Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1EQg5tR1tsAQ-nuBoVSFfH85APg.roa
File: 1EQg5tR1tsAQ-nuBoVSFfH85APg.roa (raw, json)
Hash identifier: gjq8+v/ax1Q4g80fTC/Wt8wbQQnxB5Ka5+Wjnj7NtwU=
Subject key identifier: D4:44:20:E6:D4:75:B6:C0:10:FA:7B:81:A1:54:85:7C:7F:39:00:F8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F47E237
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1EQg5tR1tsAQ-nuBoVSFfH85APg.roa
Signing time: Tue 29 Mar 2022 09:46:10 +0000
ROA not before: Tue 29 Mar 2022 09:46:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 193.108.112.0/24 maxlen: 24
194.87.118.0/23 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.36.0/22 maxlen: 24
194.135.32.0/24 maxlen: 24
212.192.3.0/24 maxlen: 24
212.192.0.0/21 maxlen: 24
195.133.26.0/23 maxlen: 24
195.133.25.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256369207 (0xf47e237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 29 09:46:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d44420e6d475b6c010fa7b81a154857c7f3900f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:8d:d9:fd:00:d2:6d:56:51:df:b6:97:52:
f2:92:8c:32:04:51:32:69:e3:cd:62:4d:da:f2:61:
23:cc:61:ff:60:f8:23:d7:d8:b7:07:59:96:cf:e8:
9d:7d:48:fe:dc:0e:b2:96:5c:b6:0e:d9:78:c9:56:
12:ad:7d:27:0b:1b:a4:e3:a6:c9:a4:6c:62:d6:f7:
2c:ec:87:48:36:b7:70:36:dd:ca:8e:6e:54:05:70:
c2:3e:ab:9e:d5:18:fc:91:4d:04:b5:d0:12:7f:01:
d6:df:29:b6:1b:24:48:b1:46:d6:d1:a7:96:33:2b:
a3:6a:c2:a2:ef:98:03:8e:4b:df:29:f7:17:17:14:
a8:79:c0:1b:ec:08:e0:96:b3:3f:31:fe:ae:d3:5f:
95:d1:a6:48:e3:6a:48:63:7c:c6:0c:67:3f:7c:e2:
fb:1a:66:11:b7:fd:33:ba:2f:ec:24:27:be:09:48:
55:a2:f5:af:7c:33:76:08:da:f7:df:04:ae:36:41:
6b:f6:a0:78:c2:21:48:a9:b1:05:1c:f8:ce:4b:f7:
8b:b3:4a:c8:48:33:ae:4c:18:4b:2c:7e:cc:2e:29:
84:cc:9e:c4:ba:40:91:63:be:18:84:36:0d:03:f0:
c9:49:08:0e:09:40:26:27:0e:6f:5b:46:cb:f1:5f:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:44:20:E6:D4:75:B6:C0:10:FA:7B:81:A1:54:85:7C:7F:39:00:F8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1EQg5tR1tsAQ-nuBoVSFfH85APg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.112.0/24
194.87.22.0/24
194.87.36.0/22
194.87.118.0/23
194.135.32.0/24
195.133.25.0-195.133.27.255
195.133.55.0/24
195.133.59.0/24
212.192.0.0/21
212.193.2.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6c:8a:5e:0d:7f:87:f2:32:46:3e:4e:84:21:2a:46:28:54:
1e:14:3a:d2:04:6a:d5:da:26:65:60:e4:c0:66:e3:43:3a:0b:
8d:59:4f:99:df:e5:b4:c6:91:45:45:30:89:46:e1:d2:51:d2:
3d:b6:64:56:f5:12:d3:c7:16:46:63:ca:a8:05:d9:b6:8e:83:
e1:ee:11:62:a7:7a:5f:4c:85:46:40:17:a4:ce:16:b2:77:8c:
c3:89:c9:a2:e8:9c:44:3c:c9:f7:9d:ae:7f:f8:4d:de:b7:5f:
6d:70:b1:e9:13:4e:c3:19:c7:ee:f7:9f:9c:36:a3:12:cd:8e:
d4:77:ce:ae:7a:7e:e6:5d:71:b7:b7:7a:26:38:0e:b8:64:9b:
0a:00:e4:36:22:01:20:27:ca:89:50:3d:8f:76:32:80:83:2e:
56:9b:53:5d:c4:35:cd:02:c8:ae:86:cb:cc:de:cf:c7:df:4a:
50:01:12:90:97:67:38:d5:89:36:87:9c:2e:a5:ab:86:22:06:
fe:72:63:a3:e2:e6:25:3c:96:c7:ee:b9:bd:15:07:ba:d7:84:
20:2d:78:0e:46:20:85:e3:0e:a1:6a:d3:3d:a8:79:19:3d:43:
94:4a:6a:3d:9a:78:08:30:d1:64:f0:c4:3b:83:ab:dd:39:d9:
7a:e9:ab:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org