Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/3thFmMAgzVZeqQnNGMRVS7Whq0w.roa
File: 3thFmMAgzVZeqQnNGMRVS7Whq0w.roa (raw, json)
Hash identifier: pBG6swaFpADxU9MFik6YY2yH3gtqnKM2ZqanRgTNVOU=
Subject key identifier: DE:D8:45:98:C0:20:CD:56:5E:A9:09:CD:18:C4:55:4B:B5:A1:AB:4C
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 0182F8983E3DE51357C03DFB7BBAE7CCCC44
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/3thFmMAgzVZeqQnNGMRVS7Whq0w.roa
Signing time: Thu 01 Sep 2022 10:28:22 +0000
ROA not before: Thu 01 Sep 2022 10:28:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206281
IP address blocks: 185.104.31.0/24 maxlen: 24
185.104.28.0/24 maxlen: 24
185.104.29.0/24 maxlen: 24
185.104.30.0/24 maxlen: 24
2a06:2ec0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:98:3e:3d:e5:13:57:c0:3d:fb:7b:ba:e7:cc:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Sep 1 10:28:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ded84598c020cd565ea909cd18c4554bb5a1ab4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:9b:65:c8:bf:b3:da:f3:17:68:11:2c:a1:
bd:34:db:80:41:1a:2c:72:5e:28:96:71:2d:93:52:
93:b8:39:b9:5c:2e:da:09:7b:03:52:88:68:11:52:
ec:2d:f9:c9:7a:5b:62:94:55:c7:ac:82:ea:cc:37:
2a:16:c4:a0:3c:19:6c:4c:8c:9d:60:5b:68:85:a6:
41:5d:8f:bc:14:b3:e2:06:95:7a:22:bb:a8:27:c4:
6d:c3:7a:a8:5a:63:9c:d0:c7:cd:99:1a:b1:a0:77:
dc:23:0e:30:40:39:c8:a2:6b:3f:62:90:a7:c4:e8:
50:7e:91:a2:49:6e:2a:d8:6b:db:30:af:5a:d1:c2:
73:c6:5b:22:79:c4:09:e2:b0:4d:e3:3d:04:b5:4d:
7a:e8:39:96:67:16:ac:74:b3:b0:8f:5f:ce:cc:3e:
69:6d:ec:2a:dc:24:4d:06:03:8c:98:ee:a6:80:22:
36:ab:7e:73:99:e2:47:d8:3c:1d:99:f1:6a:a5:49:
3f:57:3d:e8:0e:ba:44:12:98:84:fa:37:7a:b8:c3:
98:cf:37:f4:fa:d7:bf:04:14:09:d6:ff:a3:1a:c5:
c0:bd:1c:ac:a2:85:c7:0e:d7:88:9c:36:a9:c3:a0:
95:dd:c5:3b:3b:19:d1:cd:56:17:36:21:9e:1e:82:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D8:45:98:C0:20:CD:56:5E:A9:09:CD:18:C4:55:4B:B5:A1:AB:4C
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/3thFmMAgzVZeqQnNGMRVS7Whq0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.28.0/22
IPv6:
2a06:2ec0::/32
Signature Algorithm: sha256WithRSAEncryption
52:8d:34:aa:82:34:58:d7:7e:92:1c:ba:3b:2f:2d:41:93:df:
f5:dd:3d:bd:1e:d1:7e:d0:78:cf:b0:2a:05:9e:c3:10:ad:5d:
6a:81:2d:de:c1:76:47:ee:15:99:45:a7:76:83:37:6f:db:ce:
88:55:35:2c:dc:8c:bf:5e:31:ac:89:0c:2f:ca:14:d6:6e:0c:
8a:31:9c:f7:43:56:17:b3:3f:cc:af:07:28:5f:c8:cf:67:08:
e0:4e:20:af:5a:60:94:07:7c:f5:0e:2a:24:05:b9:e7:55:a8:
c5:50:71:78:a4:5f:1b:91:f0:dc:cc:93:ca:69:5a:7b:eb:42:
eb:fb:23:00:72:ac:ea:7d:dd:0d:82:f9:58:23:bb:10:0f:5e:
0c:13:e9:e2:a7:71:83:7e:4b:a5:6f:10:d2:7d:b6:e1:ba:cf:
01:93:40:3a:bf:9c:e0:35:c6:d2:82:93:71:23:ad:7d:16:eb:
6c:95:69:fc:e0:fd:cb:a4:74:30:f4:11:d0:72:ad:ba:6e:69:
b1:7f:e8:10:dd:78:27:a1:7c:03:df:22:5e:05:de:08:78:1a:
a5:d6:bc:b6:aa:49:5a:52:d7:7d:a5:dc:6e:a9:03:e7:81:88:
fd:f7:d2:60:50:7c:33:40:df:5a:5a:a0:e6:b5:26:ad:25:af:
8f:60:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:19 2023 by rpki-client on console-fra.rpki-client.org