Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/e1pJbxv1q78yTrunQyvNOg0Uqg0.roa
File: e1pJbxv1q78yTrunQyvNOg0Uqg0.roa (raw, json)
Hash identifier: C24Z+gxmzCh2PhwAZE4y2h5Yrxo4wxzaOFXQiljuiVQ=
Subject key identifier: 7B:5A:49:6F:1B:F5:AB:BF:32:4E:BB:A7:43:2B:CD:3A:0D:14:AA:0D
Certificate issuer: /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial: 0184D2520623F313F0D3C8F0C0490D39006B
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/e1pJbxv1q78yTrunQyvNOg0Uqg0.roa
Signing time: Fri 02 Dec 2022 10:11:41 +0000
ROA not before: Fri 02 Dec 2022 10:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210431
IP address blocks: 185.140.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:52:06:23:f3:13:f0:d3:c8:f0:c0:49:0d:39:00:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Validity
Not Before: Dec 2 10:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b5a496f1bf5abbf324ebba7432bcd3a0d14aa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:75:3f:10:9f:cf:bf:c5:55:6c:d3:41:e8:
a0:af:d1:b6:ea:0b:79:20:2a:3e:1a:85:ce:d6:a4:
9d:21:db:b8:44:77:d8:ef:ff:94:3d:f8:c7:22:61:
0c:02:3e:31:09:08:2a:cd:33:70:8a:ce:51:27:06:
e7:05:15:62:57:5c:14:7d:0e:26:f1:6e:00:b0:44:
5d:17:c3:b2:e1:7c:1d:77:71:af:da:21:3a:d1:6c:
0e:5c:27:e2:3a:2a:0b:3b:b2:00:29:c1:6e:a4:e1:
84:33:73:be:35:85:0d:e4:7f:7b:49:4f:65:26:98:
cc:99:ca:8f:4e:b1:69:e0:2e:2d:e4:20:51:e4:69:
b7:ce:fb:9f:39:e2:ca:d0:f2:ba:f1:07:da:5b:1a:
c3:bc:4e:86:a8:de:42:eb:63:f1:7d:31:50:80:6b:
0d:f8:59:de:72:32:a5:7b:17:1c:12:e2:18:4f:ae:
6e:6d:d8:51:c3:0b:3b:4d:f7:a5:4c:00:1b:98:01:
2b:fb:54:4e:be:c5:e8:b0:60:7b:98:43:4f:6d:a8:
f3:6b:48:e4:f0:26:6f:18:05:78:84:aa:24:ba:2e:
f5:65:2c:59:53:d5:2e:a5:1d:f3:e9:6b:b9:81:e4:
0d:f6:f4:6b:df:93:69:60:33:5c:85:62:8b:7e:a6:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5A:49:6F:1B:F5:AB:BF:32:4E:BB:A7:43:2B:CD:3A:0D:14:AA:0D
X509v3 Authority Key Identifier:
keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/e1pJbxv1q78yTrunQyvNOg0Uqg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.175.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8b:0e:c7:da:75:f1:99:73:44:3d:e6:6d:a1:67:9a:30:18:
68:f5:3e:80:9e:6b:09:7e:e3:3d:e1:e1:11:be:03:fc:ca:3b:
7e:bb:47:1b:25:9e:a8:ce:c8:b3:b1:19:b1:2d:f7:31:20:23:
cc:b2:1c:f6:1d:11:fe:76:85:a9:45:19:89:30:7f:6d:3c:f0:
18:19:6e:29:7c:da:0f:5b:a9:2f:2b:e5:94:98:ae:6e:27:ac:
bf:c4:6f:44:23:29:58:a9:bd:07:df:51:f5:61:be:6d:fc:98:
43:cb:f3:f2:56:81:00:05:85:73:9c:0d:2e:2a:ed:f3:2d:7d:
4e:82:9a:68:c7:6e:75:9f:1b:ab:4b:05:4d:2d:a7:a1:a1:fd:
54:a8:28:e3:32:3f:ee:5c:39:58:da:45:47:06:46:40:1d:a3:
50:2d:f2:18:31:50:0c:49:18:d5:2a:b5:49:e4:8a:88:f1:64:
20:53:9d:4d:6a:bd:60:51:8e:01:97:a6:7a:53:01:33:2c:4f:
29:94:be:26:96:58:09:87:a7:0e:16:fa:23:90:13:eb:19:a8:
19:16:bc:9e:ce:5b:50:42:2c:0e:aa:61:ee:0f:7e:fe:bd:1b:
c6:09:54:91:5d:63:8d:5a:2c:2b:3a:36:84:2d:db:ae:19:38:
ac:ae:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:24 2025 by rpki-client