Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v_DvbR11HI6R2KIBBuNNQKUAM9Q.roa
File: v_DvbR11HI6R2KIBBuNNQKUAM9Q.roa (raw, json)
Hash identifier: xSI5sMxYbtLWUademun7wRojgDAF8gDhXKQ3b49ezSc=
Subject key identifier: BF:F0:EF:6D:1D:75:1C:8E:91:D8:A2:01:06:E3:4D:40:A5:00:33:D4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018359F3245402674CB2D884B3BCA161045D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v_DvbR11HI6R2KIBBuNNQKUAM9Q.roa
Signing time: Tue 20 Sep 2022 08:10:50 +0000
ROA not before: Tue 20 Sep 2022 08:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.87.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:59:f3:24:54:02:67:4c:b2:d8:84:b3:bc:a1:61:04:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 20 08:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bff0ef6d1d751c8e91d8a20106e34d40a50033d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:d7:e9:6f:1e:06:85:c2:97:81:6b:39:2b:
7f:d2:cc:77:b0:3b:d4:f0:48:9a:b9:ca:60:3b:a6:
f1:35:cb:82:90:4f:e5:99:3b:d9:bb:f7:93:06:12:
9f:c2:3c:9d:92:35:40:b7:60:55:f4:18:f4:98:38:
ec:ba:10:f9:8d:a8:cc:c0:e1:f6:8d:bc:d3:76:2a:
e3:01:c3:95:1e:e4:06:75:42:9b:73:2b:7f:01:24:
e2:56:b3:ee:f7:84:bb:70:6f:15:67:2d:0e:c6:56:
97:f3:21:6c:45:36:a4:7c:5d:64:51:35:92:dd:de:
4d:e9:46:d3:75:ce:99:d4:92:22:34:3b:f8:7a:2a:
de:81:06:1a:89:ea:44:2d:ce:cb:c5:45:2f:a2:fd:
b0:30:b8:17:5c:d6:dc:27:49:83:4b:6a:5a:22:3b:
f2:cf:44:4c:48:8a:75:f2:34:55:98:5a:48:82:bb:
04:9a:07:19:eb:f4:f9:49:d0:44:fc:39:51:fb:70:
ee:54:f4:60:d1:6d:ca:d2:ac:62:12:25:6d:53:57:
2f:76:e5:ac:45:a3:61:53:10:4a:5c:70:16:2d:02:
69:90:87:6d:d1:4a:37:c8:5c:94:b0:26:d0:70:91:
14:c5:3d:0e:7d:d6:f6:15:db:a6:e6:32:7e:3d:d0:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:EF:6D:1D:75:1C:8E:91:D8:A2:01:06:E3:4D:40:A5:00:33:D4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v_DvbR11HI6R2KIBBuNNQKUAM9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:74:c0:59:f5:45:14:c8:c6:69:c5:e2:eb:f6:ad:20:2b:62:
c0:00:14:7c:ee:9c:75:76:8b:1d:35:77:fa:df:0f:e1:30:0b:
8d:b9:44:8e:fb:c6:65:d0:37:40:cc:a3:d7:bd:eb:e1:a3:73:
9a:c6:a1:24:d5:97:07:9f:d8:f5:5a:01:f5:80:91:dc:e8:71:
98:da:7d:16:5c:f1:3e:27:f8:9a:cc:b6:14:b0:39:6a:3b:92:
f7:c2:42:e2:6c:a5:85:40:5b:e8:41:3b:05:77:02:ed:af:f2:
86:b0:e9:17:7a:27:e1:84:38:6e:b6:18:56:47:04:ef:53:e2:
7b:43:85:da:fe:ad:21:e3:be:8b:5a:96:c8:ba:79:b9:3b:0d:
93:c3:ad:36:93:3c:dc:06:cf:6a:e1:0e:75:b8:36:35:6f:68:
23:28:fe:ca:4f:12:84:7c:b8:c2:3f:54:77:c0:f9:7a:63:58:
08:8d:36:23:be:db:0c:50:ca:6c:78:21:8b:ad:3a:87:ea:45:
35:f3:3b:67:53:d9:65:08:19:c4:81:7d:12:fc:0e:38:12:be:
4e:45:97:63:89:db:56:c2:20:ab:f0:79:cb:cf:24:ce:ce:39:
9e:f2:05:91:ce:aa:79:cc:78:40:a5:0b:c0:83:dd:3a:14:96:
a4:2c:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org