Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zzc9VYw1AeoBTybsoSlPAYsn1kE.roa
File: zzc9VYw1AeoBTybsoSlPAYsn1kE.roa (raw, json)
Hash identifier: MO0rlb916ME9SEmguJQYwtyUoHViYMqWWRIv7CfiWPg=
Subject key identifier: CF:37:3D:55:8C:35:01:EA:01:4F:26:EC:A1:29:4F:01:8B:27:D6:41
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183B10D54698D5912D910315FFCF2F3BFA6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zzc9VYw1AeoBTybsoSlPAYsn1kE.roa
Signing time: Fri 07 Oct 2022 06:06:24 +0000
ROA not before: Fri 07 Oct 2022 06:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 84.32.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:0d:54:69:8d:59:12:d9:10:31:5f:fc:f2:f3:bf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 7 06:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf373d558c3501ea014f26eca1294f018b27d641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:76:d3:7f:9e:64:8f:6d:78:54:7b:de:c1:
c6:62:2e:27:55:e3:df:08:27:8d:e1:79:22:0b:fc:
2f:1b:7c:15:86:9d:d2:8d:18:b5:5d:5d:3f:c4:70:
36:47:6f:6a:ed:ab:da:0d:89:4e:23:50:eb:1d:12:
35:ee:4f:e7:20:3a:c5:09:6b:a4:c0:1a:68:04:d2:
48:31:3d:75:63:fa:e8:0b:66:d3:91:21:95:29:21:
0c:3f:02:a2:7e:89:d7:b8:e6:6a:65:9a:a3:3c:2f:
4a:f1:62:f3:cb:64:86:f0:93:d5:a8:bc:4a:06:99:
fe:45:0e:94:ea:6f:ac:2e:77:d3:89:7d:1b:56:aa:
f4:24:1f:90:af:43:e5:7c:9f:0c:71:be:72:ee:7a:
59:4a:76:1f:21:03:1f:36:ee:34:61:94:4f:63:ec:
ed:b1:96:04:79:62:08:ea:9e:8d:11:cc:cd:90:67:
7e:6b:ca:86:af:d1:72:bc:56:f2:c5:fc:78:08:be:
bc:41:28:6d:28:55:8f:f2:0e:9d:7d:1b:8b:7b:31:
dd:56:79:1d:66:e7:22:5b:49:31:6f:d9:48:bd:09:
22:5a:b7:17:7f:5a:02:a3:f4:1d:63:ea:db:70:ea:
9b:e1:b5:26:7c:44:22:5b:23:14:92:96:b6:90:1e:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:37:3D:55:8C:35:01:EA:01:4F:26:EC:A1:29:4F:01:8B:27:D6:41
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zzc9VYw1AeoBTybsoSlPAYsn1kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:72:e9:92:06:ec:53:b6:99:fa:65:58:5e:2d:f5:bd:cb:00:
e6:6a:db:89:19:5a:6e:a0:24:15:7e:6c:b5:ab:e7:c2:34:75:
c6:39:35:d8:3f:f1:c5:bb:e2:5b:e1:89:0d:07:a3:38:1c:d5:
dd:63:4c:9e:e8:c0:72:79:4c:66:3f:92:c8:2a:ab:16:f9:46:
c3:84:d4:0c:a2:c6:ca:59:0d:10:75:a8:bd:81:be:1a:07:56:
1d:a3:c1:1e:dc:b8:71:ab:db:ac:ee:23:fa:3a:35:89:02:a5:
cc:61:76:96:39:30:42:ad:83:a3:92:9b:84:56:c2:0a:42:2e:
00:1e:60:8e:26:45:ba:75:7f:c0:b9:5f:78:6d:94:46:be:fb:
21:68:c8:2e:70:0b:92:6c:37:90:d0:6f:01:c9:11:c5:b7:39:
0a:dc:32:85:92:85:1e:42:53:a8:d9:c3:74:45:ca:fe:aa:08:
08:a0:0d:83:13:33:64:b3:b6:5a:15:04:10:7a:7a:53:46:e8:
e8:b4:26:9c:b8:17:43:2a:ba:96:53:3a:13:34:5f:af:8e:cc:
95:5e:61:49:61:97:01:89:ea:a7:97:33:46:4a:00:45:0b:61:
65:c7:c5:a4:b3:1f:fa:9c:0c:54:c7:a6:9c:1e:66:b7:18:46:
0e:06:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org