Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/1-3CKC3XatCSL5mN1SC9X2ebHECc.roa
File: 1-3CKC3XatCSL5mN1SC9X2ebHECc.roa (raw, json)
Hash identifier: OAF7Re2fn2g+G6EOvtaYZpcQQAn2TyBB/e1vE28s8Cs=
Subject key identifier: FB:70:8A:0B:75:DA:B4:24:8B:E6:63:75:48:2F:57:D9:E6:C7:10:27
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 01856FDDCF86DAA2D4C292414DF084B6DF4F
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/1-3CKC3XatCSL5mN1SC9X2ebHECc.roa
Signing time: Mon 02 Jan 2023 00:24:45 +0000
ROA not before: Mon 02 Jan 2023 00:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205304
IP address blocks: 185.222.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:cf:86:da:a2:d4:c2:92:41:4d:f0:84:b6:df:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jan 2 00:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb708a0b75dab4248be66375482f57d9e6c71027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:13:db:99:a1:65:ff:3c:89:ca:48:23:d6:
c2:3b:c4:00:53:30:5f:c0:60:81:89:64:13:5d:bc:
c7:21:8e:58:c6:b6:cd:bd:e5:e8:c7:75:1c:b9:d0:
71:0a:93:75:ef:c5:19:5d:17:f2:66:97:01:6c:b9:
0e:1a:23:78:f3:db:a9:1d:c2:ab:b8:45:5e:f5:c6:
9b:63:54:ca:f0:f5:4f:6d:d7:a4:11:ae:c7:6d:02:
12:58:af:1f:6f:85:c4:b6:53:81:f1:11:c9:4c:35:
53:0a:d8:9c:66:e6:8f:fc:a7:0c:e3:f3:63:e0:32:
2c:a8:9a:0e:60:50:08:c0:58:89:35:c5:09:85:23:
24:f7:ba:27:1d:5f:01:a0:1c:32:89:72:a1:45:17:
5f:9a:2b:98:06:b3:81:34:27:cf:03:9b:bb:35:6c:
f4:ae:dc:b2:56:4f:cd:bb:c1:fa:81:9f:5b:3c:3f:
b1:82:05:e3:b5:21:57:fd:04:50:71:58:7a:c8:78:
79:b8:06:bf:64:1f:4c:0b:e7:c9:fd:1f:46:eb:63:
50:c1:1b:95:18:6a:b9:25:30:06:52:61:d7:83:a2:
61:b5:76:f2:f7:d7:2b:ff:8a:ec:55:4b:ce:72:08:
9c:97:ae:a2:40:50:39:c7:32:3d:3a:01:7f:a0:d2:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:70:8A:0B:75:DA:B4:24:8B:E6:63:75:48:2F:57:D9:E6:C7:10:27
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/1-3CKC3XatCSL5mN1SC9X2ebHECc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
08:50:85:4f:71:58:f9:c9:9b:7c:80:fe:24:46:b2:ae:01:ae:
2c:91:60:b3:cf:e9:02:f5:5a:d4:57:2f:57:0a:3f:bf:62:b1:
19:da:e2:3c:5c:6e:3f:f7:c2:ad:bf:0c:1f:8b:90:7b:67:0e:
c0:8a:49:fe:82:05:ee:08:68:c0:70:9d:41:ea:ef:a6:e5:e8:
5e:8a:03:c1:5b:36:d2:28:2f:ca:4f:24:d2:c5:ac:9a:6e:b5:
30:38:95:6f:36:f8:27:05:b6:2a:9b:ce:54:cf:cf:3b:6c:3d:
68:59:29:33:c7:78:63:05:2c:74:9a:20:f0:aa:a7:95:f6:37:
6d:ff:37:5a:95:b1:56:a4:3d:c8:7b:7a:b8:67:2e:2c:06:db:
c2:64:6a:d4:34:1c:5f:71:87:e7:76:4e:2c:21:8c:77:19:46:
fb:ac:6c:a8:4c:66:fa:54:dd:3b:d4:ed:5a:b3:3c:59:02:95:
e6:4e:b4:7a:f0:81:29:76:f5:03:c0:d8:88:51:69:db:f0:59:
81:6b:4b:39:c5:81:93:aa:cc:a2:05:d4:26:46:27:23:da:b4:
bc:8c:e2:f0:c9:21:62:7f:6d:18:91:93:3d:d3:a9:a1:3b:b3:
2b:6e:d6:7f:76:3c:f4:8f:d4:57:67:3c:6a:d3:88:2b:d6:18:
51:01:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:14 2025 by rpki-client