Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Yh29SVh6r3EqHRt-GvtcX3dXMVU.roa
File: Yh29SVh6r3EqHRt-GvtcX3dXMVU.roa (raw, json)
Hash identifier: UqnaIgZD6rmcFp64Nu03SgHFdyU7tmpd0YKQ101f/co=
Subject key identifier: 62:1D:BD:49:58:7A:AF:71:2A:1D:1B:7E:1A:FB:5C:5F:77:57:31:55
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 018626D3A2EE7E0EADC16357E1D114039B2E
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Yh29SVh6r3EqHRt-GvtcX3dXMVU.roa
Signing time: Mon 06 Feb 2023 13:04:09 +0000
ROA not before: Mon 06 Feb 2023 13:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.222.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:d3:a2:ee:7e:0e:ad:c1:63:57:e1:d1:14:03:9b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Feb 6 13:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=621dbd49587aaf712a1d1b7e1afb5c5f77573155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:00:b3:49:1a:dc:63:9a:69:fc:e2:ba:e8:
87:d0:76:d6:b4:6f:24:94:a7:69:4b:8b:a2:6b:76:
8a:17:64:ad:28:ee:8d:5e:4a:d8:9d:0d:f8:31:00:
49:7d:91:65:80:90:b3:62:f2:3e:93:2a:34:69:0f:
79:86:27:8c:85:e8:fe:76:2b:6f:94:09:02:b4:8a:
6b:bc:a0:f0:55:17:20:c2:33:38:14:83:1c:e1:2a:
44:f5:e3:98:b0:cd:e4:2a:12:94:be:a0:ca:7f:7a:
01:8d:5e:ff:59:5b:44:35:02:be:ff:cd:a3:79:29:
4f:5e:b0:f2:92:7d:f0:b6:39:8c:1e:91:57:ca:55:
4a:0a:db:aa:11:12:41:0e:82:34:16:b4:da:e9:68:
4f:77:57:21:76:6d:05:e0:42:3d:89:8e:a2:3b:e4:
39:ec:b3:83:16:34:b2:7d:a5:ca:f8:4e:48:ce:a6:
77:09:1c:c9:d5:8c:31:61:08:4c:d7:ce:fb:7b:f3:
8a:bf:a0:ba:53:ba:8b:11:e4:a6:16:c7:b9:9d:24:
80:76:1a:99:cc:b8:84:44:aa:7b:58:12:aa:e2:62:
2b:f7:5b:20:37:9a:ca:10:ad:91:e5:86:7e:81:d9:
ac:ca:89:24:bb:5c:db:66:81:4e:b0:ca:e0:ad:e2:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:BD:49:58:7A:AF:71:2A:1D:1B:7E:1A:FB:5C:5F:77:57:31:55
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Yh29SVh6r3EqHRt-GvtcX3dXMVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:7c:41:fa:b9:f0:0d:aa:89:20:98:24:cc:a3:42:7f:6d:c7:
cd:62:b6:08:fd:16:8c:89:7b:99:97:4d:32:24:11:9f:05:34:
06:d6:c2:c0:b2:f1:1b:70:e0:2f:c7:00:a1:bd:70:84:c1:57:
31:7c:40:21:5d:e9:d0:89:d1:e1:0b:d0:85:2d:2f:15:6d:dc:
ac:b8:13:6d:77:57:50:0d:79:a6:f6:f2:d4:2b:f5:5a:2a:cc:
c0:54:2b:f2:9f:63:9a:e2:81:80:02:7f:5d:5b:34:d3:f7:b7:
8e:3d:c1:b6:29:e1:3a:8d:22:f1:dc:18:e8:a1:4c:94:3c:e5:
0c:fd:26:47:4f:c6:ec:df:7d:8f:84:12:7a:41:7d:91:bf:ca:
c5:28:75:dd:e8:60:53:11:df:54:2c:27:5b:c3:37:83:d3:49:
07:94:93:bf:a2:fe:b0:f0:88:3f:e8:cd:12:0e:db:16:5a:ed:
ca:95:0d:92:6b:d9:3c:4f:9b:0b:62:0a:87:84:08:ce:f7:c1:
7a:cd:46:44:ba:e1:31:66:1b:da:b0:21:2b:d7:94:fa:92:99:
df:10:ea:8b:30:99:2f:69:0a:5d:fd:af:9b:75:31:4c:bb:0d:
ee:c1:0e:71:2b:08:56:bb:d6:72:b6:76:8b:5c:21:7e:39:4c:
bd:c1:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:36 2025 by rpki-client