Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ywk72yaaN-wI4F4ueZQC9hoqncw.roa
File: ywk72yaaN-wI4F4ueZQC9hoqncw.roa (raw, json)
Hash identifier: rBVbg/n/r6FUStgfXaorHcYRka+6DT2czivohj48po8=
Subject key identifier: CB:09:3B:DB:26:9A:37:EC:08:E0:5E:2E:79:94:02:F6:1A:2A:9D:CC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0184BD9F6727B16611956C3354CD35056CBD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ywk72yaaN-wI4F4ueZQC9hoqncw.roa
Signing time: Mon 28 Nov 2022 09:44:11 +0000
ROA not before: Mon 28 Nov 2022 09:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 84.32.69.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.40.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:9f:67:27:b1:66:11:95:6c:33:54:cd:35:05:6c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 28 09:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb093bdb269a37ec08e05e2e799402f61a2a9dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:4f:0f:b9:6b:ea:04:ed:40:31:21:63:fb:
55:ab:98:c9:29:a4:c8:6c:0a:e2:8d:8f:0a:52:02:
19:0d:7f:8d:f7:7c:77:d9:f7:d8:32:c4:9b:55:de:
bb:b8:0c:2b:16:39:08:da:ca:ec:07:14:9f:0b:84:
77:34:26:8a:bf:dd:c9:09:8b:a6:d8:38:f7:e5:4a:
73:19:16:08:46:ce:94:46:a8:d5:23:59:86:09:b2:
52:05:41:e1:4b:8f:7e:ab:09:8f:5c:94:05:eb:f4:
72:33:a2:1f:bc:ee:c8:4d:b6:62:8e:1a:85:78:6c:
5d:d4:62:36:63:5e:4b:cc:fd:fa:08:9d:75:b4:dc:
b7:aa:52:90:2b:85:3e:3a:e1:29:bd:01:b6:a5:40:
82:35:04:fb:5e:ab:4e:f6:c8:82:c7:c7:34:9b:83:
81:e9:07:c3:55:e8:9a:3d:f7:ee:df:88:ef:27:9f:
06:71:d9:da:a7:ae:26:a0:43:9f:56:c3:6a:95:35:
e6:3f:24:54:4d:2e:a4:1c:4f:3c:7e:80:ad:c3:76:
a1:74:33:02:ae:2a:22:d5:75:03:3f:48:24:2e:10:
cb:5e:7e:13:a2:f6:66:04:4f:b4:03:04:50:7c:b8:
46:cb:4b:5d:39:70:37:7f:a0:88:f0:d1:b6:e4:04:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:3B:DB:26:9A:37:EC:08:E0:5E:2E:79:94:02:F6:1A:2A:9D:CC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ywk72yaaN-wI4F4ueZQC9hoqncw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
84.32.43.0/24
84.32.69.0/24
84.32.242.0/24
88.216.41.0/24
88.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f5:41:b0:1c:27:df:1e:74:97:ac:44:8f:9e:2d:e7:e2:cb:
d9:ba:f7:63:5e:00:4f:a0:15:7a:5e:f3:91:26:71:d7:cb:5d:
a8:78:ff:c9:fa:5e:0e:3f:1c:9a:bb:5e:3a:c1:65:a8:9e:22:
c8:97:83:64:c8:2c:84:a8:e5:b3:f5:8c:62:c2:bc:4a:36:33:
9b:06:b0:9a:2b:b0:40:3d:05:60:f8:f4:9b:ca:ca:fc:eb:29:
3e:44:5b:8e:b2:25:7d:20:3d:8a:44:41:3b:b0:2b:f6:11:41:
1c:54:b4:ad:83:73:58:f0:1d:56:74:a5:9d:8e:e6:87:65:54:
67:c2:a5:f4:12:83:7e:b9:b5:94:18:f1:5d:6d:2f:57:30:c5:
86:ad:14:97:11:41:0d:53:06:10:ad:9d:05:68:a5:09:c5:f0:
c0:49:bf:ce:44:38:75:8d:f6:82:49:dc:23:23:5d:dc:a9:4a:
3a:f1:3b:f5:14:64:d8:2d:68:43:57:c5:b9:c0:dc:cd:9e:e0:
5f:58:9a:06:32:ef:5a:3e:91:c4:b0:f1:86:e8:23:3d:fc:6e:
92:c4:16:07:4b:f7:51:cc:e6:ec:e3:7f:c0:e2:79:f9:1b:5d:
f6:f8:25:a7:0a:10:13:e7:02:88:a7:2f:57:63:4b:83:a2:cf:
cd:d8:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org