Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/w3CTfPKzR3ALL7gCCqT860lY4z0.roa
File: w3CTfPKzR3ALL7gCCqT860lY4z0.roa (raw, json)
Hash identifier: VQZTzaGPnMKb9YA2PcffHw8Z/LagiwANq1evEVAcaLw=
Subject key identifier: C3:70:93:7C:F2:B3:47:70:0B:2F:B8:02:0A:A4:FC:EB:49:58:E3:3D
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0184829130777E4AB9C89750F0A6551B70ED
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/w3CTfPKzR3ALL7gCCqT860lY4z0.roa
Signing time: Wed 16 Nov 2022 22:31:03 +0000
ROA not before: Wed 16 Nov 2022 22:31:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205585
IP address blocks: 185.220.226.0/24 maxlen: 24
185.143.232.0/22 maxlen: 22
185.143.232.0/24 maxlen: 24
185.143.233.0/24 maxlen: 24
185.143.234.0/24 maxlen: 24
185.143.235.0/24 maxlen: 24
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/46 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:82:91:30:77:7e:4a:b9:c8:97:50:f0:a6:55:1b:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Nov 16 22:31:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c370937cf2b347700b2fb8020aa4fceb4958e33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:5c:6d:ba:44:05:95:1c:9b:18:fd:87:4d:
0b:26:77:44:f6:cb:4e:f5:6d:a4:2c:fa:c0:6a:53:
62:85:26:af:3b:23:43:da:73:f8:28:06:5d:e5:9a:
c0:94:a7:87:c0:42:41:16:fb:11:f6:b9:28:2e:fb:
74:71:c7:c4:ce:df:59:d1:1b:86:2f:4d:c9:02:6d:
ca:9a:c7:85:f4:54:d1:ab:99:c1:32:5a:ee:0b:fe:
c6:f7:98:d8:1b:20:c9:36:02:8a:73:54:96:70:b7:
10:94:06:2e:67:6f:6a:f5:dd:04:06:36:e0:d3:0e:
fe:80:f3:86:fc:bb:df:39:e6:24:f9:78:00:e5:73:
a6:6d:43:66:80:ce:79:8c:c7:d1:f6:b5:4c:04:69:
f9:a3:74:a5:b6:0a:76:d8:c0:10:75:cc:09:e8:09:
60:20:52:a9:59:79:81:9a:0f:a4:dc:55:b9:f4:ca:
e7:2e:eb:c6:70:79:b6:de:c9:a9:04:c0:92:e6:96:
a2:1a:19:01:ae:31:0a:17:a2:78:3c:d1:fc:ec:14:
8c:ec:b9:68:74:8d:f1:71:3b:3c:3a:bd:d5:6c:55:
33:27:11:d0:d1:aa:23:67:60:4e:56:62:d9:1c:42:
2b:a4:96:0b:b5:02:b2:3b:af:ec:f8:26:3c:68:76:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:93:7C:F2:B3:47:70:0B:2F:B8:02:0A:A4:FC:EB:49:58:E3:3D
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/w3CTfPKzR3ALL7gCCqT860lY4z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.232.0/22
185.220.226.0/24
IPv6:
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
84:22:7a:70:46:dc:dc:23:bd:5d:81:5f:f0:10:54:ab:08:2c:
18:be:15:39:fc:e2:e5:70:3f:90:72:d5:9b:c6:c7:d2:4d:08:
f3:bf:55:dd:58:9b:ba:1e:c0:84:bf:8f:ed:a1:9d:66:40:83:
a4:0e:90:62:36:62:2e:f4:70:3b:ae:be:b0:f4:5e:56:25:b6:
01:b4:d5:31:2e:97:31:c7:eb:61:56:20:3a:e3:5e:da:a7:27:
25:4c:4b:65:24:32:cb:a3:7b:e8:cd:fa:b8:6b:02:06:67:68:
b6:f3:f0:17:a5:b6:fd:eb:d9:23:ae:ae:46:5e:aa:4a:cd:c2:
cf:69:5c:3a:a1:a1:29:99:4a:aa:0a:da:e5:9f:eb:78:7d:47:
e1:9a:af:56:5b:1e:ea:71:24:7a:26:ad:76:b2:d6:e8:2a:cd:
b0:9a:d0:cd:40:29:79:ce:71:bc:0f:04:18:9e:0b:03:76:b3:
8d:84:b2:1c:29:7e:82:98:6c:fb:ab:d6:a2:c7:18:f8:0d:ee:
49:91:e6:83:0d:7f:7c:f5:31:b6:35:50:e5:c2:2c:9e:6a:34:
ba:2e:a9:2b:92:db:01:86:21:c2:20:49:40:e7:bb:ba:8d:f1:
cc:f4:cd:f4:e0:03:8e:af:08:00:88:23:1f:8c:ca:8a:b8:d1:
04:13:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:32 2023 by rpki-client on console-fra.rpki-client.org