Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/NCiQxygmIeDhN8-CuyMjKojWkNw.roa
File: NCiQxygmIeDhN8-CuyMjKojWkNw.roa (raw, json)
Hash identifier: B6lmbxXeWbDPFAYg39iEd+fXMLRE4Y5WG4Qamp4VPBg=
Subject key identifier: 34:28:90:C7:28:26:21:E0:E1:37:CF:82:BB:23:23:2A:88:D6:90:DC
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 07EEEBE9
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/NCiQxygmIeDhN8-CuyMjKojWkNw.roa
Signing time: Sat 01 Jan 2022 13:05:53 +0000
ROA not before: Sat 01 Jan 2022 13:05:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62282
IP address blocks: 185.140.231.0/24 maxlen: 24
185.140.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133098473 (0x7eeebe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jan 1 13:05:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=342890c7282621e0e137cf82bb23232a88d690dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:3b:a5:c4:0a:d0:d2:06:dc:b1:25:1a:e3:
0d:9c:69:10:51:ce:38:fd:f1:72:f1:98:37:89:5c:
ae:d2:f1:56:b3:4c:1c:90:81:31:57:d8:d1:0e:47:
06:1b:3d:80:fb:51:e5:5e:39:1e:cf:67:5a:aa:c0:
27:de:41:fe:f6:95:30:e6:14:90:10:d4:2b:d3:3b:
21:de:b2:bc:2f:ef:9d:bd:96:86:ff:81:5b:12:27:
9d:58:aa:6f:49:5a:d5:fb:bf:0e:45:fd:d6:4f:d7:
d4:a5:1e:72:fb:67:cd:ce:b8:03:23:b3:7b:64:75:
f7:0e:6f:90:b7:cf:e5:68:56:1a:d0:69:79:75:4f:
3c:df:35:39:4d:7d:d2:eb:b1:a1:01:7b:33:a4:c8:
c9:45:71:33:1f:fe:2b:e0:7b:da:b1:7e:3e:01:45:
16:e7:5d:69:8e:a4:e6:68:d3:12:a3:8e:cf:c8:70:
90:ef:e4:7e:58:99:e2:76:f2:bb:6b:6a:56:d6:6e:
ad:91:d2:7d:9d:b3:9e:1b:e4:cd:cf:65:8a:ad:17:
2d:7e:44:16:87:2e:9d:f8:d2:2d:62:1f:b4:7e:45:
80:b6:0e:f1:31:38:a4:c0:fb:06:01:c4:ee:f6:72:
89:e3:b5:89:bf:85:8b:15:ef:b3:1c:ac:2f:a3:a5:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:90:C7:28:26:21:E0:E1:37:CF:82:BB:23:23:2A:88:D6:90:DC
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/NCiQxygmIeDhN8-CuyMjKojWkNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.230.0/23
Signature Algorithm: sha256WithRSAEncryption
74:20:a1:1d:b9:c0:2d:a4:c7:46:86:d8:4b:83:64:1d:51:94:
e8:73:f3:1d:33:ee:b2:d3:df:54:db:7c:00:1b:95:f1:1e:3e:
b8:9b:36:9e:cd:b4:50:1e:cb:79:2c:17:2f:bb:c9:a5:4a:31:
29:40:c5:87:8c:82:1d:e6:84:93:50:3c:4f:8b:57:71:6d:de:
4e:58:04:70:6d:41:e5:9f:08:bb:3d:90:5a:7c:48:3e:bb:f0:
7e:c8:2e:bf:e4:98:9a:c8:01:ae:11:58:d3:c8:d3:55:d3:01:
27:3d:0d:da:b8:9e:65:ef:29:eb:f1:f7:94:db:b5:55:66:d7:
8f:9f:24:ec:59:eb:02:6c:fb:c9:44:f9:10:33:ee:96:80:50:
5c:c1:16:3b:3b:f7:6c:88:07:c5:3d:9f:29:12:a8:8f:5c:e4:
a8:79:71:dd:23:ce:d8:ff:66:2e:f0:ec:8b:16:73:b7:0b:f9:
38:8d:df:5a:72:19:e0:e2:43:28:7c:95:b1:10:d9:58:e2:f4:
62:8f:eb:71:9e:f1:02:79:81:1c:1e:4b:b2:6b:ab:dd:18:85:
01:3e:f4:0d:20:0b:13:80:59:63:06:d6:b0:42:87:0f:13:ed:
93:d0:f1:b5:be:82:53:c5:10:b9:cf:0a:5f:a6:08:40:ac:09:
8e:dd:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:08 2023 by rpki-client on console-fra.rpki-client.org