Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/7MpCwDJJAJdOtKzbiPTB-GVNLoM.roa
File: 7MpCwDJJAJdOtKzbiPTB-GVNLoM.roa (raw, json)
Hash identifier: Y4PDzbnXA5wzBeu6vrJiBj6PCWpHiHKumASq72rnB9U=
Subject key identifier: EC:CA:42:C0:32:49:00:97:4E:B4:AC:DB:88:F4:C1:F8:65:4D:2E:83
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01855D3F17BBB024195472128E0026DFBD35
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/7MpCwDJJAJdOtKzbiPTB-GVNLoM.roa
Signing time: Thu 29 Dec 2022 09:38:14 +0000
ROA not before: Thu 29 Dec 2022 09:38:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.140.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:3f:17:bb:b0:24:19:54:72:12:8e:00:26:df:bd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Dec 29 09:38:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecca42c0324900974eb4acdb88f4c1f8654d2e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:31:ea:c1:31:be:d1:33:d5:41:45:00:7c:
ba:12:34:5d:f2:c4:29:4a:ab:47:d0:14:c8:d5:78:
1c:46:79:b9:6d:c6:09:aa:a7:c6:60:86:b5:ad:72:
c1:25:45:52:ce:b3:0f:fb:28:bd:e1:ac:94:e6:2b:
d3:29:f5:86:8f:53:77:8f:c0:2f:cb:1c:aa:23:51:
05:5f:c4:75:ac:6b:bc:fe:da:af:9f:65:16:6e:14:
1e:33:0d:1b:b3:46:d3:ca:65:43:db:e4:dc:bb:7d:
23:ad:f7:1c:1f:0f:32:4f:35:cc:69:c4:9b:45:d5:
ed:a5:49:57:d3:53:03:84:fb:dd:67:e3:e9:96:8e:
e1:93:dd:6c:a3:db:d4:be:0a:97:32:8a:20:e4:30:
24:e8:8b:36:cd:fa:9f:0c:ff:a2:87:2f:00:3b:17:
95:1c:71:1e:09:3c:bc:a4:de:64:83:4a:2d:a9:63:
4f:40:7d:f2:57:53:14:2b:ed:ac:ce:fb:21:c9:3d:
13:fb:c3:69:f9:96:59:c3:0c:90:a2:69:07:c7:8d:
ba:2c:f6:b1:41:2b:44:63:c0:f4:2c:de:10:ef:f3:
5e:a3:b6:5d:76:0c:13:7b:38:55:09:e1:5b:89:b4:
fc:fe:94:cb:4d:7d:fb:14:18:80:81:2c:53:a0:85:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:42:C0:32:49:00:97:4E:B4:AC:DB:88:F4:C1:F8:65:4D:2E:83
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/7MpCwDJJAJdOtKzbiPTB-GVNLoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f9:b3:2d:21:7c:7c:df:80:bd:c2:ea:81:be:3f:46:f9:e2:
57:ca:34:7c:21:4c:19:6b:00:21:d3:d9:92:2e:71:d0:2f:18:
6b:42:b3:0b:41:11:bc:42:cd:98:ae:49:f3:8b:87:3e:ca:7e:
20:9d:b1:ff:83:88:06:10:21:59:2a:e3:39:c9:55:9c:dd:bf:
0e:97:c4:39:87:33:8b:7d:df:58:29:81:c5:f5:45:31:91:88:
3f:45:c8:78:a3:b9:e3:8a:27:f8:db:60:7d:70:8d:fa:90:5a:
e5:04:ba:bf:01:4e:b3:9e:9a:01:97:ff:e2:ba:6b:cc:ec:62:
67:33:60:f2:89:dd:69:65:47:46:59:48:67:86:ed:a0:50:3b:
db:03:24:3d:31:7d:d7:18:85:b2:7e:84:5f:e5:65:ea:e5:23:
7b:52:81:2a:e9:df:7a:ce:42:97:b9:be:71:90:a8:25:dd:42:
46:8e:ca:39:5c:3b:c8:60:71:11:09:0e:06:1f:3a:68:3b:e9:
a6:d9:c5:5b:0c:7f:c4:6c:2f:3a:95:fa:00:6c:ce:4f:0f:72:
96:bb:4f:7c:fd:2c:0e:1f:bb:eb:89:32:d9:c0:b8:33:ce:68:
e7:ca:7b:ad:80:af:bf:24:17:0f:3e:5b:2d:bf:85:f9:1e:14:
2c:3b:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:00 2024 by rpki-client on console-fra.rpki-client.org