Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/xlCo8L7kMPUgiHBCB_9HYd-GrhM.roa
File: xlCo8L7kMPUgiHBCB_9HYd-GrhM.roa (raw, json)
Hash identifier: uq3KbQKnCydSSY2GwdPU0oiG+n5VSGpkkFWY5R1qa6w=
Subject key identifier: C6:50:A8:F0:BE:E4:30:F5:20:88:70:42:07:FF:47:61:DF:86:AE:13
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 05ABB8B5
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/xlCo8L7kMPUgiHBCB_9HYd-GrhM.roa
Signing time: Fri 15 Apr 2022 09:32:04 +0000
ROA not before: Fri 15 Apr 2022 09:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 84.17.64.0/24 maxlen: 24
84.17.66.0/24 maxlen: 24
84.17.77.0/24 maxlen: 24
84.17.82.0/24 maxlen: 24
84.17.81.0/24 maxlen: 24
84.17.80.0/24 maxlen: 24
84.17.85.0/24 maxlen: 24
84.17.94.0/24 maxlen: 24
84.17.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95140021 (0x5abb8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Apr 15 09:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c650a8f0bee430f52088704207ff4761df86ae13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:12:04:70:df:2a:e3:e3:56:39:dd:41:b8:
55:00:8a:4f:ea:f1:27:95:ea:8a:e8:24:a1:e4:51:
1b:44:c9:1f:28:be:11:f0:af:d5:8c:5c:61:16:4a:
91:e3:ec:7c:08:2a:ea:8b:0c:0c:6e:92:d6:98:6d:
cf:53:d3:96:e8:78:4d:c4:56:59:ba:fa:f3:98:43:
47:9d:92:a2:ba:9b:01:9e:e0:68:74:52:5b:d7:3d:
d8:30:21:42:7a:8c:11:01:0b:62:e7:2b:43:8b:13:
a2:21:09:f9:4b:28:53:d3:fb:2c:1f:b1:9b:54:db:
02:5d:8d:a1:47:ff:c5:25:c2:e1:3e:7e:8d:23:e4:
84:8b:70:e5:29:24:4c:b7:94:18:7c:a4:41:8b:ae:
3b:dc:6b:08:0a:8e:79:05:03:d8:ae:3c:5f:00:61:
e8:2b:8e:b3:83:07:13:0b:be:f8:dd:7f:f9:a6:c5:
60:3f:13:00:e0:a3:78:d7:d1:a9:a7:2c:a3:da:e3:
f5:a6:3c:1d:f3:53:34:75:8b:f0:cc:3a:d0:d5:49:
6e:7e:44:52:8c:89:96:eb:db:53:b4:1c:15:f5:29:
42:cf:aa:0e:dd:72:66:3c:2c:50:ee:e2:b5:73:09:
48:51:1e:de:c7:a6:70:01:e7:c4:11:90:0b:b8:9b:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:A8:F0:BE:E4:30:F5:20:88:70:42:07:FF:47:61:DF:86:AE:13
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/xlCo8L7kMPUgiHBCB_9HYd-GrhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.64.0/24
84.17.66.0/24
84.17.77.0/24
84.17.80.0-84.17.82.255
84.17.85.0/24
84.17.92.0/24
84.17.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8b:3b:da:d0:fa:7f:aa:c7:e0:4d:b3:32:95:06:d2:7b:05:
68:69:be:88:8e:cb:94:2f:63:68:37:ed:82:1a:21:a8:72:13:
4d:b2:fc:7c:86:76:99:28:5a:ae:65:50:c1:d2:d7:7a:7f:61:
d1:57:9a:65:3b:2a:4c:f2:ee:3e:a6:67:d1:47:85:ea:e1:fc:
46:4c:55:09:7b:b0:8d:c2:2c:05:f6:08:cd:8f:ef:32:14:bb:
f0:56:0b:de:97:02:7e:73:fb:ca:85:82:0f:79:84:86:fd:87:
4b:2a:cc:40:b2:49:28:60:0c:78:aa:bf:75:3f:fc:51:33:e4:
67:23:0f:6e:e3:97:25:1a:f2:e7:ce:1c:a8:7d:2b:6b:d7:e5:
e0:1a:19:2b:d2:88:95:9f:2b:6d:80:e7:88:08:03:b7:9f:67:
3c:3b:b7:82:4c:e4:fd:79:42:6c:5b:9a:9e:8e:21:60:6c:ea:
fb:9a:6a:5d:77:88:09:c1:fd:8c:80:1b:6d:50:9b:a7:62:c0:
ab:42:b3:88:ba:a7:95:79:43:e8:53:5d:2a:ed:b4:2a:5c:fe:
80:2e:f7:d6:a7:36:88:57:72:e2:05:81:4c:19:e3:8d:4f:55:
15:14:4b:4f:ff:ab:a7:69:d5:60:26:b7:a5:96:6a:7f:41:70:
db:06:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:23 2023 by rpki-client on console-fra.rpki-client.org