Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/WkdRavrir2lHgPIb3p1sXHe0cMc.roa
File: WkdRavrir2lHgPIb3p1sXHe0cMc.roa (raw, json)
Hash identifier: a6iZZE+suHwuG4ChDGqhfp5aRuwAt8TYdqXLp5FTCMQ=
Subject key identifier: 5A:47:51:6A:FA:E2:AF:69:47:80:F2:1B:DE:9D:6C:5C:77:B4:70:C7
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 01844177A07F60D56E96C6AAC0A023395F70
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/WkdRavrir2lHgPIb3p1sXHe0cMc.roa
Signing time: Fri 04 Nov 2022 07:07:49 +0000
ROA not before: Fri 04 Nov 2022 07:07:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48847
IP address blocks: 185.104.71.0/24 maxlen: 24
185.104.70.0/24 maxlen: 24
185.104.68.0/22 maxlen: 22
185.104.68.0/24 maxlen: 24
185.104.71.16/30 maxlen: 30
185.104.71.176/29 maxlen: 29
185.104.71.20/30 maxlen: 30
2a06:3480::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:77:a0:7f:60:d5:6e:96:c6:aa:c0:a0:23:39:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Nov 4 07:07:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a47516afae2af694780f21bde9d6c5c77b470c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b4:f9:cf:c8:ce:02:08:85:07:21:54:ae:e3:
10:26:f5:90:4d:c8:8b:f6:e5:18:86:9b:73:0f:4c:
39:60:9b:27:98:f6:13:ff:26:c1:6d:27:b8:27:16:
65:7e:ad:8b:ab:ef:b7:f4:b7:02:64:65:fe:85:c1:
6b:bc:75:0b:ff:c9:e1:0c:a0:f7:0e:87:b6:37:38:
66:41:da:4e:7c:71:47:32:02:d2:50:37:b6:0a:f1:
eb:58:6e:ea:35:89:6f:60:82:ee:5e:4a:54:9c:eb:
e5:9d:5c:30:18:f8:8d:58:d8:97:fe:1a:07:b2:c9:
12:41:4f:95:f7:31:86:33:f0:04:f7:c7:de:86:d5:
92:17:2d:c2:da:3d:03:0a:8e:94:56:10:9f:66:ff:
76:69:f4:9e:ab:2e:75:3b:c9:4c:86:79:8d:73:20:
f5:2e:97:71:fa:a8:ea:65:43:da:8c:b8:a7:af:1f:
f2:3e:f3:03:b4:1e:3a:c4:07:8e:b7:a3:37:50:d7:
7f:26:be:cc:bd:b4:45:1f:d1:bc:2c:64:e8:dc:c1:
5f:87:8c:16:b0:95:4e:49:d6:2e:fd:93:97:45:d3:
37:2a:1c:63:fa:e9:15:e7:67:1c:af:c0:43:04:4f:
10:af:89:cf:f8:35:95:a8:30:3d:c3:aa:23:61:4b:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:47:51:6A:FA:E2:AF:69:47:80:F2:1B:DE:9D:6C:5C:77:B4:70:C7
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/WkdRavrir2lHgPIb3p1sXHe0cMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.68.0/22
IPv6:
2a06:3480::/29
Signature Algorithm: sha256WithRSAEncryption
95:14:48:55:36:82:4e:22:98:55:66:0e:fc:fe:96:03:0a:94:
64:12:f2:eb:ca:89:ba:1c:0c:8b:10:68:68:fd:c4:17:db:b7:
e1:7e:8a:e0:67:9e:62:09:44:38:e7:da:9b:b4:a3:0c:91:1a:
9e:1d:a2:83:a3:9e:ce:fc:1a:b8:35:d4:6b:d9:2c:6e:8a:51:
7f:ef:45:82:c6:d4:85:bb:83:a0:41:4e:32:e2:5c:a8:e6:e0:
d2:d0:1c:2d:c6:ba:a1:93:8a:b8:37:03:11:af:ac:64:29:55:
2a:77:86:ee:92:32:db:1f:3f:05:96:75:cb:39:b6:ce:c7:cf:
bf:1d:1e:b2:dd:e3:9a:f7:27:42:32:56:66:ae:d0:d3:6a:27:
50:47:32:9a:0d:b4:e9:3c:91:2d:c4:c2:ba:1e:b5:9d:4d:df:
65:e6:0f:6f:29:00:f0:8d:77:0e:28:01:26:44:6e:0e:49:be:
27:8f:d4:76:a3:ca:97:7f:4d:33:a2:2c:f8:70:ee:9b:6b:73:
dd:4f:75:55:17:c3:68:d6:20:d6:4c:f4:4f:ae:1b:b9:b7:42:
b7:b3:e6:d8:db:fc:03:ab:50:41:25:a2:33:24:51:84:45:7d:
7c:4d:5e:cf:64:c8:df:10:ba:ca:8e:9e:57:d7:30:76:90:e5:
ba:b1:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-ams.rpki-client.org