Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/woQqeBkMZ1tjiN3xbM-Hq4_B0RY.roa
File: woQqeBkMZ1tjiN3xbM-Hq4_B0RY.roa (raw, json)
Hash identifier: Cl1L+xano8UIeeR8YvBg8hWpjgqEqjpt7yQyvtxZJno=
Subject key identifier: C2:84:2A:78:19:0C:67:5B:63:88:DD:F1:6C:CF:87:AB:8F:C1:D1:16
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 01828E58355AEE1033A8D4579BA993D7D02B
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/woQqeBkMZ1tjiN3xbM-Hq4_B0RY.roa
Signing time: Thu 11 Aug 2022 19:18:41 +0000
ROA not before: Thu 11 Aug 2022 19:18:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212330
IP address blocks: 45.113.239.0/24 maxlen: 24
103.229.80.0/24 maxlen: 24
86.111.151.0/24 maxlen: 24
86.111.150.0/24 maxlen: 24
185.16.25.0/24 maxlen: 24
185.113.104.0/24 maxlen: 24
31.223.185.0/24 maxlen: 24
193.3.137.0/24 maxlen: 24
185.113.106.0/24 maxlen: 24
2a10:fa42::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:58:35:5a:ee:10:33:a8:d4:57:9b:a9:93:d7:d0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Aug 11 19:18:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2842a78190c675b6388ddf16ccf87ab8fc1d116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4c:b0:1b:8f:88:90:90:05:d8:c9:cd:72:c6:
e8:fe:13:e0:8b:03:1e:ab:55:c8:6c:e6:dd:aa:3e:
71:30:ea:5d:c3:e0:4b:37:b6:01:b9:02:10:66:88:
46:da:25:d1:8c:bc:4a:8b:b0:3e:b5:f9:15:10:e7:
c4:0c:05:95:b2:d8:10:2c:8d:65:fd:aa:5a:98:a9:
eb:78:89:45:87:e9:56:24:ab:ec:57:31:ff:41:a6:
38:aa:69:77:4f:4f:e1:cd:eb:1b:94:04:38:ff:c2:
5f:1f:6a:ec:4a:d7:7e:46:89:ab:14:40:6b:20:aa:
12:25:d4:84:24:2b:42:7f:ce:0a:34:e8:dd:2a:8d:
99:f4:38:01:06:a9:fa:12:29:57:70:9a:4e:34:28:
9b:ba:04:13:9d:1a:f0:6f:6e:35:40:cd:c4:3e:ad:
f6:c8:da:87:d2:81:84:81:37:69:86:d8:10:72:12:
2c:77:06:ee:75:40:51:78:22:1b:55:96:23:a9:3a:
62:5f:7f:1e:69:b2:d5:f3:ab:f6:37:28:0f:f3:ab:
97:2c:4d:ac:cd:50:c0:c5:d5:9d:be:27:71:5a:c8:
08:7b:6d:be:37:58:2a:25:cf:b5:b6:15:ac:90:fd:
fd:a9:76:a8:c5:60:ad:ba:28:d1:c4:cc:a6:73:9c:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:84:2A:78:19:0C:67:5B:63:88:DD:F1:6C:CF:87:AB:8F:C1:D1:16
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/woQqeBkMZ1tjiN3xbM-Hq4_B0RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.185.0/24
45.113.239.0/24
86.111.150.0/23
103.229.80.0/24
185.16.25.0/24
185.113.104.0/24
185.113.106.0/24
193.3.137.0/24
IPv6:
2a10:fa42::/32
Signature Algorithm: sha256WithRSAEncryption
d3:5c:7f:cc:79:63:ac:70:12:e8:9c:c7:fd:58:7e:37:e4:45:
1c:d8:56:1e:87:82:06:9c:c3:0f:80:d6:c6:49:a1:97:a3:c4:
a5:f4:90:05:29:e2:0b:41:b4:f5:ec:93:ac:49:91:01:44:b4:
16:0b:90:c3:27:d7:34:89:f1:c7:10:ef:c7:44:62:e7:97:e3:
8e:50:21:06:7c:33:6d:a5:16:7f:3d:68:e0:b6:4c:ae:d8:a8:
77:07:65:2c:12:33:95:ea:99:24:9b:a2:ee:b5:2e:d4:b3:70:
c3:f0:ce:14:c5:85:c5:91:d8:11:ff:72:04:51:05:78:85:c3:
81:9d:9a:a0:6c:4c:e6:3a:be:ef:59:68:08:8d:42:21:e9:67:
17:b0:62:cd:c5:d8:1d:13:4a:2e:b6:b5:66:7d:7c:4c:02:2e:
ac:71:30:8e:ff:d2:4a:98:ca:54:9b:da:1d:be:9f:db:fb:31:
70:46:a7:ac:58:81:84:53:b0:16:05:81:04:ee:07:34:73:c9:
c7:e9:92:65:47:da:3d:1c:0c:a9:de:f9:30:2f:5e:7e:e2:d6:
b6:35:2b:21:9a:d8:4d:70:61:09:fa:05:52:da:d3:1c:50:34:
e1:93:04:17:7b:72:87:8e:a4:3d:69:eb:e6:e3:28:88:ba:62:
01:fa:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org