Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x3XG7pgTI1AUONYOTavNr0QdnVM.roa
File: x3XG7pgTI1AUONYOTavNr0QdnVM.roa (raw, json)
Hash identifier: LNuiLgnRTMtwdhOMA9N2alZYoIr2uYEAZwqrnKUuCFQ=
Subject key identifier: C7:75:C6:EE:98:13:23:50:14:38:D6:0E:4D:AB:CD:AF:44:1D:9D:53
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01851B517CB841C8BB324A1FA73F19362287
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x3XG7pgTI1AUONYOTavNr0QdnVM.roa
Signing time: Fri 16 Dec 2022 14:23:23 +0000
ROA not before: Fri 16 Dec 2022 14:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.224.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:51:7c:b8:41:c8:bb:32:4a:1f:a7:3f:19:36:22:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 16 14:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c775c6ee981323501438d60e4dabcdaf441d9d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6a:20:80:04:49:41:c0:95:99:ad:54:9c:72:
cf:b4:72:de:2c:38:df:34:60:c4:35:df:d3:6e:60:
63:d5:f6:e6:8c:30:11:bf:83:eb:88:67:7a:5b:b3:
9b:76:5d:1e:0e:d9:8b:60:67:08:4e:3d:3f:f9:f2:
af:1d:1f:7d:55:b2:f5:a0:5e:64:7a:46:69:f0:95:
bf:ed:5a:bb:76:69:b8:ec:44:bc:ce:f3:f6:7a:88:
17:f0:9a:01:87:00:a4:7a:4e:b5:27:84:8e:74:d9:
89:7d:0f:0b:9f:ee:4b:e7:7c:28:b3:68:13:ec:96:
39:5b:ef:8b:a2:85:b6:e6:9b:4c:82:ba:8c:bf:bb:
9c:e1:e4:ac:c3:87:37:0b:aa:26:e3:0c:38:f8:0e:
21:50:70:83:ce:45:1f:e4:85:d8:c9:a9:33:b6:61:
da:29:b9:f8:7a:a6:ff:e2:dc:0b:25:8e:28:85:99:
24:86:20:f8:35:3a:e4:c8:5d:c5:dc:0d:26:c4:eb:
02:87:26:40:b4:e3:bb:d4:09:af:55:49:25:d5:6f:
a5:4f:69:b6:f5:90:04:e8:0b:69:95:08:94:0c:0d:
4d:e7:d3:f3:a6:b3:0e:cd:b6:f0:8c:89:25:60:d5:
50:87:14:cc:9b:63:4f:3a:87:8c:14:5e:7a:9a:b2:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:C6:EE:98:13:23:50:14:38:D6:0E:4D:AB:CD:AF:44:1D:9D:53
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x3XG7pgTI1AUONYOTavNr0QdnVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.224.0/24
84.32.254.0/24
Signature Algorithm: sha256WithRSAEncryption
47:97:1e:c3:08:97:9d:34:e5:22:6a:80:df:9c:b6:5c:ba:58:
48:80:dc:db:d7:49:4e:25:68:05:58:b7:05:5b:75:a2:4b:ab:
f7:99:d9:43:6b:40:7a:e2:3b:9f:bf:d8:6e:9e:be:32:a8:22:
a6:ba:13:63:08:d6:68:43:3d:f3:41:13:09:71:b1:32:85:60:
4f:4b:88:96:34:e3:dc:25:df:28:81:9f:a2:71:63:fe:1e:83:
8d:65:97:b6:d2:1e:7e:a0:84:0b:88:15:af:30:9c:87:c5:82:
b9:55:41:02:c8:84:6b:ba:40:27:d0:e4:26:8c:44:ab:84:a4:
dd:14:3d:e6:8f:e0:42:14:28:a1:fa:02:4c:c0:11:05:69:13:
09:94:8f:fe:62:fe:48:1b:db:2b:dd:e0:25:f3:1e:12:72:d7:
5c:20:87:40:b6:96:31:85:3a:97:88:ab:88:7e:2f:43:98:73:
6e:48:4c:65:28:91:6a:81:4f:95:d4:2c:51:94:94:b8:15:d7:
82:2b:90:1c:85:2b:7a:8b:c4:a5:68:64:b4:b2:4a:1b:1e:33:
b0:90:57:1e:9f:8d:b0:c6:af:15:f2:7b:5f:cd:03:3e:2a:52:
e3:4b:20:f1:74:c5:9e:fe:00:be:5c:7b:95:75:bc:ab:9b:a7:
f5:11:8e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org