Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/A4C82zg_bVfNLbI38KAv07dLsIo.roa
File: A4C82zg_bVfNLbI38KAv07dLsIo.roa (raw, json)
Hash identifier: RNbcVDOTD0c0RoN5W+x8fmQV4dYWXz/UdSi5+xb3qwg=
Subject key identifier: 03:80:BC:DB:38:3F:6D:57:CD:2D:B2:37:F0:A0:2F:D3:B7:4B:B0:8A
Certificate issuer: /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial: 01856F2FD5E5450D9F893A40432A903D992F
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/A4C82zg_bVfNLbI38KAv07dLsIo.roa
Signing time: Sun 01 Jan 2023 21:14:43 +0000
ROA not before: Sun 01 Jan 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42473
IP address blocks: 185.140.140.0/22 maxlen: 23
2a07:1b80::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d5:e5:45:0d:9f:89:3a:40:43:2a:90:3d:99:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Validity
Not Before: Jan 1 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0380bcdb383f6d57cd2db237f0a02fd3b74bb08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ac:db:4e:09:5b:b3:c6:9c:62:44:3f:82:a7:
9a:04:1f:2b:cd:4d:f1:99:a4:b7:87:c8:25:a7:b2:
57:bb:36:c9:b8:c0:46:9b:19:ac:49:e7:62:3d:d4:
92:5d:f8:a6:1c:ac:42:e8:9a:ec:65:c0:e7:c7:a2:
22:de:3e:1a:b0:58:d5:ae:b8:fd:cb:84:fa:41:d6:
ab:f1:eb:2f:27:fe:ed:24:78:84:76:ec:33:9b:0b:
9d:33:d6:a8:5b:1f:63:5f:6c:e8:08:65:ce:d8:8a:
81:f9:c3:19:68:86:b3:e8:c8:dc:ce:f8:1c:8e:04:
07:12:1b:6c:be:a9:d6:be:b0:d8:84:fa:e7:bd:3b:
5d:a5:d9:06:f9:d4:17:61:5c:2a:93:21:16:9c:fd:
c1:e9:67:60:9d:4e:62:0e:ee:0e:79:b5:3f:fd:b5:
b1:cb:ea:3d:54:fc:e0:d7:a5:e0:5e:ca:f6:8d:fa:
2e:93:cd:01:a5:c2:be:6e:30:38:f4:82:cf:cd:69:
1d:24:13:51:20:bd:82:24:89:97:95:80:56:74:e0:
6b:34:30:fb:9e:e5:4a:33:1c:89:72:3c:be:43:02:
b5:df:98:2d:2f:76:ef:84:4e:02:31:23:03:5c:9d:
f0:e7:35:80:ff:32:e2:94:0b:87:4b:85:59:72:f2:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:BC:DB:38:3F:6D:57:CD:2D:B2:37:F0:A0:2F:D3:B7:4B:B0:8A
X509v3 Authority Key Identifier:
keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/A4C82zg_bVfNLbI38KAv07dLsIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.140.0/22
IPv6:
2a07:1b80::/40
Signature Algorithm: sha256WithRSAEncryption
72:48:2c:70:f3:16:e5:9b:bb:b7:df:1a:1e:ab:b7:97:7f:0b:
2f:26:6f:c6:d3:f2:8b:bb:21:3c:9a:79:f6:ff:9a:c6:05:af:
ef:e2:9a:7d:0c:d5:83:f0:af:b8:25:75:cd:58:3e:e5:27:e3:
4f:7e:7b:26:f6:e9:98:e8:a1:f7:ed:d6:99:80:18:bb:51:4b:
20:28:09:06:e5:19:fd:0d:7e:21:ac:23:81:eb:4c:02:80:b0:
24:05:fe:6d:96:77:f4:ac:ee:eb:e8:8c:94:a9:5d:09:da:cf:
1c:fd:bc:94:d9:92:94:4d:02:3d:2a:ae:18:bb:85:cc:dd:b8:
b4:83:a8:b4:48:fe:71:b5:dc:5c:c2:5a:b6:a5:b6:14:be:4b:
40:63:96:05:70:d4:69:5e:63:1a:f7:7c:a3:92:03:2f:ec:1d:
83:c2:9a:6f:26:82:0c:2b:2c:af:56:d5:1f:c9:10:d6:55:02:
d4:70:d9:88:eb:90:8c:9d:db:6b:69:20:ae:da:34:1d:ca:ae:
10:a3:69:ac:10:77:7a:fe:fc:82:ae:f3:2e:ba:24:da:b9:b2:
2d:79:cd:fa:0b:9a:55:55:1e:c1:93:ce:10:8c:dc:46:f3:6f:
40:4d:a2:6a:df:57:e5:93:80:39:43:02:7e:89:62:bc:4b:dd:
ca:7f:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:45 2025 by rpki-client