Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1T5FMPSOaPb9W76Eh08Z16kiz2I.roa
File: 1T5FMPSOaPb9W76Eh08Z16kiz2I.roa (raw, json)
Hash identifier: R4XLU8eITHR/R/5SYGJT6A3J6n4O3J6L0Sge7Vb5Dds=
Subject key identifier: D5:3E:45:30:F4:8E:68:F6:FD:5B:BE:84:87:4F:19:D7:A9:22:CF:62
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0181FC30DE90EF4AB25FE76096AB317E2B4E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1T5FMPSOaPb9W76Eh08Z16kiz2I.roa
Signing time: Thu 14 Jul 2022 10:11:10 +0000
ROA not before: Thu 14 Jul 2022 10:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.32.0/22 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.87.116.0/22 maxlen: 24
194.135.124.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:30:de:90:ef:4a:b2:5f:e7:60:96:ab:31:7e:2b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 14 10:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d53e4530f48e68f6fd5bbe84874f19d7a922cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:84:d3:e9:71:8a:1d:34:4e:d5:aa:74:74:
af:90:3d:33:cc:67:22:cf:a4:d3:55:79:43:7e:9d:
f6:be:a3:81:19:c3:b6:9c:84:cd:93:b3:b5:a3:a3:
55:aa:b0:9c:b7:40:cb:39:37:34:48:44:44:a8:d4:
14:16:c5:0d:36:a0:86:43:34:2b:a8:bf:9a:14:7a:
19:f9:35:8d:0e:6c:eb:20:b7:1b:61:0d:8e:50:28:
c4:6c:d4:92:c9:48:8b:4f:f9:33:7e:0a:35:19:6d:
38:c4:27:0b:80:ba:6c:6c:ee:b6:5c:7d:ed:d9:d3:
af:bb:f6:72:45:ea:04:c2:15:75:1e:a0:67:b5:6e:
6b:40:4f:b3:b7:90:01:fe:f8:df:7f:95:3a:aa:1a:
b6:94:05:73:b8:3d:50:2f:c8:7c:d5:c1:29:3b:d6:
a9:71:99:7e:4b:c5:a4:52:ce:e3:29:fb:79:a5:df:
3a:f7:c7:6b:5b:0b:52:e1:55:b0:e3:e6:f6:b3:9c:
8b:28:29:03:f5:60:1d:31:16:e0:f0:a6:55:8f:31:
02:8d:eb:9a:29:0a:78:66:dd:67:89:03:12:25:74:
c1:77:57:23:49:14:0f:b1:99:c1:c2:14:71:48:58:
33:d5:e5:9d:92:9e:e5:c0:29:2b:c8:9a:ae:38:c4:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3E:45:30:F4:8E:68:F6:FD:5B:BE:84:87:4F:19:D7:A9:22:CF:62
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1T5FMPSOaPb9W76Eh08Z16kiz2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.203.0/24
194.87.1.0/24
194.87.16.0/24
194.87.32.0/22
194.87.64.0/24
194.87.116.0/22
194.87.166.0/24
194.87.179.0/24
194.135.23.0/24
194.135.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cc:8c:b3:04:3f:ee:f0:3f:7f:80:36:e1:3f:43:bc:d0:89:
51:8f:a8:9c:45:64:24:40:53:db:1f:05:56:1f:fa:bd:03:77:
1c:31:1f:40:5e:48:9d:b3:ec:68:29:12:05:88:2a:ce:7c:2e:
48:b8:fc:c8:2e:15:6e:86:ba:fb:16:64:75:a8:2a:2e:21:94:
3e:dd:2e:22:c7:59:b9:3c:f6:7a:9e:85:97:87:84:e2:9c:86:
2b:b4:0c:4e:48:5a:a8:01:f2:3f:56:ae:e0:6d:6d:43:f4:99:
35:72:2a:ab:32:c7:09:e5:2e:52:53:98:06:4a:c6:13:04:4a:
28:93:2e:13:12:76:e3:6b:a2:b0:32:cd:dc:52:8b:32:be:e9:
3e:50:3d:a6:86:fd:13:02:7d:28:20:b3:c6:af:8c:04:40:aa:
d1:69:b3:14:b9:82:84:38:a8:3e:9c:c0:10:bc:cc:9c:30:8e:
87:4f:1f:15:56:46:9c:16:44:f6:73:44:a3:63:50:19:ad:22:
7d:aa:79:33:7d:ce:13:4b:c7:53:1f:b1:93:34:32:c5:29:a1:
6e:d8:56:16:16:b0:a8:a3:2e:ff:ee:b8:6f:c8:71:e6:8b:d1:
33:db:cf:d1:10:2d:26:d3:57:1e:ea:bc:4b:3f:e3:c3:74:5a:
71:ec:03:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org