Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XL3PyLF6NbQITftfyZpldmOGJAg.roa
File: XL3PyLF6NbQITftfyZpldmOGJAg.roa (raw, json)
Hash identifier: aqAx4pFgyYefNzcx8YXW5QKaSJUAq0Y6sz96LTO33zI=
Subject key identifier: 5C:BD:CF:C8:B1:7A:35:B4:08:4D:FB:5F:C9:9A:65:76:63:86:24:08
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01333D4E
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XL3PyLF6NbQITftfyZpldmOGJAg.roa
Signing time: Sat 01 Jan 2022 05:02:48 +0000
ROA not before: Sat 01 Jan 2022 05:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 104.249.32.0/22 maxlen: 22
104.249.56.0/22 maxlen: 22
104.238.0.0/22 maxlen: 22
45.43.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20135246 (0x1333d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 1 05:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cbdcfc8b17a35b4084dfb5fc99a657663862408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:bc:68:25:e0:5f:6a:e1:53:da:68:d7:32:
33:72:65:04:20:e5:7d:6a:ba:2d:27:9c:43:32:38:
41:de:f9:7c:7a:b2:a0:b3:b9:24:f2:1d:6d:85:6c:
da:1c:80:8c:c6:63:4c:db:23:02:06:94:2e:08:31:
5e:63:a9:3a:94:0b:c2:1f:b0:d3:9e:61:f7:e4:97:
8f:c0:67:39:99:bc:d1:25:e8:bc:72:d7:b9:c7:a1:
fb:26:2a:cf:07:13:ae:df:a8:f2:fd:50:02:b0:f7:
eb:23:50:34:aa:e4:2d:e2:5e:26:6c:a0:ec:38:cf:
7d:d4:8b:ad:b3:8b:b1:d0:1b:e4:02:d3:7e:6c:d4:
18:0b:52:31:c6:1e:12:f3:c3:b5:29:df:38:c1:5d:
f3:c3:9d:37:15:63:47:bd:9f:c2:2c:6e:13:f0:9b:
39:7e:df:5b:76:c2:24:90:18:14:0d:af:83:5d:14:
63:2a:31:5b:45:65:1f:ad:9e:70:a0:bb:3e:dd:0b:
1a:de:cd:08:fb:93:72:7e:77:cb:36:65:bd:fc:ee:
20:0a:35:33:03:03:f2:c5:cb:51:88:68:7e:d4:c1:
f3:54:b5:90:8d:29:d9:b4:a4:ec:aa:02:fe:6a:5e:
91:95:39:fd:4e:c0:51:2b:76:47:a2:cc:f2:74:58:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:CF:C8:B1:7A:35:B4:08:4D:FB:5F:C9:9A:65:76:63:86:24:08
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XL3PyLF6NbQITftfyZpldmOGJAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.132.0/22
104.238.0.0/22
104.249.32.0/22
104.249.56.0/22
Signature Algorithm: sha256WithRSAEncryption
00:15:bf:55:b7:ba:1e:a1:ad:da:aa:47:fc:d8:4a:20:62:bb:
f3:67:3c:df:ab:9c:4b:0b:9f:04:0f:bf:bf:b3:04:57:ba:35:
45:ac:02:6b:bf:94:2d:d5:5b:0b:49:b4:4c:eb:e0:de:f3:6c:
c4:ce:ca:a1:b7:eb:53:d2:17:59:61:d5:fe:d7:67:a6:da:75:
67:d1:2c:c2:e2:3a:c4:96:fd:04:a6:e1:28:f4:da:b4:32:70:
7d:63:b4:68:44:5d:56:25:ea:1f:f5:06:6b:ea:a8:b2:eb:02:
86:96:0a:da:18:19:7a:c0:35:c6:08:06:99:b5:2c:c8:cd:f5:
3f:54:af:26:8f:95:54:dc:56:ec:ee:26:be:63:94:8e:76:ef:
68:45:e3:47:00:2a:81:1a:67:4b:fb:c1:8c:11:4b:32:c8:0c:
26:62:58:e3:3f:7e:88:1e:ee:8a:7b:9f:69:d7:d9:8a:c3:d2:
39:ef:1e:31:ea:2d:97:70:f9:a5:04:de:d9:e7:8f:3c:b5:7e:
8f:54:71:25:1a:b0:7e:97:83:2b:e5:b8:56:39:00:18:80:ba:
64:f5:15:9c:7e:3d:87:25:e5:f2:06:45:9b:2e:59:45:61:b8:
94:ca:fd:25:c2:ab:21:83:35:31:0f:13:d1:6e:17:71:ea:e5:
70:89:7a:9b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEATM9TjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDU4MWU2NzNkODBmNzQ3NDkzNmIyMTMzN2VhZmNjMWJkYzM4NWU5MB4XDTIyMDEw
MTA1MDI0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWNiZGNmYzhiMTdh
MzViNDA4NGRmYjVmYzk5YTY1NzY2Mzg2MjQwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANoCvGgl4F9q4VPaaNcyM3JlBCDlfWq6LSecQzI4Qd75fHqy
oLO5JPIdbYVs2hyAjMZjTNsjAgaULggxXmOpOpQLwh+w055h9+SXj8BnOZm80SXo
vHLXuceh+yYqzwcTrt+o8v1QArD36yNQNKrkLeJeJmyg7DjPfdSLrbOLsdAb5ALT
fmzUGAtSMcYeEvPDtSnfOMFd88OdNxVjR72fwixuE/CbOX7fW3bCJJAYFA2vg10U
YyoxW0VlH62ecKC7Pt0LGt7NCPuTcn53yzZlvfzuIAo1MwMD8sXLUYhoftTB81S1
kI0p2bSk7KoC/mpekZU5/U7AUSt2R6LM8nRY200CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRcvc/IsXo1tAhN+1/JmmV2Y4YkCDAfBgNVHSMEGDAWgBRgWB5nPYD3R0k2
shM36vzBvcOF6TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lGZ2VaejJBOTBkSk5ySVROLXI4d2IzRGhlay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvZmRkNjMzLWM2NTgtNDljNS05ZThmLWZiMDc5NTVmM2FhYS8x
L1hMM1B5TEY2TmJRSVRmdGZ5WnBsZG1PR0pBZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
ZmRkNjMzLWM2NTgtNDljNS05ZThmLWZiMDc5NTVmM2FhYS8xL1lGZ2VaejJBOTBk
Sk5ySVROLXI4d2IzRGhlay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAi0rhAMEAmjuAAMEAmj5IAMEAmj5
ODANBgkqhkiG9w0BAQsFAAOCAQEAABW/Vbe6HqGt2qpH/NhKIGK782c836ucSwuf
BA+/v7MEV7o1RawCa7+ULdVbC0m0TOvg3vNsxM7KobfrU9IXWWHV/tdnptp1Z9Es
wuI6xJb9BKbhKPTatDJwfWO0aERdViXqH/UGa+qosusChpYK2hgZesA1xggGmbUs
yM31P1SvJo+VVNxW7O4mvmOUjnbvaEXjRwAqgRpnS/vBjBFLMsgMJmJY4z9+iB7u
inufadfZisPSOe8eMeotl3D5pQTe2eePPLV+j1RxJRqwfpeDK+W4VjkAGIC6ZPUV
nH49hyXl8gZFmy5ZRWG4lMr9JcKrIYM1MQ8T0W4XcerlcIl6mw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:45 2024 by rpki-client on console-ams.rpki-client.org