Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/vVF7_jfJfrVaFGACFGc45j8ThF4.roa
File: vVF7_jfJfrVaFGACFGc45j8ThF4.roa (raw, json)
Hash identifier: X7Yo+R5oowQPUny4KlDZB42CFisEc2wF0LK91RZigI0=
Subject key identifier: BD:51:7B:FE:37:C9:7E:B5:5A:14:60:02:14:67:38:E6:3F:13:84:5E
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 14DF61C2
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/vVF7_jfJfrVaFGACFGc45j8ThF4.roa
Signing time: Sat 01 Jan 2022 06:05:49 +0000
ROA not before: Sat 01 Jan 2022 06:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201411
IP address blocks: 185.70.143.0/24 maxlen: 24
185.70.140.0/22 maxlen: 23
185.70.142.0/24 maxlen: 24
2a05:2a40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350183874 (0x14df61c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Jan 1 06:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd517bfe37c97eb55a146002146738e63f13845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:0d:14:a8:b0:8b:8d:b5:af:25:9a:37:46:
0f:e2:52:9f:5b:4f:6f:b5:94:33:6c:50:b7:20:83:
eb:18:44:34:75:c1:93:0a:3a:dd:bc:38:4f:f2:ca:
c6:23:d5:b9:fa:fa:2e:5d:70:e7:e0:c0:f2:d2:f5:
32:ec:7a:e5:01:8c:6a:76:49:b3:5b:b8:24:dc:d1:
61:84:19:45:10:99:49:93:a5:93:de:e9:f6:ee:bd:
5d:6d:65:3e:aa:55:33:f7:71:3f:d8:a6:66:e8:fc:
6a:d3:6d:ae:05:8c:01:0b:ad:c9:4f:42:ff:40:67:
90:00:6c:0f:f7:9f:3b:59:13:75:52:f7:88:96:2b:
5d:30:30:48:7a:64:d0:58:c7:f8:c9:9d:9c:e4:dc:
de:7b:35:76:c4:f2:4d:b7:9f:e0:21:24:42:10:3c:
b8:b5:40:00:d9:4c:a6:da:6b:1c:93:77:1b:80:ae:
11:c7:f5:ef:51:84:bc:03:9b:b8:57:36:d6:a8:5c:
c1:d9:83:8c:23:c7:2d:a9:76:df:21:89:f8:8e:db:
8f:b7:06:dd:a6:c8:3b:02:04:2f:61:69:f8:33:a2:
63:41:4e:1e:be:37:36:9f:32:f6:00:c5:63:ab:7b:
fa:a1:a2:3d:08:05:be:ae:15:4c:f4:2e:ee:23:20:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:7B:FE:37:C9:7E:B5:5A:14:60:02:14:67:38:E6:3F:13:84:5E
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/vVF7_jfJfrVaFGACFGc45j8ThF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.140.0/22
IPv6:
2a05:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
04:b7:bf:61:ae:d1:9a:c6:a8:45:bb:1e:fe:01:cb:cf:0d:2d:
85:4a:14:7b:a4:e7:80:ab:84:e2:36:3a:a1:0d:2f:ee:7b:cd:
06:41:4a:a9:f6:1c:dd:37:0b:96:78:2c:bb:a0:95:13:b1:40:
c7:b2:a6:81:8c:e4:74:cd:ef:22:73:f8:d8:fa:4b:a2:c9:68:
c7:13:f0:9b:80:30:2d:78:be:15:e3:db:ee:65:31:c1:fc:42:
55:a3:b5:58:ae:7b:ea:c3:cc:5a:6f:bd:6d:c9:af:b8:f2:ac:
54:96:35:6b:e6:29:b4:4a:6a:d2:53:94:f8:e9:0c:2e:a8:28:
89:5c:36:64:ea:39:0a:69:0a:e1:63:20:19:79:65:a5:78:f9:
51:26:6e:82:01:8b:3f:55:29:cd:ca:8d:fd:10:c6:74:1f:b6:
25:e6:91:20:6f:01:39:f4:31:0b:c1:38:23:17:47:1d:c0:57:
cb:97:06:ad:eb:0c:95:27:6d:64:6d:60:d3:f5:67:70:5d:42:
6f:da:a4:a1:d8:3a:fc:38:00:8a:d2:14:c8:80:d5:54:12:09:
5f:f8:c4:6e:b0:62:21:b5:e4:55:97:e2:f8:0c:89:60:6f:b5:
b8:0c:b7:a0:a5:65:68:ad:97:fc:8a:95:b0:ac:8f:eb:37:1c:
5b:fe:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:02 2023 by rpki-client on console-ams.rpki-client.org