Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/HbYV2s-pVj3DbM92WeZsHIHX3SM.roa
File: HbYV2s-pVj3DbM92WeZsHIHX3SM.roa (raw, json)
Hash identifier: lApxX5tieRgGkabCfcQcdEDzrA4m+mYKNIM77JB8ZcQ=
Subject key identifier: 1D:B6:15:DA:CF:A9:56:3D:C3:6C:CF:76:59:E6:6C:1C:81:D7:DD:23
Certificate issuer: /CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
Certificate serial: 045BA9B7
Authority key identifier: E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/HbYV2s-pVj3DbM92WeZsHIHX3SM.roa
Signing time: Mon 24 Jan 2022 15:39:50 +0000
ROA not before: Mon 24 Jan 2022 15:39:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50041
IP address blocks: 185.226.142.0/24 maxlen: 24
185.226.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73116087 (0x45ba9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
Validity
Not Before: Jan 24 15:39:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1db615dacfa9563dc36ccf7659e66c1c81d7dd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:80:ed:f1:26:7c:b6:a4:f7:08:bf:88:0a:
1f:a8:8e:2d:21:fa:51:25:d4:2a:7c:60:ac:f4:85:
7c:31:04:70:03:57:7e:12:29:a4:79:d7:e1:0a:fd:
95:7f:74:53:dc:65:d3:69:41:1c:a6:d4:55:58:20:
17:c6:fe:db:bd:b6:a1:ef:5f:93:13:5f:af:87:4d:
98:be:89:03:2b:af:50:c1:90:8c:3d:42:2a:c5:01:
13:79:9d:cb:de:a2:82:c6:f3:ed:13:1d:2e:8c:cb:
87:b7:0b:f2:81:7e:ee:73:c8:4c:f1:05:e6:25:dd:
f3:ce:1e:b4:62:b5:f8:67:7b:c3:9c:59:bc:79:92:
59:e9:f3:3f:dc:7e:69:98:07:68:22:95:7f:4d:6a:
fe:80:b0:1c:84:70:a4:d6:39:cc:bb:5f:8c:9c:67:
c2:89:40:30:b9:fe:88:cc:16:d1:73:ad:a9:cd:aa:
07:46:72:67:4f:0b:6d:e9:2a:4a:9c:de:14:6e:5c:
70:a4:fb:f1:34:b0:3f:02:00:50:f3:79:8e:bf:1d:
e6:55:8b:6d:a9:e5:d4:58:47:35:68:fd:22:65:d8:
d8:c6:1a:9c:08:75:59:f4:e9:21:77:7a:40:c4:f4:
c9:45:1c:f7:bc:ec:d3:70:1d:f9:2f:df:af:01:87:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B6:15:DA:CF:A9:56:3D:C3:6C:CF:76:59:E6:6C:1C:81:D7:DD:23
X509v3 Authority Key Identifier:
keyid:E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/HbYV2s-pVj3DbM92WeZsHIHX3SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.140.0/24
185.226.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6b:ae:30:db:10:75:23:f7:59:44:8d:19:e6:ce:d2:e3:3a:
30:74:f7:28:b5:32:e8:ed:d3:63:a7:4b:c7:1c:07:85:f9:7b:
34:fa:8b:da:b6:98:d7:b7:be:8a:47:ab:22:0d:f4:f6:85:eb:
57:1e:33:c9:02:1c:3e:b2:49:ab:5c:40:d8:8f:4b:17:b9:56:
90:f4:7f:88:4e:5a:88:ee:46:18:85:02:93:ac:69:1b:39:f2:
f7:49:31:c3:6e:fa:5e:6c:76:c8:b2:cd:d4:c7:5b:9a:11:dd:
fa:1d:c1:5b:0b:ea:21:b7:f2:7e:32:3b:8c:6d:22:22:f6:7b:
f6:c1:f0:29:cf:9b:d9:fc:05:58:3b:56:81:1f:a5:7f:1f:cf:
73:34:f1:5c:36:ba:1f:63:3e:ee:e2:46:ac:a5:f5:0e:6a:1c:
8d:d7:b1:af:a6:09:a4:13:e2:8e:f6:c5:3e:03:b2:8d:58:4a:
59:fb:7b:fe:54:be:36:70:a5:cd:fb:92:25:9f:f4:d3:c8:4d:
40:e7:61:25:19:9f:07:2f:d2:f0:54:2d:8b:34:ab:a4:75:a2:
d6:55:6f:a3:69:62:c8:e9:3e:e0:2b:b8:9f:7f:89:bd:dc:75:
ef:ce:84:ee:1c:f6:36:77:2a:b9:ac:7c:ec:c4:66:21:8b:e6:
aa:3c:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:08 2023 by rpki-client on console-fra.rpki-client.org