Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/s7HCnAdpicSfWOnIv-Brv1RKML4.roa
File: s7HCnAdpicSfWOnIv-Brv1RKML4.roa (raw, json)
Hash identifier: txNocZ55IAwMss3A1m2jRI5/avZ0PFrv5pvVj0JZkNo=
Subject key identifier: B3:B1:C2:9C:07:69:89:C4:9F:58:E9:C8:BF:E0:6B:BF:54:4A:30:BE
Certificate issuer: /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial: 014175
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/s7HCnAdpicSfWOnIv-Brv1RKML4.roa
Signing time: Sun 16 Jan 2022 13:48:27 +0000
ROA not before: Sun 16 Jan 2022 13:48:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 185.140.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82293 (0x14175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
Validity
Not Before: Jan 16 13:48:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3b1c29c076989c49f58e9c8bfe06bbf544a30be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:34:56:fb:41:27:a7:1f:55:5d:31:b7:a5:
75:2f:aa:fa:42:fb:a1:bd:fc:e1:72:17:98:e4:79:
5f:c5:0e:df:e3:b1:1c:98:30:96:c9:0a:29:84:b4:
cd:df:d9:82:62:9d:e1:bb:e5:7e:a8:8a:68:a5:29:
9e:e3:a5:c7:81:1f:b8:9d:25:91:95:63:6b:e9:5e:
cc:e9:b5:ce:39:b8:bc:d5:1a:7f:cd:23:83:95:85:
55:97:be:7e:4a:46:0b:59:34:c6:7a:63:80:a7:37:
a6:83:45:2b:79:ef:95:4f:12:a8:05:69:74:92:d6:
e6:c9:6d:83:e4:f7:2a:2f:9b:9c:a5:54:16:ff:e0:
07:f4:85:6e:e0:4f:02:e1:97:bb:2e:cc:be:e1:10:
e2:dc:14:97:15:0a:5d:a7:91:f0:36:e6:a3:ff:ad:
c2:c4:2a:9d:1e:b4:64:73:ed:c4:c6:25:0e:a7:b4:
42:22:c8:d2:90:8e:5f:a3:ca:a8:94:46:1c:94:a2:
5a:91:0b:e7:68:24:a7:db:9a:bf:e0:b3:a7:c9:b6:
fd:87:bf:e0:31:b5:94:83:d1:44:a0:06:2e:32:f1:
c5:14:b4:1d:2f:bc:55:33:00:c1:95:17:9d:f9:c4:
ec:de:86:e1:10:49:68:41:e4:e5:27:7e:95:c2:6a:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B1:C2:9C:07:69:89:C4:9F:58:E9:C8:BF:E0:6B:BF:54:4A:30:BE
X509v3 Authority Key Identifier:
keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/s7HCnAdpicSfWOnIv-Brv1RKML4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:51:f2:3f:63:d1:95:75:45:fd:a7:9b:e5:c7:b5:b5:11:22:
e0:5d:9c:53:5d:d0:66:47:4a:50:ec:f5:b6:1c:48:e2:d3:cc:
62:3e:d6:fc:38:e1:a5:32:cf:e9:cd:75:db:12:ea:e8:c4:4f:
52:a0:73:19:ab:14:ee:40:2a:71:3a:e5:bd:c5:ef:03:f6:47:
ee:65:f8:02:78:09:e3:15:9e:53:3a:00:c1:a9:99:42:31:55:
19:da:ee:db:64:13:2c:a3:20:fb:28:07:72:c4:8d:89:78:56:
29:b4:75:dd:dc:15:00:02:24:a3:83:fe:72:53:be:c8:32:71:
e7:26:86:c0:89:76:15:66:c5:e1:72:e9:9f:53:d8:a9:3e:5a:
ee:4f:d3:40:f2:4f:8e:d6:7c:fe:3e:2a:92:fd:56:1e:87:94:
de:4d:2e:cd:9b:dd:37:5c:06:9f:41:1f:f2:b9:e5:94:92:17:
d7:e0:b9:70:e5:b4:22:53:07:00:44:11:ba:72:5c:6d:55:bc:
d5:48:54:91:0e:60:b6:b7:1d:f8:9e:a1:bc:b8:3d:77:96:25:
d4:10:81:71:44:c6:20:f9:da:67:81:28:72:1a:fc:7b:7a:36:
9e:2d:5f:bc:c7:9d:e9:c9:80:ad:84:1f:40:a0:52:7c:b7:0e:
16:3f:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:46 2023 by rpki-client on console-ams.rpki-client.org