Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MCjAnaQjrUcjI-z3TYBDlzldJQo.roa
File: MCjAnaQjrUcjI-z3TYBDlzldJQo.roa (raw, json)
Hash identifier: MyMVkPKpZdIK+jshrAde5FBwqUo+2mKOaSp2OjmXnAU=
Subject key identifier: 30:28:C0:9D:A4:23:AD:47:23:23:EC:F7:4D:80:43:97:39:5D:25:0A
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01855F30A9CF6FE24C91ECBC7938CE9FCFDD
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MCjAnaQjrUcjI-z3TYBDlzldJQo.roa
Signing time: Thu 29 Dec 2022 18:41:42 +0000
ROA not before: Thu 29 Dec 2022 18:41:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202496
IP address blocks: 104.239.92.0/23 maxlen: 23
104.143.254.0/23 maxlen: 23
216.173.78.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.249.30.0/23 maxlen: 23
216.173.80.0/23 maxlen: 23
216.173.88.0/23 maxlen: 23
45.43.176.0/23 maxlen: 23
45.43.176.0/20 maxlen: 20
104.239.13.0/24 maxlen: 24
45.43.178.0/23 maxlen: 23
45.43.180.0/23 maxlen: 23
45.43.182.0/23 maxlen: 23
45.43.186.0/23 maxlen: 23
45.43.184.0/23 maxlen: 23
104.143.235.0/24 maxlen: 24
45.43.190.0/23 maxlen: 23
45.43.188.0/23 maxlen: 23
104.143.252.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
104.143.248.0/22 maxlen: 22
104.238.4.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:30:a9:cf:6f:e2:4c:91:ec:bc:79:38:ce:9f:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Dec 29 18:41:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3028c09da423ad472323ecf74d804397395d250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:40:b7:fe:0f:08:74:d3:87:40:11:cc:bb:
dc:62:8a:bd:db:7a:6a:40:27:80:28:22:e5:9b:f6:
4c:fe:d2:05:47:c4:95:5b:fb:d2:fd:f9:60:3f:b4:
58:01:90:84:f1:a1:e0:06:84:11:32:d4:32:94:84:
1c:31:d3:d2:3f:31:b5:eb:4c:00:a0:06:ed:6e:6b:
a5:cb:a1:61:15:c7:62:26:db:27:d8:b7:c6:05:0b:
36:a9:b6:f8:65:8d:37:ba:fe:04:3d:fd:c9:0e:dc:
7e:ee:1f:c8:09:24:e9:0b:2b:7e:92:b7:c7:84:d1:
37:cb:61:53:fd:31:72:75:91:bd:80:12:18:33:9a:
14:e3:09:88:87:85:f9:91:ea:03:4b:ff:04:f1:6a:
b5:01:3a:01:41:49:a1:5a:89:0e:0d:77:8e:ac:f4:
e6:48:2a:a2:78:08:df:75:0c:d0:e7:2c:af:7e:fe:
73:0b:6b:3b:68:4f:47:e1:dd:68:99:9f:16:a8:8a:
a9:41:dd:2e:76:86:35:27:bd:5a:f6:3b:76:57:bf:
e8:58:f2:3b:6a:d4:65:c7:c1:53:91:7a:a1:df:bf:
f7:4b:b4:53:b1:80:f5:f5:11:81:ce:3c:ec:d7:44:
b4:0c:4c:41:3a:75:ad:3b:d0:ab:ba:4b:14:1b:c6:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:C0:9D:A4:23:AD:47:23:23:EC:F7:4D:80:43:97:39:5D:25:0A
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MCjAnaQjrUcjI-z3TYBDlzldJQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.176.0/20
104.143.235.0/24
104.143.248.0-104.143.252.255
104.143.254.0/23
104.233.20.0/24
104.238.4.0/23
104.239.13.0/24
104.239.92.0/23
104.249.30.0/23
104.249.60.0/23
216.173.78.0-216.173.81.255
216.173.88.0/23
Signature Algorithm: sha256WithRSAEncryption
64:9e:57:26:73:d2:12:78:19:f1:6d:89:b4:82:7f:f1:f5:fb:
de:5f:ef:76:d2:29:25:22:4f:d8:78:1c:77:88:b8:f6:f8:11:
e2:fd:55:d2:32:b1:61:ea:9e:f9:07:46:a7:3f:0b:d5:ca:53:
dd:4a:95:47:e4:d3:07:a2:32:47:d9:50:bd:d0:de:04:e4:38:
6b:7e:1b:9f:56:8c:98:44:21:f9:30:9f:9b:be:9f:1a:e6:2d:
2e:3b:90:1d:0d:5a:4c:ba:53:11:b8:52:3a:6b:ff:a4:a2:10:
2c:99:6f:8f:f3:79:8b:41:be:de:f9:da:99:e7:1a:9f:7a:f8:
ad:71:eb:a5:35:c1:7f:41:3e:77:ff:30:72:e5:41:ae:18:c9:
92:7b:e6:e0:6c:d3:ed:c4:9c:6c:3f:7e:1e:b2:2a:64:ed:24:
ed:ba:30:6b:20:90:3b:f1:c2:aa:20:79:69:26:88:7a:03:54:
e8:a1:47:ca:93:a7:d6:9b:1c:aa:87:c6:d7:69:67:30:3b:b2:
3f:7d:86:bf:62:e1:ee:0a:64:90:dd:f7:0c:30:76:4d:c5:89:
e9:46:ef:33:a5:ff:54:a2:16:0f:8d:e4:d0:7c:13:60:2a:e4:
00:2e:d3:b7:34:b8:ae:7d:b9:f1:5a:f8:ae:9a:7b:26:d4:dd:
9e:c9:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org