Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L_WjxoXhoeA-EUwXDTs2F3ctqJ0.roa
File: L_WjxoXhoeA-EUwXDTs2F3ctqJ0.roa (raw, json)
Hash identifier: PafAAea9D7FKefix5aLNOFSyFHQWtGRPrubs9ZxssBM=
Subject key identifier: 2F:F5:A3:C6:85:E1:A1:E0:3E:11:4C:17:0D:3B:36:17:77:2D:A8:9D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01890790D0F30A541E0337502E927E683BFE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L_WjxoXhoeA-EUwXDTs2F3ctqJ0.roa
Signing time: Thu 29 Jun 2023 14:31:18 +0000
ROA not before: Thu 29 Jun 2023 14:31:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 84.32.212.0/24 maxlen: 24
84.32.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:90:d0:f3:0a:54:1e:03:37:50:2e:92:7e:68:3b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 29 14:31:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff5a3c685e1a1e03e114c170d3b3617772da89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:56:3a:0f:9b:ed:f3:e9:01:09:7f:31:df:45:
e5:2d:d1:12:e4:0f:1e:9e:32:e7:7b:6c:8b:9c:ff:
8f:0a:f0:68:4f:68:a0:5e:8a:24:7a:71:54:74:a4:
70:de:73:75:d1:03:0c:d8:45:8c:ab:c5:53:1c:41:
05:3f:50:a1:10:ec:73:55:0c:53:1e:f8:1b:84:2a:
93:0a:54:dd:bf:03:ee:4e:2c:fd:4d:db:f9:3b:f6:
fe:ad:89:5f:41:f7:01:49:3a:f5:a6:f8:5a:2b:ad:
78:e9:f6:01:6d:91:44:e4:55:31:bf:8f:f0:8d:f3:
8a:a3:f5:f8:0d:41:cc:e5:15:59:e3:02:e4:d5:4a:
ad:c7:e0:b5:d7:dd:77:5f:19:8d:62:4f:45:f1:d6:
4e:6c:c7:b9:34:91:af:d4:36:f5:50:98:04:92:ec:
2c:fc:8c:c0:86:ae:cb:4a:0f:7a:e2:b9:05:c4:31:
b7:6a:cc:00:0c:74:63:2f:6c:2f:20:81:0f:42:7f:
c7:60:0f:a4:3a:39:7f:3f:00:a9:c1:4b:ac:90:33:
ae:ca:b6:e5:c2:ae:51:00:8f:bb:e8:a2:9a:70:21:
3b:a1:ab:c4:a5:a3:6b:c8:99:5d:69:b4:ac:59:fb:
78:5d:c3:31:23:f2:16:af:5a:e6:a0:d3:a3:e1:30:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:A3:C6:85:E1:A1:E0:3E:11:4C:17:0D:3B:36:17:77:2D:A8:9D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L_WjxoXhoeA-EUwXDTs2F3ctqJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.21.0/24
84.32.212.0/24
Signature Algorithm: sha256WithRSAEncryption
50:76:ae:e0:7a:05:42:e9:00:8f:2b:d5:3a:d2:8b:44:1c:71:
d9:f9:45:c4:10:ea:88:6b:e1:6c:af:52:7f:4d:32:19:02:f0:
3a:a0:6f:9d:6c:59:4b:88:c8:33:ac:48:08:9c:71:6b:e7:00:
50:e0:d6:a1:5a:07:c5:ca:31:0f:9b:e6:e1:15:b3:e2:f3:d7:
ee:47:19:85:55:f1:c5:11:51:7b:d7:64:3d:27:eb:dd:62:cf:
51:e4:b2:a3:2d:bb:39:fc:6e:f9:18:0e:bc:52:f2:bc:55:76:
1f:ec:5c:d5:0c:a4:0e:d5:d2:25:b4:1e:ca:31:27:5b:24:1f:
3d:d1:8a:ed:2f:14:b8:69:9a:e1:1b:1d:33:b7:83:8f:cc:fd:
41:93:cf:92:b9:4a:1b:a7:13:db:4b:8d:93:a8:0b:34:59:70:
c2:6b:64:a3:46:44:73:d9:6d:a6:a0:e8:70:a0:b9:96:a9:a8:
1f:83:80:ed:87:c0:af:a5:b5:ce:a7:38:a8:a7:e6:c9:49:f6:
75:3e:52:86:bf:d9:c8:e6:f0:84:7f:93:3b:94:7b:22:b6:ba:
dd:5e:84:7e:1d:f9:10:d5:61:7e:2e:bc:dd:d8:0a:28:09:ca:
9e:ad:12:50:8e:a6:67:d9:c5:23:c9:b5:89:02:de:fa:08:c2:
3f:ee:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:10:54 2025 by rpki-client