Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x3ljSjp8T-4e01rBoCHwfOyufrU.roa
File: x3ljSjp8T-4e01rBoCHwfOyufrU.roa (raw, json)
Hash identifier: uQaFV60CcnWAuhy16O7GVFqcRjptNpY4GiE0LWU51Uc=
Subject key identifier: C7:79:63:4A:3A:7C:4F:EE:1E:D3:5A:C1:A0:21:F0:7C:EC:AE:7E:B5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184A94CEE6E335F7ABA163BD9B9D88EA411
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x3ljSjp8T-4e01rBoCHwfOyufrU.roa
Signing time: Thu 24 Nov 2022 11:01:41 +0000
ROA not before: Thu 24 Nov 2022 11:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.79.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
84.32.88.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.132.0/23 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.232.0/21 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:4c:ee:6e:33:5f:7a:ba:16:3b:d9:b9:d8:8e:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 24 11:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c779634a3a7c4fee1ed35ac1a021f07cecae7eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:2d:2b:70:b5:38:f4:5a:33:c3:dc:17:39:
22:c4:19:8c:83:e6:03:ce:f9:9e:73:cf:87:fd:c3:
7f:f7:5a:a2:e0:71:dc:22:78:d4:65:fa:41:1c:be:
ba:7c:2e:e5:a2:b3:37:20:85:b6:83:84:0f:14:eb:
72:e2:5c:11:ed:e3:90:e2:f7:73:8c:c4:fb:90:52:
10:8b:a2:dd:b7:71:c3:90:75:51:3f:b9:6b:1b:c7:
96:f7:ac:2f:b3:01:10:f7:5b:82:e7:c4:11:aa:c1:
e9:2b:65:e0:13:d0:ed:a7:65:d0:67:0f:aa:de:f3:
6c:c4:18:0f:93:bd:84:aa:d6:2f:50:c1:29:a3:b2:
73:d4:e2:c6:89:fc:7e:c0:3a:13:6e:17:58:9a:f6:
64:b5:29:77:4d:03:51:4c:5a:ab:28:d3:2c:05:a1:
82:26:93:ab:6f:7f:8e:e0:3f:07:28:fc:46:b2:c0:
fa:0f:76:ff:0b:0c:48:98:ef:23:79:3b:ad:54:cb:
22:60:56:6b:4f:f0:97:eb:ca:b4:1e:80:38:1e:58:
3a:ba:5b:5c:28:d4:f1:35:d3:2c:ed:1d:7b:2d:f3:
90:e2:67:cf:4a:86:f5:5f:58:db:26:04:ae:c1:0d:
14:8e:72:34:5b:96:bb:a8:0a:20:c2:8d:9c:97:7b:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:63:4A:3A:7C:4F:EE:1E:D3:5A:C1:A0:21:F0:7C:EC:AE:7E:B5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x3ljSjp8T-4e01rBoCHwfOyufrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
84.32.79.0/24
84.32.88.0/22
84.32.212.0/24
88.216.44.0/23
88.216.92.0/22
88.216.128.0/24
88.216.131.0-88.216.135.255
88.216.224.0/22
88.216.232.0/21
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
82:63:bb:87:c5:cc:79:62:d0:cb:bf:f5:cc:e5:b5:74:c2:54:
19:43:2c:e4:07:57:31:ed:0b:11:01:6f:a5:f7:d0:35:23:4b:
eb:70:e5:b9:2c:a7:40:ad:07:da:63:0b:34:65:13:e1:72:9b:
61:65:40:ea:3d:24:67:26:5c:d3:d0:c2:0d:8f:eb:53:a6:53:
0f:86:11:1e:cb:ce:b5:39:6f:1c:d8:e2:bd:c4:10:09:7a:67:
fd:04:70:ba:31:6c:fe:d8:91:7e:96:42:5b:82:c5:18:95:e9:
1f:5b:ba:df:0b:20:6e:97:b3:bc:ad:e9:b4:c9:e0:b1:af:9d:
11:37:ca:ab:5b:fc:b5:f8:6d:14:19:ac:cf:0a:5b:bb:ff:f5:
19:75:73:c6:24:b1:8e:cd:d7:e9:d6:29:f3:59:72:e9:00:09:
dd:bf:d3:ef:77:29:d9:b9:b5:8d:2c:65:e8:ca:cb:9e:30:33:
17:33:65:01:ba:cc:4a:93:42:65:ae:f0:6c:20:35:e6:10:ce:
f0:8f:41:c1:53:54:3f:22:1b:b2:ae:c8:66:e9:02:c7:2d:96:
64:30:75:f1:7b:ae:ee:b3:fa:c8:69:b4:7a:46:bf:2c:41:33:
6b:b1:db:a0:b0:81:00:cc:df:96:c5:21:d3:15:cd:62:d6:cf:
73:08:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org