Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/r-RWhnfX3P6x4CUO8jJ-x_oVUdk.roa
File: r-RWhnfX3P6x4CUO8jJ-x_oVUdk.roa (raw, json)
Hash identifier: q/yBNbRxOM4eGp/QY+d3exz6vzT7OLZiHjdIL95labs=
Subject key identifier: AF:E4:56:86:77:D7:DC:FE:B1:E0:25:0E:F2:32:7E:C7:FA:15:51:D9
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 0186274354AA6A57BFED72B6DFE9D22227E1
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/r-RWhnfX3P6x4CUO8jJ-x_oVUdk.roa
Signing time: Mon 06 Feb 2023 15:06:09 +0000
ROA not before: Mon 06 Feb 2023 15:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.222.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:43:54:aa:6a:57:bf:ed:72:b6:df:e9:d2:22:27:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Feb 6 15:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afe4568677d7dcfeb1e0250ef2327ec7fa1551d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:54:a1:49:13:5e:7d:53:f4:e8:12:74:d1:
43:26:d2:70:b6:3a:9c:09:3c:27:e2:7d:e6:46:27:
9d:e0:31:69:99:d0:73:f5:e7:23:49:f6:d6:11:14:
b1:25:99:7a:7d:a0:b6:47:82:90:24:f6:8d:b0:54:
38:d7:f5:0f:28:15:62:5b:7e:ef:15:31:b0:94:1f:
67:8a:d8:a6:5f:77:87:f1:2f:91:20:3d:29:1b:51:
94:08:1f:4c:bd:89:45:39:00:87:d4:7a:12:48:1f:
68:fd:6a:43:10:e2:ea:ca:0b:4b:a1:5f:63:81:79:
35:ff:a4:44:18:1a:07:8b:a6:8f:31:0c:3c:0a:06:
3e:7b:96:76:d0:3d:71:e8:78:55:d5:88:1f:1f:15:
7b:9b:64:6c:9c:81:0b:8c:47:27:d5:8a:b1:26:a5:
ec:70:79:39:8c:a7:cb:51:52:e2:fa:52:56:dc:06:
41:3f:04:cc:19:d4:bd:cf:01:cf:2f:64:4e:24:48:
1c:8d:6c:59:64:6d:45:f7:0c:f7:84:1f:74:59:86:
f4:17:1d:4f:0e:89:89:4b:98:13:36:3c:a3:65:87:
70:2c:58:6b:99:3f:d2:39:29:5d:17:95:99:66:5c:
e3:5d:66:13:21:2a:52:f1:bd:ea:9e:1e:41:aa:1b:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E4:56:86:77:D7:DC:FE:B1:E0:25:0E:F2:32:7E:C7:FA:15:51:D9
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/r-RWhnfX3P6x4CUO8jJ-x_oVUdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
21:00:7b:62:18:c7:99:6c:7d:14:3f:ab:1e:ae:51:9e:8b:d1:
c0:bd:74:77:13:82:8e:4b:97:db:df:e2:74:33:79:c1:24:68:
a2:ee:2d:cb:3b:41:a7:00:43:04:a9:23:71:de:c0:91:85:8d:
88:88:06:36:5c:96:a8:7f:42:65:11:0b:5e:8e:bf:a2:eb:67:
c2:17:63:2d:9c:4e:83:b5:46:db:04:23:f8:8c:b3:61:db:c4:
29:c2:f9:54:33:42:31:b9:df:ea:71:ee:45:21:7d:e3:b0:6e:
f7:25:8a:c6:be:cb:38:b6:db:f8:06:64:13:42:c6:07:ef:97:
06:bd:3c:f0:1d:47:ac:49:58:00:63:9a:e3:0e:17:ed:67:71:
7b:62:b1:0e:aa:7c:5c:a9:d2:8b:28:f3:86:f8:62:79:d4:15:
a4:74:1b:dd:19:9a:9f:b4:38:4d:d4:2a:28:21:02:91:d4:f4:
f7:2f:1b:47:de:5f:eb:56:33:a5:45:14:bf:21:7c:7f:3f:9f:
a3:24:ee:1f:ef:21:29:e2:c3:0b:07:bb:ed:b6:54:1c:c6:ee:
70:21:19:1a:cc:57:40:4c:ec:be:51:89:f1:af:77:fe:67:30:
07:0a:0e:da:9f:2d:0e:2a:89:63:c1:41:46:50:25:6e:aa:d8:
63:a8:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:46 2025 by rpki-client