Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/aoYsKCRykoqd2LanfFZu3bt-TEw.roa
File: aoYsKCRykoqd2LanfFZu3bt-TEw.roa (raw, json)
Hash identifier: Ba4T5ECNrq7PLxX3EGB/AcFPGnEi3Rov9FYGUomdozY=
Subject key identifier: 6A:86:2C:28:24:72:92:8A:9D:D8:B6:A7:7C:56:6E:DD:BB:7E:4C:4C
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 0184F664518E81FA9D82E5ED8E78296EFFAC
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/aoYsKCRykoqd2LanfFZu3bt-TEw.roa
Signing time: Fri 09 Dec 2022 10:18:00 +0000
ROA not before: Fri 09 Dec 2022 10:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 185.104.33.0/24 maxlen: 24
185.104.34.0/24 maxlen: 24
185.104.36.0/24 maxlen: 24
185.104.37.0/24 maxlen: 24
185.104.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:64:51:8e:81:fa:9d:82:e5:ed:8e:78:29:6e:ff:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Dec 9 10:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a862c282472928a9dd8b6a77c566eddbb7e4c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:d4:89:a5:1f:30:62:72:8a:16:4d:33:e5:
ea:a6:86:36:f5:86:82:99:73:43:99:2d:1a:00:5e:
c8:b7:09:01:21:c2:1d:1a:b5:ce:70:81:ea:40:3d:
fe:2b:3f:1b:68:36:f5:6d:86:68:76:71:d5:03:9c:
92:4a:37:14:9a:f6:af:49:e6:69:47:39:ef:d8:9c:
69:6d:11:00:80:24:61:65:b9:6b:0b:8d:2d:3f:43:
0c:bf:11:c4:04:f9:60:31:53:ad:38:7d:da:14:ab:
e9:bb:13:8a:4c:c1:0f:1b:14:43:e9:94:d5:7d:f2:
41:de:15:42:b4:22:64:f1:aa:d0:51:6f:ae:18:38:
52:a4:e1:b5:2b:f1:b3:75:ae:57:45:f7:a8:49:23:
33:b5:e5:03:eb:77:2f:fb:da:70:26:ef:e4:17:72:
13:57:cb:7d:f4:8e:24:1e:8d:f3:23:bf:5c:7b:90:
c6:47:c3:09:c4:00:7f:8b:45:4b:76:f1:dc:74:15:
a4:ed:bd:67:ed:1d:5b:9d:05:4f:2a:6d:83:ef:8e:
44:84:a9:a7:bc:ca:17:97:fc:94:d8:bf:b0:33:d9:
41:7b:a0:07:7b:41:6e:84:4b:25:13:64:f1:65:29:
6c:f4:3a:bc:c0:d0:6f:5e:8f:26:3c:ca:f1:3f:81:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:86:2C:28:24:72:92:8A:9D:D8:B6:A7:7C:56:6E:DD:BB:7E:4C:4C
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/aoYsKCRykoqd2LanfFZu3bt-TEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.33.0-185.104.34.255
185.104.36.0/23
185.104.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a4:65:d6:fc:bc:af:33:1d:dc:5d:8d:41:68:9e:48:eb:63:
16:05:82:b8:4c:2f:3b:b4:57:e4:4a:b9:39:05:93:c5:13:54:
99:bf:ee:19:89:d9:01:90:8a:26:46:f9:8c:60:bd:64:fd:01:
7c:f1:b8:df:89:61:23:16:86:ad:e4:53:e5:1f:b9:a1:a5:c3:
b5:9a:32:bc:37:22:eb:63:e4:be:98:3a:6a:cc:e6:c4:36:d1:
86:6a:c6:23:8f:6a:1e:30:ee:92:75:09:b2:9e:45:00:e9:29:
e2:2d:fb:d4:77:58:f6:d8:65:9c:0e:1a:d3:aa:82:d6:37:10:
b4:f0:4d:2e:60:84:c3:1f:2b:c7:6c:4b:0a:59:bd:97:cc:c7:
f4:ea:d3:5c:1f:4f:ad:a1:a1:30:b8:4b:12:f4:1f:6b:0f:16:
63:74:ee:ec:06:ea:66:b9:1b:dd:3c:d5:a8:6d:29:d6:4a:e0:
91:73:01:12:b7:f6:25:95:42:b4:09:2b:f6:9b:49:5a:0d:13:
24:a5:32:19:f3:86:20:68:46:7e:ad:d3:82:23:ed:da:db:90:
e3:a4:b1:1c:97:55:b5:b5:ba:39:25:c0:de:6c:3f:6a:7c:91:
ed:19:3a:8e:0a:30:56:30:f7:bb:78:bb:74:11:a0:70:86:31:
ab:85:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org