Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CxHITn7dphqmGdN6UreUcWEC4_s.roa
File: CxHITn7dphqmGdN6UreUcWEC4_s.roa (raw, json)
Hash identifier: Rworh7Wgz1GlDhp0dAN0r2Wsvf2sQ3fx3q5kkk5JaV0=
Subject key identifier: 0B:11:C8:4E:7E:DD:A6:1A:A6:19:D3:7A:52:B7:94:71:61:02:E3:FB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0183FA15BE962AA0576613E68B3DFF4B1227
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CxHITn7dphqmGdN6UreUcWEC4_s.roa
Signing time: Fri 21 Oct 2022 10:27:52 +0000
ROA not before: Fri 21 Oct 2022 10:27:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 64.137.80.0/22 maxlen: 22
64.137.96.0/22 maxlen: 22
64.137.94.0/23 maxlen: 23
64.137.92.0/23 maxlen: 23
64.137.100.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
104.249.29.0/24 maxlen: 24
104.249.36.0/24 maxlen: 24
104.143.232.0/21 maxlen: 21
64.137.42.0/23 maxlen: 23
104.143.240.0/22 maxlen: 22
64.137.48.0/23 maxlen: 23
216.173.111.0/24 maxlen: 24
64.137.58.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
64.137.60.0/22 maxlen: 22
104.238.0.0/22 maxlen: 22
104.233.0.0/21 maxlen: 21
138.128.151.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
138.128.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:15:be:96:2a:a0:57:66:13:e6:8b:3d:ff:4b:12:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 21 10:27:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b11c84e7edda61aa619d37a52b794716102e3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:3b:9f:2c:42:f6:d5:2d:bb:a5:ab:13:41:
3c:59:a9:da:c8:16:57:37:34:23:fb:6a:15:07:20:
39:99:64:c6:e3:73:20:b6:93:b7:e7:c9:35:53:79:
9e:5a:db:01:4f:47:95:c8:fc:a4:8a:2f:39:f0:cc:
32:6e:0e:1a:d8:8e:a2:8f:a6:8f:56:05:b5:8c:01:
0b:6b:8b:da:78:d6:c8:8e:a8:c9:63:a0:82:23:0e:
7a:77:70:d5:49:c8:80:ba:e8:d9:9f:ce:0f:78:e1:
b9:86:20:c1:eb:47:f5:ef:c3:a9:b0:73:1b:73:2e:
d8:96:eb:f3:3c:d0:6f:89:85:ae:fc:24:2f:d5:a6:
74:75:0b:28:0e:ab:03:ad:16:b1:1c:86:5d:97:c6:
60:de:57:39:cd:d6:a7:4c:1f:86:ff:10:01:54:44:
9d:69:40:ca:4c:41:73:0b:12:00:e5:59:f7:d9:2b:
43:e4:5d:34:fa:3c:7c:5b:60:40:11:4f:15:5b:da:
44:da:03:9a:45:74:78:ce:53:21:d1:9d:6f:09:72:
a7:c0:52:a1:a8:b4:d3:a2:2e:e4:91:e2:1a:bb:fc:
53:57:1b:7a:2f:a8:31:fa:e0:77:a9:95:ee:ae:3b:
ae:58:79:03:9e:f7:8c:82:bf:6d:fd:4d:b8:1a:4b:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:C8:4E:7E:DD:A6:1A:A6:19:D3:7A:52:B7:94:71:61:02:E3:FB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CxHITn7dphqmGdN6UreUcWEC4_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.80.0/22
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.233.0.0/21
104.238.0.0/22
104.249.29.0/24
104.249.36.0/24
104.249.55.0/24
138.128.151.0/24
138.128.153.0/24
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d6:f2:3c:6a:43:2f:a8:d9:56:d8:54:a5:c3:95:92:5a:ca:
10:0b:86:c6:96:d8:a9:5c:92:6e:a0:45:6e:bf:93:54:b0:44:
e4:bf:93:87:42:b0:f0:1d:fc:91:de:bc:c7:8c:46:64:0b:0f:
31:e3:f2:7d:24:c3:6a:a3:c7:eb:25:ae:68:9d:0c:b5:58:ff:
25:df:df:50:20:d8:60:d6:8c:0a:10:e6:5d:fc:74:fe:da:d3:
9a:af:17:3f:cf:3f:f8:6d:7a:dc:99:0a:87:8e:81:c3:04:5f:
24:c3:26:c7:6f:4a:14:36:5a:08:2c:b7:e4:5e:37:21:c0:3a:
b1:5e:65:0a:95:82:52:20:12:c6:9b:02:8c:8b:c8:69:35:07:
b9:97:59:70:65:ba:75:0f:f9:02:16:9f:2a:84:fe:2b:cf:1c:
20:db:68:73:dd:f4:62:4b:ab:11:6c:1d:d0:1d:92:29:ad:d4:
84:f7:87:25:63:4f:97:40:26:95:1e:d9:c7:16:08:6e:d1:b3:
01:3e:a4:32:78:ac:d9:7d:4e:11:f9:8b:5e:27:22:c3:81:fe:
11:84:ed:07:43:41:be:c5:5e:52:f7:e1:39:76:84:3e:cb:55:
df:df:59:23:ef:13:45:af:df:fe:d4:27:72:2e:d6:9e:32:52:
a4:aa:75:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org