Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xSXylRB19Btd558I8UJKlNubMJw.roa
File: xSXylRB19Btd558I8UJKlNubMJw.roa (raw, json)
Hash identifier: aFphXLFO4PntJPNcvxzbCZSY35DjXQ8wVlwHQRq6ykI=
Subject key identifier: C5:25:F2:95:10:75:F4:1B:5D:E7:9F:08:F1:42:4A:94:DB:9B:30:9C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184E11520045FE01142A2CDAB4283660DC8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xSXylRB19Btd558I8UJKlNubMJw.roa
Signing time: Mon 05 Dec 2022 06:59:28 +0000
ROA not before: Mon 05 Dec 2022 06:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.56.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:15:20:04:5f:e0:11:42:a2:cd:ab:42:83:66:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 5 06:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c525f2951075f41b5de79f08f1424a94db9b309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:78:c6:42:a2:a1:a5:f2:59:98:6d:4f:5c:
4e:f0:7f:e0:97:f4:46:52:fd:00:34:9e:98:9a:81:
b0:e9:93:87:81:f8:62:9e:20:66:56:69:ab:aa:f4:
4c:ec:b5:1d:7d:bc:13:81:49:58:1b:eb:0a:8c:92:
a4:63:b3:eb:5f:e0:cb:2e:24:f6:c8:d9:56:79:52:
9c:dc:b8:ec:6d:13:5d:16:47:fb:92:51:92:72:09:
c1:c9:07:32:45:4e:36:e8:15:b1:ff:c0:89:ce:d7:
dd:57:21:6b:47:a0:d3:68:44:df:54:8d:77:c5:d9:
ca:f4:b9:c0:9a:e9:48:6b:e4:c5:26:7d:f1:d8:2a:
b0:e8:52:bb:cd:d0:1d:a0:89:8b:83:2e:e5:69:d8:
98:11:93:9d:17:87:04:fe:0f:75:78:2d:f7:86:f9:
27:9b:af:e4:cb:44:31:77:68:ee:7a:c2:84:1e:df:
ae:fe:9a:93:e0:85:86:7a:56:1b:df:3d:23:fd:30:
f5:b9:94:80:31:96:bb:bf:42:2b:d0:98:c4:29:e1:
c8:39:24:0b:94:1c:8d:30:11:84:1d:82:f8:8d:6c:
0e:b7:f7:52:2d:3e:2b:91:df:36:47:dd:99:b4:89:
fb:89:21:b1:52:c0:f2:c1:ef:2d:f8:2e:03:e9:ac:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:F2:95:10:75:F4:1B:5D:E7:9F:08:F1:42:4A:94:DB:9B:30:9C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xSXylRB19Btd558I8UJKlNubMJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.56.0/24
84.32.95.0/24
84.32.228.0/24
88.216.2.0/24
88.216.34.0/24
88.216.36.0/24
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e1:e3:f7:07:04:6e:e6:37:e1:df:46:c6:eb:c6:47:03:73:
a0:0b:2a:92:2c:db:6c:98:cd:c1:a5:e6:3f:48:40:f8:e5:f8:
de:73:55:e2:b4:8b:d9:5e:23:42:a0:cc:57:41:4c:26:6a:a1:
b9:78:ee:4a:3d:0c:ed:fe:25:f7:9b:a5:1f:26:9b:b0:a7:29:
02:02:1a:ec:69:c6:7d:a3:c2:19:8e:7a:2d:4c:af:62:a0:d8:
b1:2d:9e:f7:98:0c:c4:38:65:b6:dd:3f:1d:96:5b:b3:f2:25:
20:75:81:25:31:32:3d:c9:56:35:f9:30:11:e1:ee:7d:f4:22:
3c:12:94:38:aa:67:fc:5c:a9:ae:32:09:fc:a8:ee:63:f6:15:
67:ba:f8:23:ac:9e:2a:0b:90:fd:55:b5:11:a8:e9:30:d4:98:
2b:08:19:77:a6:fa:0d:cc:01:76:8b:3d:4d:0a:b8:d2:d4:9a:
af:7b:6b:9a:40:c6:4d:50:85:89:f5:d7:22:a5:43:75:cb:33:
16:30:69:8b:4d:4b:eb:bf:e7:1f:34:91:8f:af:0b:78:e9:f6:
07:40:c4:70:d2:08:4b:4e:9d:0e:5a:3d:9e:cd:56:69:2c:1c:
13:ff:4b:52:a7:3d:0d:db:da:32:38:1e:08:1d:ea:d3:d6:1c:
f5:fa:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org