Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/8F6xup3UNzmsis6vNFEfRk6dkM8.roa
File: 8F6xup3UNzmsis6vNFEfRk6dkM8.roa (raw, json)
Hash identifier: SV2eRA98IMmGqvUZiKNvMrVFWiGIuSYxXkO/5jEKPSs=
Subject key identifier: F0:5E:B1:BA:9D:D4:37:39:AC:8A:CE:AF:34:51:1F:46:4E:9D:90:CF
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 01838AD1CD1834EDC0A935F170030098CDC0
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/8F6xup3UNzmsis6vNFEfRk6dkM8.roa
Signing time: Thu 29 Sep 2022 19:55:48 +0000
ROA not before: Thu 29 Sep 2022 19:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203257
IP address blocks: 185.140.192.0/24 maxlen: 24
185.140.195.0/24 maxlen: 24
185.140.193.0/24 maxlen: 24
185.140.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8a:d1:cd:18:34:ed:c0:a9:35:f1:70:03:00:98:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Sep 29 19:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f05eb1ba9dd43739ac8aceaf34511f464e9d90cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:f9:3f:43:c9:13:52:27:2a:f3:72:92:da:
80:b8:97:66:d4:82:5e:5d:9c:b5:0f:76:c3:88:87:
ba:cc:78:e2:a6:b6:05:23:47:e9:2f:ec:d5:3c:92:
de:5e:7b:83:8f:a7:07:92:4d:1e:61:1a:b5:a3:2a:
b0:a6:4c:09:b2:5c:04:67:48:d4:60:ca:e0:4b:0e:
54:33:bd:c2:87:97:24:e5:66:a0:76:8d:1b:31:73:
51:be:93:b7:5f:85:72:18:57:04:0a:89:bc:c0:94:
d5:a8:f9:37:4d:86:2e:7d:8e:12:39:55:54:bb:db:
b8:40:48:c1:76:97:bf:21:eb:d1:1f:63:93:43:94:
0e:7f:d4:40:8d:8e:aa:65:6b:c0:e8:4c:b6:6e:44:
dc:69:5e:be:99:2f:9f:8c:9a:c8:78:8f:9c:03:62:
ab:2c:ed:e9:56:fa:df:63:a3:61:bb:51:dc:46:3a:
e3:0f:46:5a:84:16:79:c4:38:fd:d4:90:1e:f5:c8:
bb:15:80:2a:df:e0:0d:97:63:ab:78:51:f2:31:82:
8a:93:a0:99:40:ba:05:fc:24:7a:fa:8f:ad:34:73:
24:6f:b7:c2:03:c2:84:0a:db:d8:67:9c:5b:c0:48:
21:05:a4:12:d2:30:dd:2f:e3:95:72:04:5e:29:9d:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5E:B1:BA:9D:D4:37:39:AC:8A:CE:AF:34:51:1F:46:4E:9D:90:CF
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/8F6xup3UNzmsis6vNFEfRk6dkM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:c0:87:ab:2d:18:91:19:41:01:60:07:0f:2b:1e:21:d5:56:
6a:6f:b2:0c:6a:25:98:9c:4d:db:bc:9c:4b:29:a7:75:55:44:
1c:ff:62:80:29:6b:ad:c1:69:c1:12:db:4f:02:16:e4:09:c5:
96:f6:2e:00:a6:ba:af:1d:74:63:a4:15:6b:df:52:e0:c3:4a:
1c:79:1c:54:93:32:5a:4f:c7:c6:a5:7b:ae:44:15:2d:a4:9d:
b0:0a:78:7e:cf:ab:87:aa:5e:1b:b7:68:0b:4d:8e:23:69:86:
46:20:ab:32:e1:82:fe:49:c9:e2:99:02:0c:5e:c0:8a:a7:b8:
76:4a:bf:30:bd:02:1b:27:93:b1:b9:55:c2:95:6f:e3:61:29:
8c:fe:d4:7c:a9:5b:55:af:d5:26:1f:83:93:df:7e:ed:36:19:
a8:cf:4b:6c:67:42:17:4e:ae:37:a5:23:dd:e4:37:06:66:bf:
58:2d:86:b7:a0:a3:89:14:f5:d2:07:07:a4:4b:f9:02:dd:ed:
43:2c:05:82:56:49:b0:1e:9d:26:21:00:f4:65:9d:4f:45:1a:
d0:03:60:3f:f2:ce:d2:e5:6a:59:24:4c:d4:af:c1:66:6b:5a:
28:4f:e2:27:87:86:65:5d:f3:9d:75:6b:e1:a7:ee:54:09:96:
7c:e8:2b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:02 2023 by rpki-client on console-ams.rpki-client.org