Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/cp3w2PXF4XSDOyRE8JAn9w4sSdY.roa
File: cp3w2PXF4XSDOyRE8JAn9w4sSdY.roa (raw, json)
Hash identifier: We/azn2Gn0+ZGyZTVoVxneBvqgyX+lIebYYeY8InTyE=
Subject key identifier: 72:9D:F0:D8:F5:C5:E1:74:83:3B:24:44:F0:90:27:F7:0E:2C:49:D6
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 018572D5D54D2A5BFB4DAA5A76DCC7FD6E97
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/cp3w2PXF4XSDOyRE8JAn9w4sSdY.roa
Signing time: Mon 02 Jan 2023 14:14:54 +0000
ROA not before: Mon 02 Jan 2023 14:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41232
IP address blocks: 185.207.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:d5:4d:2a:5b:fb:4d:aa:5a:76:dc:c7:fd:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jan 2 14:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=729df0d8f5c5e174833b2444f09027f70e2c49d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:27:83:44:db:a1:52:70:97:97:5e:b1:df:
89:83:93:3e:50:15:8e:dc:0e:72:00:de:8b:1c:f4:
c5:f0:14:fd:8f:90:f3:8a:b4:e3:af:28:b1:12:77:
70:f2:22:4d:1d:7f:ce:2f:5b:73:56:54:97:ff:7a:
70:69:6e:0d:2e:a9:b0:c4:4d:96:79:2d:91:6f:60:
70:55:5d:3f:84:81:2f:e9:d7:ea:7d:24:d8:91:49:
82:1a:e7:e0:a2:85:aa:f2:72:cd:fc:ff:c8:44:29:
ad:8e:1b:ad:9a:e6:82:c8:67:0d:03:12:76:ae:69:
15:69:c0:9f:8b:ce:33:64:72:d4:98:ab:97:e3:bd:
34:66:b9:9c:da:0a:43:71:94:34:d6:ed:99:cd:52:
09:4e:17:5c:93:77:ad:f0:53:bf:a4:1f:92:17:e8:
f9:56:20:a2:05:d4:23:13:f2:f3:9e:3b:db:d5:f4:
92:91:03:8b:a5:15:d3:47:c3:1d:c9:0f:b2:9d:53:
63:79:06:0e:ae:5c:92:e3:70:ae:35:7c:3e:9f:a2:
e8:b9:64:12:6d:57:54:ba:2b:ec:68:2e:7a:b1:9a:
01:9e:5a:0e:f2:47:ec:6d:fb:e1:9c:cf:be:03:fe:
b1:b7:8d:f8:70:cc:23:1f:4d:12:dd:ad:de:e1:fc:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:F0:D8:F5:C5:E1:74:83:3B:24:44:F0:90:27:F7:0E:2C:49:D6
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/cp3w2PXF4XSDOyRE8JAn9w4sSdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.140.0/22
Signature Algorithm: sha256WithRSAEncryption
25:8f:62:94:59:c8:54:83:56:28:94:4f:10:d6:1d:45:9f:20:
68:d3:15:d4:11:6e:59:4d:46:e8:6d:b6:f9:dd:dd:6a:4c:30:
e1:03:29:33:10:8a:d6:8a:ca:da:58:ba:41:f9:a3:b2:07:0c:
2e:c4:ad:28:ca:40:e2:b1:77:d3:13:a6:4c:b7:21:eb:52:55:
ca:66:ba:3e:38:d8:7c:24:19:f0:c4:58:d2:25:2c:42:2e:4e:
e5:13:1e:fd:a4:69:bc:d9:c8:15:35:0a:4f:64:bd:e2:75:0c:
86:84:5c:10:10:30:5c:a2:9e:6b:3c:a7:fd:d6:12:b7:01:98:
11:80:45:55:39:3c:f1:97:b0:f6:b9:5d:8c:a0:25:27:6d:72:
32:0c:0e:c6:99:81:5e:b2:9a:6b:73:f9:5d:70:4f:d1:18:55:
78:90:9b:e2:8b:8b:f8:95:0b:cf:42:8c:41:12:a6:a4:b7:d9:
3a:6a:8f:92:6c:bc:c3:6c:35:57:c2:7a:d8:cf:a9:81:4c:e1:
38:75:53:65:42:90:a3:70:d0:53:18:8e:c0:e2:b6:07:11:05:
38:8f:ce:43:75:bc:d2:93:56:16:77:3c:a1:f0:29:70:1f:1c:
14:69:85:ba:ec:7b:0f:c4:92:15:6f:2f:59:c6:f0:90:02:88:
ce:24:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:31 2025 by rpki-client