Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/BxXv6VGX7m9K0EZCWQtJWMMjgN4.roa
File: BxXv6VGX7m9K0EZCWQtJWMMjgN4.roa (raw, json)
Hash identifier: ERWorE6ThSBeNEXWQgydssc6XvqBYamdfaIRZ9Wbwhk=
Subject key identifier: 07:15:EF:E9:51:97:EE:6F:4A:D0:46:42:59:0B:49:58:C3:23:80:DE
Certificate issuer: /CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Certificate serial: 0677C084
Authority key identifier: EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/BxXv6VGX7m9K0EZCWQtJWMMjgN4.roa
Signing time: Fri 11 Feb 2022 11:35:51 +0000
ROA not before: Fri 11 Feb 2022 11:35:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42184
IP address blocks: 185.153.140.0/22 maxlen: 22
2a0f:8880::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108511364 (0x677c084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Validity
Not Before: Feb 11 11:35:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0715efe95197ee6f4ad04642590b4958c32380de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:b8:92:85:18:60:58:57:c1:6b:32:d9:00:
14:27:2a:00:6b:1a:0a:8c:6f:bf:6f:35:15:2a:c1:
76:f0:6c:f7:f2:8e:9d:6d:0d:68:a0:ee:16:67:44:
80:f0:5b:60:0b:34:f5:1f:ce:7b:6a:b4:0e:65:c8:
c8:e0:33:4a:b8:fe:a7:2f:c7:0e:39:7c:77:40:9b:
51:2d:0f:94:25:ab:93:1d:7d:da:d7:63:62:36:a6:
42:46:14:47:73:0a:06:b3:27:93:44:c2:ed:66:5b:
e7:75:f1:81:7d:1a:d9:b4:60:b0:89:ff:5f:f7:2a:
f1:34:0d:fc:85:d3:46:26:2d:ea:3a:69:01:87:cb:
0f:a4:35:9d:62:f3:47:67:d4:70:c4:9c:62:ea:b1:
d4:a7:11:30:bc:b1:2d:2b:23:59:d6:3a:e3:b1:2c:
6a:69:c8:d3:59:ac:b4:f2:e0:18:c3:4b:bf:24:81:
82:10:b4:3d:2b:3d:be:c4:bf:6b:86:0b:ae:1f:d1:
82:40:b3:47:d4:0c:80:46:b2:0f:b0:3c:5d:6c:a7:
1a:55:88:8f:fb:2f:d2:be:2c:b9:d4:c5:b8:c6:ac:
7b:37:80:ec:3f:3c:51:31:94:b4:f6:07:40:e1:b6:
28:11:49:4e:f2:c7:03:ea:cd:84:b1:6a:4f:e0:b7:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:EF:E9:51:97:EE:6F:4A:D0:46:42:59:0B:49:58:C3:23:80:DE
X509v3 Authority Key Identifier:
keyid:EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/BxXv6VGX7m9K0EZCWQtJWMMjgN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.140.0/22
IPv6:
2a0f:8880::/29
Signature Algorithm: sha256WithRSAEncryption
4c:77:a5:4f:eb:a3:64:20:83:80:48:f0:8f:0a:83:43:33:1d:
99:1b:52:7f:d6:30:30:b5:13:34:0f:f5:2a:35:22:87:58:8f:
14:a2:4d:fc:2c:bf:ae:08:c1:b2:db:54:e0:9f:98:19:d9:c2:
2b:80:76:a0:28:a3:8d:0b:fd:06:58:24:27:40:2a:e1:2d:ae:
b4:e1:be:50:39:02:f7:0a:c7:d4:f3:5d:41:01:e9:91:99:a1:
aa:ea:9e:db:70:67:32:6f:d0:b1:70:5b:16:92:e2:f8:ec:33:
bc:99:13:32:26:b6:4a:5f:cb:0b:d4:29:db:f6:a1:c3:be:17:
5c:fa:6f:a3:00:86:e0:d4:44:31:5f:a8:0c:bb:a2:d7:28:7e:
02:e0:82:d8:1f:97:47:9d:5a:23:ae:94:20:1a:0e:1a:1f:22:
54:52:68:dc:9a:7c:dd:34:38:ea:03:52:48:a7:87:4f:cc:bc:
a8:2a:f0:98:fd:3a:c8:36:23:b8:44:95:7d:87:f0:b8:76:f8:
6e:ef:ea:62:b9:b9:e0:b0:86:44:1f:99:c6:47:9b:fc:af:c4:
4a:65:2d:43:12:6d:de:7f:9d:5a:c8:49:70:df:d6:af:1b:32:
a1:7e:01:a8:9d:c3:0d:7b:bb:63:26:ae:d3:b4:ef:ed:5a:df:
d7:51:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:10 2024 by rpki-client on console-fra.rpki-client.org