Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/4Wy5MYTGn-VQmlHAcASVmhHJisE.roa
File: 4Wy5MYTGn-VQmlHAcASVmhHJisE.roa (raw, json)
Hash identifier: 7X8Ugo7ugwCsuRPTEoJtTulUpI9Is7RiYepRav4dU7Y=
Subject key identifier: E1:6C:B9:31:84:C6:9F:E5:50:9A:51:C0:70:04:95:9A:11:C9:8A:C1
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 0C64E788
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/4Wy5MYTGn-VQmlHAcASVmhHJisE.roa
Signing time: Sat 01 Jan 2022 01:54:34 +0000
ROA not before: Sat 01 Jan 2022 01:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199522
IP address blocks: 84.244.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207939464 (0xc64e788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Jan 1 01:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e16cb93184c69fe5509a51c07004959a11c98ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f8:b0:5a:5c:82:c4:3f:4d:80:8a:01:e4:5d:
30:74:f1:f9:e5:b6:c4:b9:93:05:85:6c:18:88:e3:
0d:88:23:1f:b8:72:32:cc:9c:78:93:03:b6:36:52:
ac:dd:7c:01:ec:91:b6:af:32:e8:f0:fc:0d:fc:7e:
8c:04:f3:8f:06:63:7d:6b:56:43:26:65:11:8a:2a:
8f:79:fc:e3:db:2a:7c:5d:4d:c1:ed:aa:8f:55:dd:
fe:9a:4c:a7:91:8b:16:0e:04:c9:20:2d:c2:45:84:
30:12:25:04:e9:88:86:29:37:a2:8d:8d:18:80:46:
15:4a:0c:41:8d:f7:4d:56:d3:95:71:be:4c:45:74:
1e:f8:d8:ac:08:47:5c:8e:15:b2:03:66:33:24:39:
a9:26:eb:86:fd:1a:d2:2b:67:34:fd:54:65:07:10:
8f:b3:af:a5:4b:bc:92:e1:13:5a:76:ed:04:f8:c3:
53:0b:00:d2:67:78:0f:6c:d7:2d:c4:bf:c8:84:7a:
74:37:2a:62:97:64:47:ca:db:75:3c:c3:a8:6b:81:
88:fc:b9:0d:b0:57:9d:ff:43:95:18:88:59:d7:b8:
4b:1f:54:b7:6e:0c:29:24:9d:c7:e8:e6:6c:52:66:
b0:4b:6a:0a:c9:ab:7c:f2:fe:84:fb:42:49:15:b4:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6C:B9:31:84:C6:9F:E5:50:9A:51:C0:70:04:95:9A:11:C9:8A:C1
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/4Wy5MYTGn-VQmlHAcASVmhHJisE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.244.172.0/24
Signature Algorithm: sha256WithRSAEncryption
80:27:02:21:2b:b7:4e:43:d5:8f:bf:ef:1f:76:ee:56:e6:8b:
3e:dc:1a:6e:71:39:61:d3:90:96:4c:a4:09:1c:8a:78:00:19:
cb:bf:1f:a1:44:a9:9f:08:5d:41:f6:62:f9:79:7a:d1:c7:08:
cb:0a:aa:fa:6c:22:05:bd:df:d9:d6:3a:eb:d2:46:a3:69:7f:
74:8b:b9:97:f9:53:80:e4:f2:65:c9:57:d9:fb:89:67:7f:64:
0d:39:ba:55:4c:0e:f0:d8:00:24:72:bd:27:04:79:3a:67:f4:
43:5b:15:91:b4:d1:13:e5:6b:ce:fb:ae:ee:03:cf:07:83:c6:
00:29:e8:e9:49:ba:da:13:ac:a9:67:5b:c0:59:67:14:b7:4e:
46:25:31:f5:a4:0a:c1:70:6b:7f:f7:69:36:97:d9:6b:6c:ab:
63:ef:8f:83:3c:6f:ec:7f:e2:39:0f:1d:0a:02:ab:1e:4e:7f:
3f:2f:9a:05:3a:0d:18:3b:d2:0e:47:84:eb:10:a5:a8:71:9c:
60:eb:65:e0:dd:9b:0d:03:0f:a1:be:19:2a:d2:fe:da:b5:5a:
7e:9a:a0:92:d9:47:0c:11:f9:19:03:51:fb:dc:08:52:24:79:
23:9e:f9:46:76:86:af:dc:92:a2:cc:40:fe:37:9a:f6:cb:f3:
39:69:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:31 2024 by rpki-client on console-fra.rpki-client.org