Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/xK8Gr0IMtQpncwy6Dsb1ijWdXqU.roa
File: xK8Gr0IMtQpncwy6Dsb1ijWdXqU.roa (raw, json)
Hash identifier: CNofEvMBTY1o49oVv4Hm9+yiD/84Ob/QVJhicDDxFvg=
Subject key identifier: C4:AF:06:AF:42:0C:B5:0A:67:73:0C:BA:0E:C6:F5:8A:35:9D:5E:A5
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01853EF6DA36748DB0CE6508E92C212F5609
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/xK8Gr0IMtQpncwy6Dsb1ijWdXqU.roa
Signing time: Fri 23 Dec 2022 12:30:43 +0000
ROA not before: Fri 23 Dec 2022 12:30:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 185.104.33.0/24 maxlen: 24
185.104.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:f6:da:36:74:8d:b0:ce:65:08:e9:2c:21:2f:56:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Dec 23 12:30:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4af06af420cb50a67730cba0ec6f58a359d5ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:f4:bf:56:72:f2:b9:26:fa:f4:ad:7b:a2:
31:ad:a0:b1:94:72:2f:83:be:d9:17:fe:46:5b:dd:
02:00:99:af:6d:07:ed:39:b5:79:18:c1:95:1e:89:
e8:b0:62:68:61:8d:b4:9e:46:b7:98:a4:aa:89:e7:
27:c7:76:6d:25:e1:36:6c:3a:c8:35:45:ef:c9:e5:
ad:ca:9b:2f:4a:90:c4:2d:93:76:f6:21:4e:40:b7:
5a:b9:19:8e:a8:bb:43:e5:da:3f:a2:f4:f2:3b:6b:
5b:fe:2f:25:86:ed:29:d9:9d:28:6c:19:b5:c5:40:
11:c5:49:75:af:37:b6:6e:e2:e5:64:9d:78:17:35:
66:3a:01:bf:3e:80:97:24:f9:07:a8:41:17:62:23:
a5:9d:c5:35:28:0f:21:56:04:ba:c1:46:93:e0:d1:
ab:05:19:f7:82:67:f7:f8:98:74:10:93:76:f3:cd:
0d:2c:59:4a:f3:5c:12:4d:de:e4:65:76:98:c6:54:
3a:91:52:43:88:14:0d:ea:ae:30:03:20:fe:17:2c:
47:fd:dc:c9:c6:51:6e:c7:fb:0d:50:76:92:f9:8e:
db:9b:8c:37:19:1b:fb:d3:ce:53:7a:0d:da:f3:6c:
98:c8:e0:dc:3f:6d:26:28:db:b3:bc:35:7c:67:0e:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:06:AF:42:0C:B5:0A:67:73:0C:BA:0E:C6:F5:8A:35:9D:5E:A5
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/xK8Gr0IMtQpncwy6Dsb1ijWdXqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.33.0/24
185.104.39.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6d:4c:85:21:3f:7e:37:47:e8:16:c0:5d:8f:c3:c0:86:34:
a2:1b:1a:14:8a:5b:8c:20:4d:05:87:6b:40:33:6a:0d:67:1e:
1f:a7:e2:ad:6b:16:03:15:27:b1:59:63:2b:13:ab:2c:dd:75:
d8:15:1e:18:f6:b7:c7:c7:ed:9a:70:8f:89:84:59:69:25:07:
5e:cd:04:e4:eb:6e:5d:ec:8c:b0:0a:d1:a6:53:e5:a4:d8:2d:
39:50:93:26:ac:56:e6:48:36:fa:2c:51:11:3a:dc:99:a3:59:
b5:37:12:64:53:a6:23:f4:d2:1d:b1:3b:4d:69:b3:be:8f:c6:
d1:57:55:94:9c:8c:c1:a8:e8:0e:8f:5c:e2:2a:ea:39:73:69:
6c:3c:1d:46:46:6d:2b:b6:81:fc:a6:2c:42:ad:1f:dc:39:27:
a5:6a:05:3f:19:f7:87:ec:28:ae:cd:c1:31:bf:39:50:95:9c:
b1:85:ae:87:fb:9d:85:e1:5e:2f:8c:be:b9:5f:5c:25:5d:2d:
d9:39:5f:60:37:82:3d:d8:7d:5f:eb:5e:08:f2:07:e7:a8:e3:
86:a2:6f:d4:01:16:6a:6d:b9:ac:8e:fb:37:65:5e:c6:2a:2b:
c3:8a:4a:21:da:de:da:59:90:f0:97:ba:4a:7a:88:23:1c:44:
82:52:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org