Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LBshbgsy0Cp9NpkXUG3_zrkHoRA.roa
File: LBshbgsy0Cp9NpkXUG3_zrkHoRA.roa (raw, json)
Hash identifier: rwmRgx5hl8fAJZhF+7t9YH1/jzS6dGOJrXxX6M2DRvs=
Subject key identifier: 2C:1B:21:6E:0B:32:D0:2A:7D:36:99:17:50:6D:FF:CE:B9:07:A1:10
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018428DC36F9D8CC9A207BA9F7F7898B27F1
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LBshbgsy0Cp9NpkXUG3_zrkHoRA.roa
Signing time: Sun 30 Oct 2022 12:27:11 +0000
ROA not before: Sun 30 Oct 2022 12:27:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13886
IP address blocks: 104.238.26.0/24 maxlen: 24
45.150.32.0/22 maxlen: 22
206.124.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:dc:36:f9:d8:cc:9a:20:7b:a9:f7:f7:89:8b:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 30 12:27:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c1b216e0b32d02a7d369917506dffceb907a110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2c:2e:e9:62:98:0a:67:15:80:69:3a:b0:86:
66:8a:01:ca:7b:32:5d:2d:a0:dc:66:02:80:fb:aa:
dd:d9:e8:59:28:ee:7c:70:e4:de:d2:57:75:ef:1f:
d3:87:9a:2b:7f:44:c9:d2:ff:90:cf:6a:be:40:62:
76:14:f4:bd:44:1f:14:18:17:04:87:e9:44:6e:d7:
e6:fc:21:fd:92:95:a0:e8:50:66:38:b1:ab:33:64:
9d:f6:13:2d:dc:d8:f0:af:de:57:ba:a0:d9:d0:23:
48:fc:6a:35:55:51:dc:84:e8:9e:9f:71:b6:0a:17:
3f:e0:d2:7e:b5:f1:9b:0b:99:fe:7c:33:fb:b3:46:
dc:ba:85:7e:06:df:cc:96:2a:38:65:6f:5f:8e:67:
13:f5:4a:45:d3:55:d3:04:f7:b7:ab:b3:0f:19:70:
e3:66:ee:50:e7:47:d4:b8:29:a5:68:8d:0e:b4:68:
51:6a:26:15:fb:33:c8:a3:e6:42:48:5e:0e:15:3e:
36:eb:8c:cf:99:e2:81:94:0c:2b:8e:e9:c9:69:87:
18:cb:39:69:14:a5:9c:e5:ea:6b:da:1d:fc:bb:08:
b7:3a:56:68:2f:0f:c6:60:cf:76:58:6a:67:c1:1e:
2f:ff:99:1d:e1:37:cf:42:35:47:f0:1a:41:85:20:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1B:21:6E:0B:32:D0:2A:7D:36:99:17:50:6D:FF:CE:B9:07:A1:10
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LBshbgsy0Cp9NpkXUG3_zrkHoRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.32.0/22
104.238.26.0/24
206.124.104.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:82:94:4c:7d:14:62:95:4d:b1:75:f8:e4:20:1b:04:bc:4a:
e6:63:3a:da:5f:f6:61:d8:5b:43:60:0c:7f:cd:fa:00:4f:5a:
fc:04:9d:ee:9e:0f:79:6b:03:f0:dd:2d:43:07:8d:3b:4c:8c:
6c:79:fb:26:8d:b4:d0:ad:1f:bb:4e:08:17:20:cb:12:a1:b7:
cf:bb:17:50:30:b0:68:4c:0c:63:17:24:c7:57:cd:a3:f0:10:
4a:87:64:e3:39:33:27:2b:6b:8f:48:f0:2f:e4:21:eb:76:f8:
45:3f:03:c5:c1:81:0c:d8:ee:71:2c:cc:cf:fd:86:dc:23:37:
0e:68:84:56:58:04:6a:b9:8a:b1:15:6c:c7:0d:43:44:4e:db:
af:ee:fc:4c:c0:08:c9:7a:fc:27:25:c7:5f:7a:f2:b2:de:fc:
6e:3e:c3:88:f9:91:8c:a5:58:d9:86:13:32:7d:db:84:60:f7:
f3:31:65:3f:c8:87:06:5d:71:87:89:c7:b4:16:f3:1c:c3:55:
6b:cb:21:42:1e:51:48:5f:1e:0a:a7:f3:a9:d8:73:3d:b7:49:
71:c9:8c:5a:37:91:51:3d:44:bb:ab:e1:1f:0e:82:f5:50:10:
e9:7f:01:b6:be:f1:48:1d:6d:4e:4c:a8:12:44:04:dd:79:20:
1b:88:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org