Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QAs_rpG7DVNLwFHRvYRgtQZKjvE.roa
File: QAs_rpG7DVNLwFHRvYRgtQZKjvE.roa (raw, json)
Hash identifier: uNQRWLh5j66owRZiThSOqVUvh2P+aOSOSz4Hk7ItXC0=
Subject key identifier: 40:0B:3F:AE:91:BB:0D:53:4B:C0:51:D1:BD:84:60:B5:06:4A:8E:F1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189078E0F2F3796241AF60624077FA9E173
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QAs_rpG7DVNLwFHRvYRgtQZKjvE.roa
Signing time: Thu 29 Jun 2023 14:28:17 +0000
ROA not before: Thu 29 Jun 2023 14:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:8e:0f:2f:37:96:24:1a:f6:06:24:07:7f:a9:e1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 29 14:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=400b3fae91bb0d534bc051d1bd8460b5064a8ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:eb:b7:1d:18:2e:48:a8:2e:a7:8f:57:3b:90:
b9:b2:c1:a6:81:74:22:15:1c:32:4b:6b:3a:88:8c:
25:8e:23:88:e3:f1:71:98:1a:45:38:73:9e:f2:6c:
25:79:3f:96:2e:ee:51:7a:fc:c8:f0:16:90:9a:e8:
a2:60:b8:0b:91:90:1b:f4:cd:2a:15:99:8f:8a:d8:
29:42:5b:ad:53:2c:e6:a4:43:e8:0d:d9:b9:50:12:
c4:d6:58:99:3d:37:18:36:2f:8f:e6:57:6a:e3:c7:
ba:04:01:d9:50:aa:89:14:da:69:5e:38:7c:ce:56:
18:a9:f6:b8:76:ee:54:32:09:fe:5e:5a:94:a0:a9:
0b:16:b6:90:f8:db:a0:25:68:5d:1e:36:7a:78:7d:
cb:ff:fc:6d:7a:f7:91:91:bf:a3:aa:e3:de:0e:13:
5d:b9:71:10:ea:25:f4:e3:36:f5:48:ae:5b:33:b4:
b6:7b:39:28:4d:72:c9:b4:07:9c:68:1f:b2:d3:24:
63:f9:93:52:63:de:4f:e6:2f:22:78:31:e9:14:32:
6a:68:e1:87:f1:09:23:aa:21:10:45:12:31:83:db:
b6:49:6e:89:a4:6a:85:dc:97:f2:c7:85:61:bc:b5:
0d:89:78:e8:77:34:06:fb:c1:25:7f:be:ae:01:e5:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:3F:AE:91:BB:0D:53:4B:C0:51:D1:BD:84:60:B5:06:4A:8E:F1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QAs_rpG7DVNLwFHRvYRgtQZKjvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.42.0/24
84.32.56.0/24
84.32.60.0/24
84.32.62.0/24
84.32.64.0/23
Signature Algorithm: sha256WithRSAEncryption
62:a0:1a:11:34:ee:2a:7c:5a:b5:c1:1c:f6:84:5b:21:a0:29:
8f:20:1a:a0:97:a1:d8:ef:52:f3:9d:11:73:0a:45:1a:fa:dc:
bd:89:3b:98:25:90:9e:96:05:ae:ed:f3:f6:7d:10:54:7b:63:
5d:46:84:ec:e4:ab:16:dd:cd:18:87:36:73:b0:5a:bb:e1:a1:
4d:c4:2d:ba:04:1a:54:44:cf:f2:f8:ed:56:cf:8e:5c:0f:67:
f8:cd:64:9d:87:86:37:3a:8b:9b:fd:3e:52:31:e1:d3:28:5f:
47:0e:ed:b4:1a:5c:bd:af:f0:76:ef:a1:96:61:a2:09:0b:dd:
2d:0a:8f:6c:30:ce:71:b9:a1:9f:ee:ad:38:f0:d7:43:c2:eb:
38:eb:e4:2d:d2:20:2f:1d:76:13:2a:1e:ae:d0:f7:5f:1a:37:
02:b8:51:0c:41:21:21:58:e2:50:2f:cb:72:c3:22:68:39:d8:
e7:12:5a:3f:9d:9a:58:56:f4:08:1b:b1:27:3e:74:aa:b5:80:
40:e8:41:0a:5c:77:2b:87:7c:0e:27:6a:6f:96:7c:43:e6:8b:
e1:c3:5d:ed:c6:90:3b:34:50:c8:59:e7:29:21:26:db:1a:1e:
2a:6b:1d:f3:54:30:a4:f4:26:53:28:2f:a5:d5:7c:34:13:3e:
5f:0d:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:21:01 2025 by rpki-client