Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/0wbAosFIBOXVgQ_dXLDZt69Bv8g.roa
File: 0wbAosFIBOXVgQ_dXLDZt69Bv8g.roa (raw, json)
Hash identifier: 0P4t24VS39r1s3a0qq2/0YRh2nZS0t6u/+fOXj5BpH4=
Subject key identifier: D3:06:C0:A2:C1:48:04:E5:D5:81:0F:DD:5C:B0:D9:B7:AF:41:BF:C8
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 05B3BB9B
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/0wbAosFIBOXVgQ_dXLDZt69Bv8g.roa
Signing time: Sat 01 Jan 2022 05:52:33 +0000
ROA not before: Sat 01 Jan 2022 05:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28746
IP address blocks: 185.104.23.0/24 maxlen: 24
185.104.20.0/24 maxlen: 24
185.104.21.0/24 maxlen: 24
185.104.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95665051 (0x5b3bb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Jan 1 05:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d306c0a2c14804e5d5810fdd5cb0d9b7af41bfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:03:b3:39:3b:e2:66:b9:25:76:a6:89:cf:
d4:d2:24:ba:0a:46:d9:af:1f:b1:9c:32:7c:7b:b2:
3a:c5:ac:fa:a0:b2:f9:3c:be:64:6b:af:9f:97:7c:
63:92:57:74:2a:52:80:67:04:75:cb:19:27:3d:de:
f7:cf:9c:1e:b9:f3:c0:6e:fb:3e:88:9f:7c:11:fc:
20:0c:bc:cc:ef:7e:fd:59:67:41:2d:52:e6:24:9f:
9d:a4:2a:79:19:3d:94:af:28:49:9a:3a:0f:43:d5:
11:65:e8:9f:dc:ce:69:5f:19:a7:70:4b:ef:8d:64:
b8:4f:17:09:14:01:83:58:7a:4a:ce:9e:02:c4:70:
87:29:7e:a8:9e:9a:0a:ea:3b:2d:07:15:6e:12:1d:
6d:fb:8c:95:dd:b7:d0:6b:c0:4e:a6:34:eb:b9:76:
c6:c7:96:23:4d:05:93:6c:b1:8d:7f:e0:a6:e8:6a:
71:e6:0e:26:c3:26:01:9c:8b:e3:02:3f:42:28:7e:
e8:bf:c1:b2:e4:2c:d1:bb:82:c9:3d:74:73:05:f5:
3a:52:1b:d2:7e:b1:8a:a9:fb:cc:82:34:5d:ca:45:
a6:b0:0c:df:98:83:cb:7e:a4:d1:a6:04:99:68:14:
02:2f:54:32:2b:fd:05:9a:02:48:e0:dd:0f:c3:e8:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:C0:A2:C1:48:04:E5:D5:81:0F:DD:5C:B0:D9:B7:AF:41:BF:C8
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/0wbAosFIBOXVgQ_dXLDZt69Bv8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.20.0/22
Signature Algorithm: sha256WithRSAEncryption
44:66:3c:00:01:e9:e2:17:d5:47:44:5f:13:82:6f:2d:89:ff:
29:56:e5:ef:c3:fe:26:07:4a:d3:18:a4:7e:36:42:2e:98:a5:
24:51:25:ee:5c:78:c6:2d:2b:37:3e:70:7d:1e:d8:e2:2d:c2:
35:47:1a:a0:ff:4e:f7:a1:ea:97:b4:96:da:ff:6a:d6:73:22:
02:28:d7:00:26:14:96:d3:5a:64:5d:92:2b:80:4d:3a:03:0a:
61:bb:74:e9:0b:3a:77:4e:da:cd:17:69:20:78:5f:c5:40:19:
fe:b5:27:25:7f:d6:cf:d9:33:9f:db:10:8e:36:bf:a1:20:40:
c9:d9:03:1e:06:c6:04:f9:6d:7c:70:82:3c:39:2e:f8:a0:0f:
67:ab:14:b8:d6:c5:dc:96:2a:fd:71:12:da:33:b3:a5:5a:98:
e8:a0:32:33:1f:b3:07:84:1c:b6:50:6f:22:40:e1:39:c2:f1:
71:91:2b:ec:6d:67:dc:e5:22:28:90:7b:28:2b:d0:94:83:7a:
0d:30:ed:29:71:e7:a4:64:ff:83:b8:ee:38:71:c1:58:6f:b2:
58:52:61:14:d0:1b:cc:4d:0d:c5:4d:71:44:58:1f:fd:77:76:
72:3b:d7:5b:67:82:ea:2f:7a:62:96:20:f5:d2:d7:87:11:c2:
57:09:8b:98
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBbO7mzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZmQ2OGYxYjI0MTQyM2RhOTc2NDdiOTkyMjQ1MzAzODZkMjU2OThjMB4XDTIyMDEw
MTA1NTIzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDMwNmMwYTJjMTQ4
MDRlNWQ1ODEwZmRkNWNiMGQ5YjdhZjQxYmZjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJw+A7M5O+JmuSV2ponP1NIkugpG2a8fsZwyfHuyOsWs+qCy
+Ty+ZGuvn5d8Y5JXdCpSgGcEdcsZJz3e98+cHrnzwG77PoiffBH8IAy8zO9+/Vln
QS1S5iSfnaQqeRk9lK8oSZo6D0PVEWXon9zOaV8Zp3BL741kuE8XCRQBg1h6Ss6e
AsRwhyl+qJ6aCuo7LQcVbhIdbfuMld230GvATqY067l2xseWI00Fk2yxjX/gpuhq
ceYOJsMmAZyL4wI/Qih+6L/BsuQs0buCyT10cwX1OlIb0n6xiqn7zII0XcpFprAM
35iDy36k0aYEmWgUAi9UMiv9BZoCSODdD8Pol88CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTTBsCiwUgE5dWBD91csNm3r0G/yDAfBgNVHSMEGDAWgBSf1o8bJBQj2pdk
e5kiRTA4bSVpjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L245YVBHeVFVSTlxWFpIdVpJa1V3T0cwbGFZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvMzVkZWU1LWQ4ZGItNDhlMy1iN2JiLTA4MTBkMTZiY2M4Ny8x
LzB3YkFvc0ZJQk9YVmdRX2RYTERadDY5QnY4Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
MzVkZWU1LWQ4ZGItNDhlMy1iN2JiLTA4MTBkMTZiY2M4Ny8xL245YVBHeVFVSTlx
WFpIdVpJa1V3T0cwbGFZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArloFDANBgkqhkiG9w0BAQsFAAOC
AQEARGY8AAHp4hfVR0RfE4JvLYn/KVbl78P+JgdK0xikfjZCLpilJFEl7lx4xi0r
Nz5wfR7Y4i3CNUcaoP9O96Hql7SW2v9q1nMiAijXACYUltNaZF2SK4BNOgMKYbt0
6Qs6d07azRdpIHhfxUAZ/rUnJX/Wz9kzn9sQjja/oSBAydkDHgbGBPltfHCCPDku
+KAPZ6sUuNbF3JYq/XES2jOzpVqY6KAyMx+zB4QctlBvIkDhOcLxcZEr7G1n3OUi
KJB7KCvQlIN6DTDtKXHnpGT/g7juOHHBWG+yWFJhFNAbzE0NxU1xRFgf/Xd2cjvX
W2eC6i96YpYg9dLXhxHCVwmLmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:31 2024 by rpki-client on console-ams.rpki-client.org