Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0g0e5RGp5d5r21X1wIO7AxJYu_U.roa
File: 0g0e5RGp5d5r21X1wIO7AxJYu_U.roa (raw, json)
Hash identifier: KPcVO299P/9JKUmgQD5KTkgCSh612iiUJegqFN0angY=
Subject key identifier: D2:0D:1E:E5:11:A9:E5:DE:6B:DB:55:F5:C0:83:BB:03:12:58:BB:F5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01853371FDCB14FA9F42504FEA4A82784CE6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0g0e5RGp5d5r21X1wIO7AxJYu_U.roa
Signing time: Wed 21 Dec 2022 06:49:46 +0000
ROA not before: Wed 21 Dec 2022 06:49:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.200.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:71:fd:cb:14:fa:9f:42:50:4f:ea:4a:82:78:4c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 21 06:49:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d20d1ee511a9e5de6bdb55f5c083bb031258bbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:07:4d:35:44:d9:1e:88:f1:59:6a:69:28:e0:
33:1b:4b:2b:05:02:35:d6:dd:77:6e:d2:24:f2:4c:
40:0a:98:c8:ea:b7:e6:96:46:65:7e:ce:3e:11:03:
42:76:46:85:d2:6d:29:75:01:4d:dc:44:ca:9b:a0:
85:82:ac:59:fb:ab:90:8f:6b:a7:ba:63:75:21:32:
f3:5a:dc:23:39:9e:06:ae:6e:1e:61:bd:93:da:12:
7a:16:0a:0a:60:18:f6:81:e0:6b:ff:de:f2:7f:e3:
c7:05:a6:b2:2e:8b:51:a9:4f:79:80:0e:de:d8:5b:
b4:1f:cf:e2:c6:1f:47:7b:e6:3d:29:20:3e:7d:1b:
f5:7a:d4:6a:2a:f9:f6:0f:a5:4d:b2:da:50:29:54:
59:b6:ec:b7:f8:c8:31:c8:a7:05:4a:a8:c1:2e:c4:
07:1c:3d:f6:24:d6:d2:15:7c:3f:c3:29:b9:3e:09:
cc:74:64:b9:79:dc:a8:f6:cb:43:42:38:50:9a:5c:
33:00:52:d9:1d:b6:e0:8e:7e:f8:b2:08:14:69:a9:
be:81:4f:2b:ac:5f:31:5c:85:f3:7b:9f:53:6f:13:
20:d0:8f:60:e1:eb:07:a7:48:7c:36:4e:d2:1b:e9:
40:5c:12:91:ee:a9:ee:a9:54:b1:ea:e2:4c:44:e9:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:1E:E5:11:A9:E5:DE:6B:DB:55:F5:C0:83:BB:03:12:58:BB:F5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0g0e5RGp5d5r21X1wIO7AxJYu_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0-62.76.226.255
192.124.180.0/24
192.124.183.0/24
193.124.18.0/24
193.124.45.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.122.0/24
194.87.124.0/23
194.87.170.0/24
194.87.200.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
195.133.193.0/24
212.192.1.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
08:3e:7b:ee:a2:80:ac:54:b3:58:d9:c2:fb:5f:be:0e:cd:71:
6d:ca:1e:f0:96:ee:02:3f:08:9a:9e:b7:dd:4c:05:f4:fc:49:
b2:58:6d:31:6c:54:bf:91:b3:4c:1b:13:c0:e2:ad:2f:65:47:
0d:77:ab:d9:f3:2b:3b:57:48:51:c0:08:05:23:06:2a:8a:20:
e1:e8:94:76:18:d7:07:e1:1a:a0:8a:46:19:01:d3:c1:2b:11:
39:e8:3b:14:af:59:f1:99:3e:83:37:09:e2:58:4c:bc:60:ab:
fe:43:2c:b6:96:67:10:64:c1:20:a3:87:86:d3:2e:0d:af:18:
04:37:48:80:12:70:e4:f5:4a:46:0a:ec:ba:a3:1b:33:bb:bb:
7d:17:07:a3:2f:69:ab:e1:b4:c9:be:e5:98:ea:5e:30:50:ee:
f9:91:d4:f2:18:54:41:dc:c2:6c:30:e5:23:d6:64:58:df:bf:
80:a0:33:53:3f:bb:49:49:d8:7f:27:3f:13:28:23:fe:24:ff:
e8:39:b4:fd:a5:27:55:3e:d2:8c:d5:d0:ff:50:7a:01:eb:7f:
e4:ad:b2:9b:46:c2:89:3a:e1:4d:a0:d8:fb:13:59:8d:db:c2:
93:9c:21:10:09:a4:bf:c4:2a:d9:13:bc:5f:35:80:56:44:70:
19:87:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org