Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/X28huJ9q7bp8dcvLhu8VXn3jpxs.roa
File: X28huJ9q7bp8dcvLhu8VXn3jpxs.roa (raw, json)
Hash identifier: zMlh0rcsp1oIZkHwGDMdhIJiZ4yb+Zdd74Y8M7DrC88=
Subject key identifier: 5F:6F:21:B8:9F:6A:ED:BA:7C:75:CB:CB:86:EF:15:5E:7D:E3:A7:1B
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 04DA35D0
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/X28huJ9q7bp8dcvLhu8VXn3jpxs.roa
Signing time: Sat 01 Jan 2022 08:54:11 +0000
ROA not before: Sat 01 Jan 2022 08:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62058
IP address blocks: 185.153.40.0/23 maxlen: 23
185.153.40.0/22 maxlen: 22
185.153.42.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81409488 (0x4da35d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Jan 1 08:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f6f21b89f6aedba7c75cbcb86ef155e7de3a71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:e9:1b:2d:4b:76:a5:7f:7e:cc:ae:2d:c2:
d8:d4:b9:cf:a8:7f:09:7f:47:78:38:6e:b2:b8:94:
7e:ae:e6:78:a3:2f:ab:8d:34:56:7a:06:f0:72:01:
4c:4f:c8:dc:a8:4b:5a:bd:09:43:65:da:84:cf:cd:
fe:4a:62:26:aa:3f:6d:53:80:09:bd:fd:66:31:57:
94:f6:c8:53:ae:17:b3:03:87:5d:ec:24:b5:70:2b:
50:27:8c:1a:d5:60:e0:0e:ad:f4:2f:08:0a:99:1c:
98:1d:cb:7b:26:0f:7b:eb:b5:d8:96:a6:74:33:72:
31:37:90:0b:a4:08:29:ca:be:e6:e2:fe:8f:07:68:
f7:1c:d2:01:d5:70:16:f2:9f:e4:a2:6c:6e:be:f4:
6b:39:b4:2f:bc:20:e0:e5:0e:32:2c:33:3b:b7:d7:
1b:1c:c9:9c:c6:60:b0:ca:c5:45:5f:32:3b:41:61:
bb:61:0e:3a:ea:ff:db:82:4c:4c:29:8b:c8:94:3e:
90:1c:3b:67:34:d9:74:d0:ab:94:43:7a:26:7c:77:
9c:a8:48:44:41:86:0a:ba:6f:3e:a5:21:90:b3:ba:
78:bb:a5:06:c3:ec:55:51:5b:83:e9:91:93:6e:49:
25:03:4a:72:1d:30:cd:cb:ea:c1:52:9b:c5:5a:3c:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6F:21:B8:9F:6A:ED:BA:7C:75:CB:CB:86:EF:15:5E:7D:E3:A7:1B
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/X28huJ9q7bp8dcvLhu8VXn3jpxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.40.0/22
Signature Algorithm: sha256WithRSAEncryption
e0:9a:90:c5:41:d9:d4:b9:25:38:55:13:2f:b5:d5:a8:22:20:
19:1f:18:c9:95:d7:a6:1a:ea:72:cf:a4:75:bd:22:f6:61:84:
75:f1:1c:ec:68:f0:25:e8:51:00:05:00:12:c5:53:32:d6:98:
3e:c5:c8:a4:8a:61:72:31:d1:d3:f9:38:0f:ee:ef:1d:01:72:
4d:29:d4:07:ac:42:9b:a3:5d:77:5a:9f:dd:da:c1:fc:c0:01:
e4:88:b3:9d:a0:af:81:85:88:81:90:88:d9:59:ad:8d:ed:17:
f0:e6:f0:81:e2:d7:d5:48:3a:18:06:2e:07:03:2f:2a:8a:86:
b1:8d:a1:b7:a3:c7:a4:bf:bc:65:76:33:54:71:6f:ce:ee:b8:
72:c3:1c:16:e1:5f:40:5d:3f:4e:06:25:df:25:56:6c:a7:78:
ba:f8:c9:cd:c2:64:03:e5:83:9d:cc:66:e3:4f:f8:6d:c8:6c:
ba:c8:f7:32:fe:59:66:83:3a:50:c1:9f:a0:84:ae:c7:89:7d:
9a:87:a2:30:58:a1:f6:a9:bb:3b:a2:df:f8:68:e5:0a:19:60:
3e:70:d4:81:f9:53:62:9a:b5:21:12:7d:be:af:5d:9c:1a:49:
43:92:2c:f3:73:c4:b6:02:3c:0a:aa:59:1a:74:61:80:9e:4f:
b8:61:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:43 2023 by rpki-client on console-fra.rpki-client.org