Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/t4BpII2hmeqm05TLjHDZBxLiX_A.roa
File: t4BpII2hmeqm05TLjHDZBxLiX_A.roa (raw, json)
Hash identifier: iY3ZY9REOGEHfJie1fXOoi8QHLq+Fyx+fzQnuG3t3Ew=
Subject key identifier: B7:80:69:20:8D:A1:99:EA:A6:D3:94:CB:8C:70:D9:07:12:E2:5F:F0
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 0B092E8B
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/t4BpII2hmeqm05TLjHDZBxLiX_A.roa
Signing time: Mon 16 May 2022 14:35:28 +0000
ROA not before: Mon 16 May 2022 14:35:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33941
IP address blocks: 84.21.128.0/19 maxlen: 19
84.21.136.0/22 maxlen: 22
84.21.142.0/23 maxlen: 23
84.21.145.0/24 maxlen: 24
84.21.151.0/24 maxlen: 24
84.21.150.0/23 maxlen: 23
84.21.150.0/24 maxlen: 24
84.21.152.0/23 maxlen: 23
84.21.146.0/23 maxlen: 23
84.21.152.0/24 maxlen: 24
84.21.153.0/24 maxlen: 24
2a01:570:1::/48 maxlen: 48
2a01:570::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185151115 (0xb092e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: May 16 14:35:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b78069208da199eaa6d394cb8c70d90712e25ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:59:ba:c3:bc:40:92:97:f6:3a:22:9e:f0:
ae:8d:46:88:45:1a:2b:87:16:69:30:b3:16:d1:c2:
49:c7:ba:4a:f8:e1:4d:83:42:a0:e6:e8:3d:49:1f:
ce:3c:4a:5f:48:02:01:41:6a:c9:a9:a3:b2:d3:67:
ee:7a:e1:76:a7:6a:ca:49:2f:6b:bf:e5:21:52:f0:
b6:c1:38:18:90:be:3d:7f:a9:04:7a:17:6b:67:03:
e9:48:1a:c7:a5:d8:aa:4e:de:e6:45:35:74:9c:c6:
3f:12:15:27:51:54:b4:30:d2:12:20:c0:61:26:8d:
b9:7c:a9:f7:6c:c0:c7:e1:92:04:80:a7:4e:b3:15:
4c:30:48:6f:31:44:07:6d:75:98:fa:53:79:e3:1f:
fc:1c:27:74:35:3c:de:f9:8b:42:95:1e:98:9a:b0:
ec:91:1c:e2:64:3d:b7:27:f7:81:13:ef:3a:12:da:
7d:52:df:bd:4b:4c:3f:67:ed:79:af:b2:7b:bd:e9:
eb:c0:ff:b1:03:d7:2c:c4:5c:aa:5b:bb:83:ca:0a:
a2:15:e5:79:c9:f2:a9:44:5a:70:b1:b1:21:b9:12:
6c:18:e3:8f:b9:cb:62:0e:18:16:79:cf:c7:71:fa:
cf:44:e6:10:aa:c1:63:ed:de:55:c8:0d:4a:3f:ae:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:80:69:20:8D:A1:99:EA:A6:D3:94:CB:8C:70:D9:07:12:E2:5F:F0
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/t4BpII2hmeqm05TLjHDZBxLiX_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.128.0/19
IPv6:
2a01:570::/32
Signature Algorithm: sha256WithRSAEncryption
98:31:17:5b:f9:82:f5:e8:f7:b7:bf:d8:b8:07:6f:77:f1:e9:
02:d4:e9:b5:84:2b:2f:e7:d6:99:0b:c0:a8:34:73:f0:99:47:
17:51:6f:85:22:9a:31:4b:6b:84:b9:67:c2:9e:0c:ec:a3:20:
b0:c1:00:7e:20:7d:94:6f:0f:d0:22:e1:dd:76:34:7a:c4:e6:
2d:65:30:b3:a3:1a:b4:0f:99:ee:c2:92:84:a4:f2:3e:f6:d9:
e8:d3:2d:3b:e6:1d:25:b8:e4:6c:ca:01:78:4e:83:71:49:e5:
e3:d0:8c:36:4d:56:40:9a:17:bd:8f:96:24:bd:4a:c3:99:96:
aa:35:f9:ad:43:39:68:1f:99:9b:5f:40:f7:d0:16:d2:c5:14:
b3:d8:0c:e4:61:07:a3:56:1f:5b:16:f6:7b:14:66:c9:2f:46:
74:e1:e5:14:66:fb:f4:d6:e4:bc:a4:5d:bb:1f:93:6f:18:2a:
5b:20:50:a7:89:cc:62:e4:66:01:c6:91:e1:e8:49:82:42:61:
cd:0c:87:60:2a:63:7b:81:60:e5:31:fb:1f:db:ec:ad:56:5d:
f6:ef:a1:fc:fe:eb:6a:ef:5e:a6:c8:75:bd:1d:12:e6:52:4a:
75:6d:73:16:5f:97:4b:e8:4f:58:3c:9d:7c:ff:58:c6:e1:f5:
fc:a9:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-fra.rpki-client.org