Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/7qKOJjhaKiUK45uzFGvYwsJkar8.roa
File: 7qKOJjhaKiUK45uzFGvYwsJkar8.roa (raw, json)
Hash identifier: ujyEvlyS8Rw0NvPooY5qN8opAwdXnm+AbMOWjEWJwt0=
Subject key identifier: EE:A2:8E:26:38:5A:2A:25:0A:E3:9B:B3:14:6B:D8:C2:C2:64:6A:BF
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 04BA9CEF
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/7qKOJjhaKiUK45uzFGvYwsJkar8.roa
Signing time: Sat 01 Jan 2022 02:58:41 +0000
ROA not before: Sat 01 Jan 2022 02:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41232
IP address blocks: 185.207.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79338735 (0x4ba9cef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jan 1 02:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eea28e26385a2a250ae39bb3146bd8c2c2646abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:1c:1d:dd:43:d6:83:28:a0:2f:9e:56:8d:
21:a5:fc:85:7e:81:e7:00:6a:87:64:01:cf:a4:17:
8e:67:9b:14:ce:9f:9b:6a:17:2d:47:48:e8:09:4c:
f8:37:8e:e9:54:c7:48:48:08:b2:f9:fb:d9:52:d2:
15:65:9e:45:a3:11:80:be:bc:c1:f7:46:d5:43:49:
dc:08:ef:f9:d2:3a:4a:a3:55:75:03:cf:6d:ae:3d:
de:f0:6f:5b:0b:28:b1:96:77:32:e3:b3:a3:57:1c:
eb:bc:4c:00:93:2c:2e:88:dc:98:e7:5c:b6:0c:bb:
47:3b:03:e0:b9:dc:5e:03:c8:30:fc:1e:96:60:6d:
ce:3a:31:3b:91:a1:77:d0:27:1e:b8:61:b8:04:27:
eb:18:15:d5:5d:e2:15:07:a2:39:c4:61:e9:64:42:
31:21:c8:6c:63:ac:78:a4:23:ce:31:4a:b4:3c:5e:
81:2c:26:8b:88:62:03:58:18:94:18:c9:63:e9:0c:
b5:f8:fb:0c:0e:8a:f7:d8:9a:7a:0c:33:be:76:8a:
07:09:2d:12:33:4b:40:3b:3e:98:38:01:56:09:db:
2f:4b:53:21:96:19:ba:ff:0e:38:64:39:07:1d:10:
45:22:34:6f:69:15:61:95:f8:0a:58:ab:d1:37:c2:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:8E:26:38:5A:2A:25:0A:E3:9B:B3:14:6B:D8:C2:C2:64:6A:BF
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/7qKOJjhaKiUK45uzFGvYwsJkar8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:5c:79:05:9c:b3:63:a4:13:56:83:4a:3d:7e:43:e8:71:cd:
4e:f1:7a:e0:42:88:e6:3b:05:a0:9b:d4:1a:1a:12:14:97:be:
65:20:3a:95:e4:cf:db:dd:90:7d:f7:a9:ba:aa:2d:3c:bd:e4:
b1:40:87:f1:db:53:e6:f0:8c:3c:df:8a:96:07:35:b3:e7:b7:
e5:9b:e7:95:18:5d:55:ae:61:4c:e2:1b:7b:22:d8:da:da:30:
2f:e1:76:35:c3:b4:cf:22:32:fc:08:ae:6b:30:9a:7b:11:b7:
7b:68:86:d7:ac:07:f5:0d:bb:b3:6d:8f:53:61:bb:a7:0e:bb:
19:ad:7d:67:15:7d:3c:56:d6:9e:a2:9e:36:9e:9a:f3:4a:89:
ee:3a:b0:47:d1:57:7c:9f:6d:e1:65:f1:f2:98:6b:01:c4:bd:
ca:af:a0:6e:9b:b7:7a:7a:01:a2:5c:8b:95:72:88:32:1d:90:
59:ea:32:57:14:a2:ff:c3:78:84:b4:f2:a5:0d:4b:c5:05:af:
27:e1:8c:e0:29:52:ea:5c:41:4e:8f:da:b2:d9:3c:74:ef:d3:
47:b3:6a:52:80:57:f5:5f:ea:f0:ab:5a:3e:04:84:bb:27:9b:
cc:a8:1c:8f:44:a2:a2:e1:32:de:04:58:b3:41:20:1a:f9:f0:
91:92:9b:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBLqc7zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZTRiNTRkZmQ0MTYxMDc3NGZlN2YyNDJkN2RkMzg3M2E2NTg0NzNiMB4XDTIyMDEw
MTAyNTg0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWVhMjhlMjYzODVh
MmEyNTBhZTM5YmIzMTQ2YmQ4YzJjMjY0NmFiZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM94HB3dQ9aDKKAvnlaNIaX8hX6B5wBqh2QBz6QXjmebFM6f
m2oXLUdI6AlM+DeO6VTHSEgIsvn72VLSFWWeRaMRgL68wfdG1UNJ3Ajv+dI6SqNV
dQPPba493vBvWwsosZZ3MuOzo1cc67xMAJMsLojcmOdctgy7RzsD4LncXgPIMPwe
lmBtzjoxO5Ghd9AnHrhhuAQn6xgV1V3iFQeiOcRh6WRCMSHIbGOseKQjzjFKtDxe
gSwmi4hiA1gYlBjJY+kMtfj7DA6K99iaegwzvnaKBwktEjNLQDs+mDgBVgnbL0tT
IZYZuv8OOGQ5Bx0QRSI0b2kVYZX4Clir0TfC6/kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTuoo4mOFoqJQrjm7MUa9jCwmRqvzAfBgNVHSMEGDAWgBR+S1Tf1BYQd0/n
8kLX3ThzplhHOzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZrdFUzOVFXRUhkUDVfSkMxOTA0YzZaWVJ6cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvMWIzNWM1LTdhYzYtNDI1My04NmVhLTc3NDRlZjNjMGI5OS8x
LzdxS09KamhhS2lVSzQ1dXpGR3ZZd3NKa2FyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
MWIzNWM1LTdhYzYtNDI1My04NmVhLTc3NDRlZjNjMGI5OS8xL2ZrdFUzOVFXRUhk
UDVfSkMxOTA0YzZaWVJ6cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnPjDANBgkqhkiG9w0BAQsFAAOC
AQEApFx5BZyzY6QTVoNKPX5D6HHNTvF64EKI5jsFoJvUGhoSFJe+ZSA6leTP292Q
ffepuqotPL3ksUCH8dtT5vCMPN+Klgc1s+e35ZvnlRhdVa5hTOIbeyLY2towL+F2
NcO0zyIy/AiuazCaexG3e2iG16wH9Q27s22PU2G7pw67Ga19ZxV9PFbWnqKeNp6a
80qJ7jqwR9FXfJ9t4WXx8phrAcS9yq+gbpu3enoBolyLlXKIMh2QWeoyVxSi/8N4
hLTypQ1LxQWvJ+GM4ClS6lxBTo/astk8dO/TR7NqUoBX9V/q8KtaPgSEuyebzKgc
j0SiouEy3gRYs0EgGvnwkZKbLA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:27 2025 by rpki-client