Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/CqeEFldtx_YrIWY9nvmWnx197o4.roa
File: CqeEFldtx_YrIWY9nvmWnx197o4.roa (raw, json)
Hash identifier: 52l2vPVP8dkL5kQSl87Fv7JhxQqOSES3y5d8sjNu9kc=
Subject key identifier: 0A:A7:84:16:57:6D:C7:F6:2B:21:66:3D:9E:F9:96:9F:1D:7D:EE:8E
Certificate issuer: /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial: 0182A70F50E73495CE2A3B9821227CF1A403
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/CqeEFldtx_YrIWY9nvmWnx197o4.roa
Signing time: Tue 16 Aug 2022 14:29:34 +0000
ROA not before: Tue 16 Aug 2022 14:29:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203678
IP address blocks: 185.125.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:0f:50:e7:34:95:ce:2a:3b:98:21:22:7c:f1:a4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Validity
Not Before: Aug 16 14:29:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aa78416576dc7f62b21663d9ef9969f1d7dee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:c6:eb:78:e2:34:b4:98:6d:29:93:56:78:
a9:09:17:ad:1d:f0:fa:91:d2:3e:ed:ff:3f:43:aa:
f5:3c:b2:b1:96:d2:d0:e3:6c:50:89:4c:a8:79:7b:
93:d8:ff:cb:e6:0c:95:63:18:cc:e1:84:6b:69:ca:
38:e9:2e:bb:d8:bd:ef:bd:33:d1:29:92:62:53:f9:
37:57:62:c8:71:91:6c:5c:8a:a2:a9:e9:ba:9c:d9:
77:77:0d:98:06:af:6c:ed:13:fa:b8:1e:09:2c:26:
94:b7:3a:b4:91:15:cd:c9:15:49:83:7b:23:a5:ee:
ef:45:63:e5:1b:22:00:80:50:d5:db:b1:fa:48:0e:
09:8a:35:64:e6:a0:58:24:88:8f:1c:dc:8c:b2:f4:
3e:32:07:a6:a0:82:75:28:fc:41:b2:d1:39:3f:2d:
32:a7:e9:ca:ac:5e:2c:7e:2b:77:1e:93:74:80:a7:
ab:ab:31:a1:5e:12:5b:92:36:b9:00:48:4d:b6:89:
5b:e5:3a:32:56:cb:03:ae:a8:64:ff:84:66:32:e7:
9e:1c:8d:2e:cc:9e:50:f7:c9:9e:e4:6a:37:34:be:
99:7d:a4:c7:9d:99:8a:00:3d:a0:6b:39:3f:b8:d6:
a2:da:46:af:9c:0b:2b:51:11:4e:86:a1:28:cf:2c:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A7:84:16:57:6D:C7:F6:2B:21:66:3D:9E:F9:96:9F:1D:7D:EE:8E
X509v3 Authority Key Identifier:
keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/CqeEFldtx_YrIWY9nvmWnx197o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.140.0/22
Signature Algorithm: sha256WithRSAEncryption
98:79:ab:d3:2f:5e:6d:f0:cf:19:8f:74:dc:af:1b:df:5e:60:
31:df:e6:51:26:d7:fa:43:61:74:f3:0b:e4:f4:b4:95:87:f8:
5e:27:d0:95:c4:54:75:d0:2b:47:2d:f5:1d:e5:ce:b5:42:33:
67:09:89:42:cf:43:ad:f0:f7:61:28:e0:71:c1:e3:df:6e:ab:
8f:b7:bf:25:75:90:f4:c3:fb:53:9d:98:52:07:47:50:2f:8f:
8e:6c:0f:00:5a:a3:be:84:17:28:85:71:6e:46:95:5d:e1:d9:
65:85:51:bf:fe:b4:2e:bc:35:84:5b:c7:e6:2b:92:c6:0b:de:
9d:53:eb:25:95:70:db:07:46:84:84:6b:67:b7:d3:d6:f3:07:
ec:26:de:ae:d3:c4:63:ca:d0:c2:71:71:8a:b6:b6:b0:8c:9a:
46:ea:de:ec:76:51:67:24:aa:3d:b8:5a:77:8d:ee:8b:a5:95:
13:63:f1:49:31:c6:1d:94:74:92:56:5c:2c:56:5e:0a:fc:82:
71:4f:78:8a:20:e2:98:a6:bc:c3:c8:0b:7a:f0:a3:d2:76:63:
b3:fe:43:20:78:36:f0:54:8a:91:15:67:6c:07:97:60:6e:83:
b6:02:aa:72:0e:e9:f5:4f:99:b4:9d:65:3b:84:55:82:da:5c:
c0:2f:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:25 2024 by rpki-client on console-ams.rpki-client.org