRJ_rg7qk.roa
Signing time: Thu 17 Nov 2022 09:16:04 +0000
ROA not before: Thu 17 Nov 2022 09:16:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 84.32.216.0/22 maxlen: 24
84.32.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:df:b6:61:39:93:de:aa:d2:7d:c2:f6:ad:4f:71:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 17 09:16:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b82519b7923da8a4308baa9cf7c95127fae0eea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:99:c5:a5:21:3b:93:29:b7:88:08:a6:45:
82:7c:ce:fb:38:c9:1c:32:8c:eb:ee:8a:86:65:35:
e6:7f:8a:5e:3a:c4:0a:39:c0:fd:1a:00:b4:68:b7:
f0:71:eb:b6:9f:e5:4b:9e:9c:3a:b7:5b:6b:71:1d:
22:f4:44:13:06:b3:b4:21:b2:e1:30:e7:c4:30:ce:
a0:6b:88:f5:6f:21:f9:ec:c4:cf:46:43:35:78:fa:
ca:38:28:d5:1a:c2:18:03:c4:cb:3f:7a:c8:d2:5f:
9e:17:59:8f:dd:a6:41:a2:21:de:55:2a:01:78:50:
ee:10:a2:e5:9c:98:e1:0d:47:cc:40:c7:95:ec:78:
07:75:f9:70:f8:e0:03:58:df:08:1d:ab:c3:62:a0:
2d:27:76:7a:50:28:1f:5a:e6:c6:1a:65:6b:34:54:
7b:d9:ff:f4:38:fd:d4:3f:12:a0:fe:eb:fb:88:31:
7e:be:b7:30:b6:fc:ad:d6:d8:fd:61:01:8d:f5:c5:
7d:df:32:a9:35:84:d3:0c:7c:09:e6:91:72:fc:32:
ca:78:45:48:0c:16:30:79:12:2b:92:ef:7b:19:12:
13:4e:91:5c:e6:07:ee:05:9d:23:db:4d:2d:96:cf:
a7:de:fd:6b:9e:3c:38:a8:38:81:40:15:bf:bc:de:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:19:B7:92:3D:A8:A4:30:8B:AA:9C:F7:C9:51:27:FA:E0:EE:A9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uCUZt5I9qKQwi6qc98lRJ_rg7qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.216.0/22
84.32.230.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8f:a1:ce:38:40:d2:de:93:68:03:62:30:45:76:e7:fe:91:
8c:9d:95:c4:92:1e:81:ed:a2:4c:31:52:d8:8a:1b:94:17:40:
2b:85:a4:ca:09:3f:21:e0:c4:52:56:94:54:9c:71:9f:c4:b0:
19:6f:e8:38:82:d7:90:d1:97:36:10:57:d5:62:80:e3:fd:dd:
28:82:aa:79:5a:bc:65:85:34:74:5e:36:7d:c9:ff:3e:0a:ad:
e2:fd:a8:13:63:c2:81:3b:15:74:a0:74:b0:bc:9d:67:7f:f5:
33:fe:ad:e7:18:f3:07:5e:d0:17:4d:c3:97:b6:33:42:e9:c9:
c5:54:98:2f:11:b4:98:82:63:62:8c:17:27:eb:0b:b6:d7:fe:
65:19:67:25:c2:c7:da:8a:1d:13:2d:3b:3e:1f:c0:3e:dc:bc:
55:6e:11:48:8b:41:fe:ae:62:42:29:99:02:1c:df:08:2d:75:
cd:1e:fd:4d:49:f9:cd:3d:b3:13:ad:ba:0b:c2:91:fc:98:de:
d6:86:f0:bb:9f:cd:d4:1d:6b:d7:5b:8d:8a:4c:a5:e4:bf:2e:
d5:e0:6a:60:f1:09:80:c2:50:a6:c1:b0:56:87:b6:b2:e8:e2:
06:e3:d7:b7:db:f6:65:fd:56:bb:9b:9b:f7:2a:a4:ab:c2:93:
dd:66:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org