Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/C32WnmzYW4G0LC1kBcUwRMiD-ag.roa
File: C32WnmzYW4G0LC1kBcUwRMiD-ag.roa (raw, json)
Hash identifier: OHfnBZGe3QNPSN3/9pkpDUdmSli8KNi3G2T0oZvmIXo=
Subject key identifier: 0B:7D:96:9E:6C:D8:5B:81:B4:2C:2D:64:05:C5:30:44:C8:83:F9:A8
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 018521F7E2F7BEA6601E6E24589DD565A18A
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/C32WnmzYW4G0LC1kBcUwRMiD-ag.roa
Signing time: Sat 17 Dec 2022 21:22:51 +0000
ROA not before: Sat 17 Dec 2022 21:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60316
IP address blocks: 185.104.72.0/22 maxlen: 24
185.212.32.0/24 maxlen: 24
185.186.120.0/22 maxlen: 24
185.227.224.0/22 maxlen: 24
185.33.216.0/22 maxlen: 24
2a06:2f80::/29 maxlen: 32
2a04:5a00::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:f7:e2:f7:be:a6:60:1e:6e:24:58:9d:d5:65:a1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Dec 17 21:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b7d969e6cd85b81b42c2d6405c53044c883f9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:af:3a:c4:25:68:9d:3e:21:8e:a3:e6:de:
74:5c:11:7f:89:d6:fa:5a:f8:7d:2b:31:79:0d:bd:
04:81:a1:5b:4a:98:aa:2c:dc:df:97:1d:ab:9b:e4:
02:b9:0a:32:3d:e2:b2:ee:15:a5:c7:02:0f:00:0d:
a3:e0:2a:67:20:f0:8e:43:f9:86:ed:c1:45:2d:26:
88:76:5f:2f:47:8c:33:ae:bb:fb:62:34:2b:9d:b5:
6b:1b:23:53:7f:20:05:be:30:11:8b:20:34:a7:31:
f7:4c:07:2d:79:23:29:44:ac:3f:41:0c:38:0f:b9:
24:79:51:62:80:93:b7:9d:89:a1:31:2d:28:5e:cd:
26:35:ba:99:28:7a:6e:ca:55:8b:3f:5e:c5:68:7f:
35:b7:b0:b2:4b:18:eb:88:04:2e:7a:8a:cf:97:2d:
8b:3b:76:d2:f7:b4:b3:25:75:2a:8f:4d:35:81:5b:
5e:c7:29:13:dc:fd:f4:2a:e7:e4:e4:aa:2a:9d:39:
66:2b:0c:34:1f:36:1a:d9:06:27:43:07:eb:62:b1:
0a:bf:e8:36:67:86:05:40:db:11:a3:06:25:1c:69:
2a:c6:76:2f:1c:0b:1d:e7:f1:5d:0f:9f:72:7f:f4:
e5:25:47:5e:06:00:33:61:eb:27:e0:45:6b:f4:d5:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:96:9E:6C:D8:5B:81:B4:2C:2D:64:05:C5:30:44:C8:83:F9:A8
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/C32WnmzYW4G0LC1kBcUwRMiD-ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.216.0/22
185.104.72.0/22
185.186.120.0/22
185.212.32.0/24
185.227.224.0/22
IPv6:
2a04:5a00::/29
2a06:2f80::/29
Signature Algorithm: sha256WithRSAEncryption
1d:43:a1:ce:37:e3:14:92:15:0e:16:45:58:cb:fc:da:1b:27:
