Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wsGXTWmrsG5LJ5qiueuK871qKA4.roa
File: wsGXTWmrsG5LJ5qiueuK871qKA4.roa (raw, json)
Hash identifier: UqVBUOmiFGINQ3L1bcwwWntUH3n6W0vratIPPhKxtNs=
Subject key identifier: C2:C1:97:4D:69:AB:B0:6E:4B:27:9A:A2:B9:EB:8A:F3:BD:6A:28:0E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0182AE1CD32E3E137D7FA7CBD7AE9DCC2D53
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wsGXTWmrsG5LJ5qiueuK871qKA4.roa
Signing time: Wed 17 Aug 2022 23:21:40 +0000
ROA not before: Wed 17 Aug 2022 23:21:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207046
IP address blocks: 185.247.4.0/22 maxlen: 24
194.113.28.0/22 maxlen: 24
185.247.5.0/24 maxlen: 24
185.247.6.0/23 maxlen: 24
185.209.36.0/22 maxlen: 22
194.146.220.0/22 maxlen: 22
185.224.220.0/22 maxlen: 22
185.221.16.0/23 maxlen: 23
185.227.206.0/24 maxlen: 24
185.228.162.0/24 maxlen: 24
45.134.84.0/22 maxlen: 24
185.221.22.0/23 maxlen: 23
185.227.207.0/24 maxlen: 24
185.249.204.0/22 maxlen: 22
185.250.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ae:1c:d3:2e:3e:13:7d:7f:a7:cb:d7:ae:9d:cc:2d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 17 23:21:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2c1974d69abb06e4b279aa2b9eb8af3bd6a280e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:2c:34:46:e6:ed:16:c4:4a:a3:ed:27:3e:
86:7c:1a:1e:a9:b6:99:20:69:51:2a:f4:44:2e:56:
01:1f:b4:93:3d:66:db:38:cd:e4:ea:67:e1:53:71:
c1:95:63:00:28:0a:b8:1f:a5:a9:5f:56:a0:6e:fc:
45:f2:67:33:c8:9f:c4:17:55:7c:6e:65:41:5a:d7:
84:98:ac:48:97:a1:5f:23:99:59:d1:ac:e0:cd:8e:
84:4a:e4:93:12:90:b9:b4:6f:33:75:8a:e7:d7:f8:
d2:fb:1c:9b:dc:5a:b0:67:c4:d5:00:6c:71:73:3b:
cb:c4:cf:a4:45:f8:fe:cb:17:0b:cb:43:b7:7d:3d:
d0:ea:ed:ae:c1:6b:07:dc:f0:99:4d:aa:2a:bc:68:
55:3c:b7:ef:3b:6c:e3:5d:00:08:ca:dc:69:66:73:
71:0e:84:53:be:2b:73:94:41:93:ac:77:36:ec:78:
d3:5b:e4:27:19:71:05:45:cf:1d:a9:1f:10:45:f6:
5f:48:81:17:18:fd:d1:d9:83:57:6a:ba:4d:87:6b:
0e:81:8c:72:e3:87:9b:02:4e:6d:8c:d5:20:f5:4c:
fb:1e:0a:be:7f:5a:ab:73:57:8b:4d:60:6b:53:53:
57:48:80:a9:92:37:76:fa:fd:d3:0c:32:d5:29:5a:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C1:97:4D:69:AB:B0:6E:4B:27:9A:A2:B9:EB:8A:F3:BD:6A:28:0E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wsGXTWmrsG5LJ5qiueuK871qKA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
185.209.36.0/22
185.221.16.0/23
185.221.22.0/23
185.224.220.0/22
185.227.206.0/23
185.228.162.0/24
185.247.4.0/22
185.249.204.0/22
185.250.182.0/23
194.113.28.0/22
194.146.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:bc:e0:1f:cb:a1:1c:91:de:03:cd:46:5e:7f:7a:5c:5b:40:
23:a7:c6:a5:43:c8:54:31:0d:3e:f2:94:55:d5:c6:01:4f:ed:
fe:5b:12:28:6b:92:b5:da:b0:58:df:e5:fd:10:ab:e5:fd:8e:
4f:9b:79:79:43:64:66:cd:4d:4e:da:ec:6c:b3:8b:70:d6:9d:
df:2e:b0:67:af:7e:d3:f1:cd:02:5f:c5:a5:6a:c4:a4:0a:4e:
56:17:7d:f5:0e:5d:8e:77:42:96:17:67:38:b9:1a:cf:70:50:
f6:8d:29:9d:9e:79:9d:ef:90:90:0e:e9:25:5b:09:5b:a7:2b:
4c:b9:17:63:49:3b:05:20:a4:64:57:26:c5:18:14:f0:ce:02:
81:77:a2:fc:f7:27:8e:51:cf:b7:c3:d4:4f:dd:65:18:96:b3:
05:a7:38:fa:d3:62:25:1d:65:5b:36:20:3d:d7:5d:dd:cb:52:
e8:b3:6c:2d:fc:1f:65:cb:12:5c:f0:1c:25:e6:b8:c2:cf:94:
e6:d6:57:ac:95:a2:d2:2e:dc:d7:8a:4d:67:1d:59:22:8d:d6:
2e:25:69:73:c4:31:d3:d1:9e:43:5f:3b:f8:79:df:ec:f5:a3:
72:44:32:59:ad:ad:d6:29:bc:5a:00:06:5e:9f:7f:d5:03:1b:
33:b6:42:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org