Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/SLPcLM7uhENbNJ9E9lspGSuRMBw.roa
File: SLPcLM7uhENbNJ9E9lspGSuRMBw.roa (raw, json)
Hash identifier: Rn3xjhN4emORfehn/Z8oKO1Na9sH//LZow/HGDBQ8oY=
Subject key identifier: 48:B3:DC:2C:CE:EE:84:43:5B:34:9F:44:F6:5B:29:19:2B:91:30:1C
Certificate issuer: /CN=348566061e368caff1881be2bac6737dfd3c1dba
Certificate serial: 018250836052458D132C5DB17F80606D79E5
Authority key identifier: 34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/SLPcLM7uhENbNJ9E9lspGSuRMBw.roa
Signing time: Sat 30 Jul 2022 19:09:23 +0000
ROA not before: Sat 30 Jul 2022 19:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206521
IP address blocks: 185.140.157.0/24 maxlen: 24
185.140.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:50:83:60:52:45:8d:13:2c:5d:b1:7f:80:60:6d:79:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348566061e368caff1881be2bac6737dfd3c1dba
Validity
Not Before: Jul 30 19:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48b3dc2cceee84435b349f44f65b29192b91301c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:e3:ff:85:27:10:eb:a2:5c:7e:f4:33:5f:
b2:bf:8d:d0:ec:0b:4f:f6:11:5d:70:c5:9e:3c:44:
80:2c:4b:96:aa:48:b9:97:f3:ef:1d:02:ea:9a:46:
00:5b:25:42:bd:9b:56:59:8f:b2:1f:ee:ed:37:fc:
7c:d2:3d:d7:52:33:07:9c:ff:58:c7:1c:2c:f7:ce:
eb:f9:cb:bf:79:0a:a7:73:85:3e:45:44:5f:3e:fc:
23:0c:bb:c6:6a:39:8a:53:02:eb:9d:ce:a2:d4:ee:
52:30:33:30:fd:0f:6d:9d:a4:8f:b2:a3:02:e7:4b:
3a:7c:4e:0e:b4:46:98:49:4d:f4:28:a1:0b:38:69:
2b:27:60:09:af:9f:b1:5d:66:e2:ab:be:4a:f0:12:
a6:41:f6:7b:14:3b:e3:2a:53:fd:4f:cc:a6:88:9f:
2c:5e:01:64:88:5a:c0:8c:8c:64:af:8d:c8:67:c4:
4b:a1:23:1c:ac:e0:33:9f:39:ea:6a:bf:c7:de:a5:
b9:6d:76:6a:36:2f:b0:88:4e:24:8d:d4:b5:00:e0:
5d:21:1f:89:61:1a:eb:0c:6e:bd:a9:fa:65:58:b7:
0a:6d:6c:ff:fc:d1:88:5e:e2:73:e0:2d:66:18:a3:
92:7c:bc:b8:6c:7c:33:04:bd:09:04:07:55:8b:47:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:DC:2C:CE:EE:84:43:5B:34:9F:44:F6:5B:29:19:2B:91:30:1C
X509v3 Authority Key Identifier:
keyid:34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/SLPcLM7uhENbNJ9E9lspGSuRMBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.156.0/23
Signature Algorithm: sha256WithRSAEncryption
13:c3:43:00:b7:81:d5:04:55:cd:92:01:34:a1:8e:74:12:af:
cc:ec:22:f9:73:6c:90:9c:87:99:40:06:06:34:bc:b3:14:2b:
d1:cb:b6:7e:63:a9:8c:04:72:b2:2f:10:50:52:b9:c0:06:ea:
e5:93:60:04:06:ef:c7:5c:30:59:35:cd:7b:42:58:a0:d2:51:
57:8d:38:07:13:bf:31:a3:df:0b:cb:9d:dc:da:0f:2a:86:45:
16:80:b3:a0:78:27:35:02:7d:27:ef:7a:2e:3b:94:99:e6:9e:
59:09:90:d0:f1:40:9b:fe:cc:fe:c1:a6:19:1f:39:41:7f:88:
28:f9:22:49:1f:7e:32:f8:63:26:8b:c0:31:2a:ff:35:ef:4d:
5d:40:e5:b9:5a:20:c7:23:cd:b2:79:7d:61:ac:4a:b0:6c:8c:
72:aa:59:be:cb:df:f3:f8:e8:d1:b1:ac:66:97:4a:a4:45:4e:
00:bd:9c:88:a6:54:d6:7d:16:a5:ee:90:a4:8d:03:37:61:19:
11:01:28:bc:2d:c6:ab:90:38:6a:59:17:27:15:ff:8d:af:62:
ed:20:49:d5:cc:16:d8:22:4b:68:1b:6c:5a:1c:d4:fb:7d:61:
c6:1c:78:7f:f0:a3:da:45:ee:94:d1:23:06:5f:9c:12:5e:a0:
f6:f3:ad:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJQg2BSRY0TLF2xf4BgbXnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODU2NjA2MWUzNjhjYWZmMTg4MWJlMmJhYzY3MzdkZmQz
YzFkYmEwHhcNMjIwNzMwMTkwOTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGIzZGMyY2NlZWU4NDQzNWIzNDlmNDRmNjViMjkxOTJiOTEzMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr93j/4UnEOuiXH70M1+yv43Q7AtP
9hFdcMWePESALEuWqki5l/PvHQLqmkYAWyVCvZtWWY+yH+7tN/x80j3XUjMHnP9Y
xxws987r+cu/eQqnc4U+RURfPvwjDLvGajmKUwLrnc6i1O5SMDMw/Q9tnaSPsqMC
50s6fE4OtEaYSU30KKELOGkrJ2AJr5+xXWbiq75K8BKmQfZ7FDvjKlP9T8ymiJ8s
XgFkiFrAjIxkr43IZ8RLoSMcrOAznznqar/H3qW5bXZqNi+wiE4kjdS1AOBdIR+J
YRrrDG69qfplWLcKbWz//NGIXuJz4C1mGKOSfLy4bHwzBL0JBAdVi0faTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEiz3CzO7oRDWzSfRPZbKRkrkTAcMB8GA1UdIwQY
MBaAFDSFZgYeNoyv8Ygb4rrGc339PB26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklWbUJoNDJqS194aUJ2aXVzWnpmZjA4SGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hZmZhYTEtMGU3Yi00MDFlLWE3YzUt
MDYyNzBlYTgyMTU0LzEvU0xQY0xNN3VoRU5iTko5RTlsc3BHU3VSTUJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hZmZhYTEtMGU3Yi00MDFlLWE3YzUtMDYyNzBlYTgyMTU0
LzEvTklWbUJoNDJqS194aUJ2aXVzWnpmZjA4SGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYycMA0G
CSqGSIb3DQEBCwUAA4IBAQATw0MAt4HVBFXNkgE0oY50Eq/M7CL5c2yQnIeZQAYG
NLyzFCvRy7Z+Y6mMBHKyLxBQUrnABurlk2AEBu/HXDBZNc17Qlig0lFXjTgHE78x
o98Ly53c2g8qhkUWgLOgeCc1An0n73ouO5SZ5p5ZCZDQ8UCb/sz+waYZHzlBf4go
+SJJH34y+GMmi8AxKv81701dQOW5WiDHI82yeX1hrEqwbIxyqlm+y9/z+OjRsaxm
l0qkRU4AvZyIplTWfRal7pCkjQM3YRkRASi8LcarkDhqWRcnFf+Nr2LtIEnVzBbY
IktoG2xaHNT7fWHGHHh/8KPaRe6U0SMGX5wSXqD2862T
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net