Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/SlkqD94iOTVMT0chWt_8rMH6hhE.roa
File: SlkqD94iOTVMT0chWt_8rMH6hhE.roa (raw, json)
Hash identifier: jhHMhsfvcuAaSjyCBrbm0AKckIixVgzQ5MBOefoA7BM=
Subject key identifier: 4A:59:2A:0F:DE:22:39:35:4C:4F:47:21:5A:DF:FC:AC:C1:FA:86:11
Certificate issuer: /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial: 0929F033
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/SlkqD94iOTVMT0chWt_8rMH6hhE.roa
Signing time: Sat 01 Jan 2022 15:00:46 +0000
ROA not before: Sat 01 Jan 2022 15:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207179
IP address blocks: 185.140.224.0/23 maxlen: 23
185.140.226.0/23 maxlen: 23
2a07:2080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153743411 (0x929f033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Validity
Not Before: Jan 1 15:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a592a0fde2239354c4f47215adffcacc1fa8611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:76:5a:a2:05:77:c6:81:63:3d:e1:07:82:49:
e9:96:0c:6b:75:d8:4c:af:af:54:b4:10:98:1d:8c:
97:b0:4e:89:51:3f:cb:c8:e2:f7:5a:90:bf:01:94:
83:e8:19:c6:c9:da:62:8d:e2:f0:af:69:b9:3f:42:
b4:e8:7c:09:07:ad:9b:01:82:57:52:31:2e:1f:26:
28:b3:a5:20:81:2f:18:dd:ba:49:b1:92:c0:9b:fe:
32:84:69:17:54:28:e8:72:44:96:5d:55:de:a6:15:
d3:10:7e:8c:06:1a:4d:17:bc:2e:ff:ce:3f:21:c1:
91:fc:49:7c:2c:62:57:10:64:7d:bf:cb:3b:1b:a5:
b6:04:fd:8b:0d:03:05:66:37:c9:04:59:79:71:77:
8c:24:28:ff:1f:34:f1:59:5c:b8:14:6f:b4:12:c3:
25:65:1a:1b:bf:77:bd:0d:91:85:3f:76:90:2d:aa:
0b:26:54:4a:b5:b0:3f:14:e7:c0:eb:25:e4:78:4f:
66:f0:13:74:fd:80:e6:a9:8d:a8:75:d0:85:bd:ff:
f3:94:c1:1c:9b:0a:56:d2:19:2a:c7:21:ee:10:2e:
9e:3d:36:d0:d2:3f:6d:a8:a4:9e:66:4a:8d:e7:08:
3d:20:24:a3:3e:dc:95:f8:bd:28:3a:f0:23:1d:3e:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:59:2A:0F:DE:22:39:35:4C:4F:47:21:5A:DF:FC:AC:C1:FA:86:11
X509v3 Authority Key Identifier:
keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/SlkqD94iOTVMT0chWt_8rMH6hhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.224.0/22
IPv6:
2a07:2080::/29
Signature Algorithm: sha256WithRSAEncryption
05:22:35:ab:f5:83:cc:7d:c6:9f:2f:98:12:74:dd:81:1a:e6:
46:9c:98:9b:70:10:63:9c:a5:9b:dc:60:0c:10:7d:4e:a4:16:
ea:0a:47:d9:9a:2a:d5:91:aa:bf:85:86:d1:7f:1c:89:86:b1:
ab:90:b0:42:fb:ec:3c:03:19:9c:d1:84:8c:7f:e5:36:a5:0b:
64:e5:ca:04:01:3d:5e:8b:bf:27:72:02:bc:86:f1:d4:e2:35:
71:dd:d6:30:38:2e:6b:19:b4:1a:59:fa:a8:6a:6d:b0:b1:e0:
cb:06:ca:5c:de:b6:e8:97:ce:32:2e:3f:a2:03:0d:f9:6c:16:
6f:ce:fc:72:d5:dd:cd:08:64:b1:7a:c8:48:02:11:af:69:b9:
22:76:bd:84:f0:ca:60:aa:0f:05:d7:10:10:bb:0d:8e:6e:19:
4f:f3:8d:9f:f6:d2:7a:08:fa:b7:73:8c:8b:44:96:ba:50:34:
96:de:33:bf:5e:67:bc:90:8a:e2:34:69:50:c1:77:eb:1f:30:
42:22:62:a5:45:92:e8:f9:6c:f7:50:0f:12:19:a5:9c:57:cd:
20:9d:b8:44:09:94:55:2d:37:4f:54:3e:f2:97:5c:d8:71:1a:
81:27:58:23:6a:d9:fe:a0:81:ba:26:ac:e2:d0:18:d8:34:29:
57:21:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:40 2024 by rpki-client on console-ams.rpki-client.org