f0:c6:25:6a:dd:11:70:d1:ea:42:2a:f9:e4:9e:ef:26:a4:3b:
b3:2a:a4:7a:af:91:1f:c7:01:2c:ea:62:3d:77:91:de:d0:12:
52:44:d0:4d:35:48:9e:88:76:d9:54:f2:d4:20:66:35:0e:ed:
3e:54:53:53:d7:7a:2a:44:49:52:c7:14:8d:52:a0:1e:d0:f7:
22:97:92:8e:df:0c:c7:df:f3:b5:10:90:b5:69:cf:11:2c:46:
71:59:fe:33:1c:9b:33:90:96:ec:4f:f7:ac:77:f1:d0:32:fc:
e1:1a:d2:88:62:3b:b7:fd:07:b0:30:d0:f2:13:d5:6b:bc:58:
f1:f4:e8:6f:49:7f:aa:c7:ca:42:8c:8a:ae:13:02:71:74:00:
07:ab:73:fe:0c:3f:f1:8b:ef:8f:e2:89:15:68:a7:78:7b:18:
5a:fc:02:a3:13:16:71:0a:02:2c:4e:e4:08:19:a8:af:5d:1f:
56:21:7b:04:84:8a:bd:e2:6b:83:8a:ae:4c:56:2e:19:aa:a6:
17:a7:59:5d:35:cc:b4:67:90:37:14:94:c0:f4:d7:a9:f3:83:
e6:ef:45:27:b3:9e:72:4a:fb:7f:b9:26:37:5c:f8:36:9a:62:
f3:62:00:6e
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYUh9+L3vqZgHm4kWJ3VZaGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzEyMTU4MGVkMDJlZGRmNGY1ZTVhODdkMzdlMDE3YjMy
ZGY3MWIwHhcNMjIxMjE3MjEyMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjdkOTY5ZTZjZDg1YjgxYjQyYzJkNjQwNWM1MzA0NGM4ODNmOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirKvOsQlaJ0+IY6j5t50XBF/idb6
Wvh9KzF5Db0EgaFbSpiqLNzflx2rm+QCuQoyPeKy7hWlxwIPAA2j4CpnIPCOQ/mG
7cFFLSaIdl8vR4wzrrv7YjQrnbVrGyNTfyAFvjARiyA0pzH3TActeSMpRKw/QQw4
D7kkeVFigJO3nYmhMS0oXs0mNbqZKHpuylWLP17FaH81t7CySxjriAQueorPly2L
O3bS97SzJXUqj001gVtexykT3P30Kufk5KoqnTlmKww0HzYa2QYnQwfrYrEKv+g2
Z4YFQNsRowYlHGkqxnYvHAsd5/FdD59yf/TlJUdeBgAzYesn4EVr9NVZ9wIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFAt9lp5s2FuBtCwtZAXFMETIg/moMB8GA1UdIwQY
MBaAFJRxIVgO0C7d9PXlqH034BezLfcbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDkt
YTJmNDI1NjAwZGIzLzEvQzMyV25tellXNEcwTEMxa0JjVXdSTWlELWFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDktYTJmNDI1NjAwZGIz
LzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCuSHYAwQC
uWhIAwQCubp4AwQAudQgAwQCuePgMBQEAgACMA4DBQMqBFoAAwUDKgYvgDANBgkq
hkiG9w0BAQsFAAOCAQEAHUOhzjfjFJIVDhZFWMv82hsn8MYlat0RcNHqQir55J7v
JqQ7syqkeq+RH8cBLOpiPXeR3tASUkTQTTVInoh22VTy1CBmNQ7tPlRTU9d6KkRJ
UscUjVKgHtD3IpeSjt8Mx9/ztRCQtWnPESxGcVn+MxybM5CW7E/3rHfx0DL84RrS
iGI7t/0HsDDQ8hPVa7xY8fTob0l/qsfKQoyKrhMCcXQAB6tz/gw/8Yvvj+KJFWin
eHsYWvwCoxMWcQoCLE7kCBmor10fViF7BISKveJrg4quTFYuGaqmF6dZXTXMtGeQ
NxSUwPTXqfOD5u9FJ7Oeckr7f7kmN1z4Nppi82IAbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:26 2024 by rpki-client on console-ams.rpki-client.org