Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/vdfQVq2HjEmaM6N2EPddZY5IeCk.roa
File: vdfQVq2HjEmaM6N2EPddZY5IeCk.roa (raw, json)
Hash identifier: 0F1defsN+avsKj97AfzvTBut0E5vkT3bLBg2vcuNkQo=
Subject key identifier: BD:D7:D0:56:AD:87:8C:49:9A:33:A3:76:10:F7:5D:65:8E:48:78:29
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 07ED694E
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/vdfQVq2HjEmaM6N2EPddZY5IeCk.roa
Signing time: Sat 01 Jan 2022 13:05:53 +0000
ROA not before: Sat 01 Jan 2022 13:05:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15440
IP address blocks: 185.140.228.0/24 maxlen: 24
185.140.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132999502 (0x7ed694e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jan 1 13:05:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdd7d056ad878c499a33a37610f75d658e487829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:b8:e7:4b:cf:ab:a1:00:77:38:5c:c6:17:
3d:40:ff:0c:8e:66:40:79:8d:c5:2d:0d:f2:06:f9:
54:e7:35:bf:f7:82:db:c1:b0:e7:bb:17:64:dc:ed:
c9:90:0e:73:d3:5e:c5:42:4d:17:fc:a0:98:2e:75:
1c:57:60:7d:ca:c8:33:54:ca:33:5d:9d:3b:24:8f:
2d:aa:8a:fe:2e:f6:27:a9:f7:2d:cb:d0:75:66:fe:
76:67:4f:db:75:4d:de:28:61:91:75:5b:16:10:69:
23:be:86:0d:d7:7f:ba:36:ac:6a:49:37:9a:45:3d:
3b:c5:a0:82:6e:26:63:a7:ff:be:b6:69:bf:80:8b:
9c:b0:31:9d:34:5d:06:99:26:d1:65:4f:68:b2:f9:
4e:72:65:a5:62:ab:62:4d:62:8c:fc:e5:c8:8f:d0:
ab:ff:83:b5:18:ae:52:87:af:57:91:f3:3d:48:93:
65:31:04:4e:33:8f:8a:c6:36:26:ba:cb:4c:2d:fb:
1d:87:b5:f0:84:62:14:8c:c1:5c:73:5a:49:c2:44:
1f:ea:c6:eb:45:0c:d5:e4:b9:19:08:1d:12:f3:9f:
15:b9:35:46:4e:0a:61:b5:1c:e9:4f:3f:da:fe:01:
ea:d6:68:2f:df:2c:86:fb:60:a3:4b:8c:55:03:8e:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D7:D0:56:AD:87:8C:49:9A:33:A3:76:10:F7:5D:65:8E:48:78:29
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/vdfQVq2HjEmaM6N2EPddZY5IeCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.228.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ba:a1:16:c2:3a:0d:39:91:94:6c:55:5f:4a:9a:a9:fa:46:
66:80:6b:ee:2b:fe:1e:61:8f:41:85:2e:05:74:15:82:92:eb:
e2:c6:cd:2f:be:40:35:0d:d6:d7:20:b0:b9:ec:68:c5:59:cc:
71:38:73:43:3f:ae:54:75:d6:9e:23:6e:dc:91:23:b9:59:df:
7f:7f:b8:db:09:59:64:e7:c5:23:b0:44:f8:14:3c:f6:38:69:
f2:ce:a2:00:ee:93:69:7a:b0:5a:72:66:c6:e2:4e:52:10:7d:
b6:17:4b:f1:3c:6d:d9:98:4c:cc:91:e3:8f:0a:ab:25:b0:a8:
a3:4a:37:42:73:4b:73:d3:a5:09:af:c2:05:21:61:51:cd:cb:
a2:7d:1b:7a:c1:a4:fd:54:4a:53:d3:7b:0d:db:8e:35:86:62:
f6:d6:3d:51:15:b7:0d:8e:d4:7a:33:9a:e7:9f:46:bc:8c:77:
b7:28:6d:cf:e1:ec:c6:0c:8d:be:cf:2b:5b:37:78:a5:48:74:
c2:53:e1:30:06:28:e8:06:da:5c:11:7d:65:4c:b2:24:fb:25:
74:42:fd:89:49:4a:dd:8b:54:7c:47:9d:b1:f0:59:7d:68:4a:
65:52:17:b0:12:b3:e1:a5:8e:3a:88:56:b4:98:b9:1e:44:7c:
fa:d3:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:30 2024 by rpki-client on console-ams.rpki-client.org