Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1kkwHxfTccBj-uuxR7IPS5PjUHg.roa
File: 1kkwHxfTccBj-uuxR7IPS5PjUHg.roa (raw, json)
Hash identifier: X4fpKQ7CKIPW7PHx4SD8T5tBb5VGoglR85XPqfCnovA=
Subject key identifier: D6:49:30:1F:17:D3:71:C0:63:FA:EB:B1:47:B2:0F:4B:93:E3:50:78
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185302321989F7F3D34095AAED4CF9D5AB9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1kkwHxfTccBj-uuxR7IPS5PjUHg.roa
Signing time: Tue 20 Dec 2022 15:24:46 +0000
ROA not before: Tue 20 Dec 2022 15:24:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.87.118.0/23 maxlen: 24
194.135.32.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:23:21:98:9f:7f:3d:34:09:5a:ae:d4:cf:9d:5a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 15:24:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d649301f17d371c063faebb147b20f4b93e35078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:8f:99:fc:e5:81:d4:9d:5c:4e:6c:4f:02:
fd:b1:5f:68:52:67:c9:9b:b3:0d:d5:96:83:e6:ba:
2d:8a:e7:03:2c:39:88:7d:dc:86:f6:66:d4:0d:c6:
92:e2:f7:63:b2:5b:78:1f:a5:53:7f:55:cd:ca:70:
4a:2b:70:ec:04:0d:9e:a9:50:4f:c2:93:59:9d:8c:
d2:45:98:40:9f:45:37:ef:18:8b:59:b3:64:d9:dc:
f5:55:36:38:7c:a4:85:f8:58:8c:6a:f2:05:48:4b:
dc:91:7d:68:f4:92:85:e7:7c:87:fa:7c:62:d3:51:
f5:ef:88:23:90:9e:81:9e:ba:88:e3:d1:35:d1:6d:
1a:b8:89:56:10:ff:51:e9:6a:9e:fb:d0:50:63:cd:
6b:02:61:9c:c2:1f:03:e6:22:a1:97:2f:b1:ed:2d:
05:f2:d7:1b:e3:6e:b3:1f:69:03:f7:73:8e:8b:b8:
ca:8d:8e:59:10:90:d9:84:8f:91:bc:42:06:12:9b:
98:02:88:de:09:db:05:39:03:06:80:37:c2:6d:e5:
a5:c0:13:a4:a4:c9:f6:50:8b:c3:a5:6f:27:d5:c3:
8b:64:26:4e:45:2f:a1:a5:a7:06:03:02:7c:5d:7f:
8d:46:5d:48:aa:b6:06:79:2f:34:65:5c:03:59:e4:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:30:1F:17:D3:71:C0:63:FA:EB:B1:47:B2:0F:4B:93:E3:50:78
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1kkwHxfTccBj-uuxR7IPS5PjUHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
194.87.118.0/23
194.135.32.0/24
195.133.25.0-195.133.27.255
195.133.59.0/24
212.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
25:65:26:b4:73:5f:fe:73:20:1d:22:7e:50:25:d8:02:7d:a7:
b4:00:57:b0:b3:ea:d2:e9:ed:81:15:48:07:f7:67:5d:56:4b:
7e:01:e2:c4:8f:0c:a2:f3:9b:07:23:a8:e2:69:2d:f1:e8:0a:
5b:16:39:24:26:95:ef:b9:9e:ca:b2:54:91:86:47:ec:fb:67:
b2:c0:0c:cd:2f:41:b1:15:7b:25:91:9d:3e:3d:34:6b:f6:59:
f0:a7:50:ed:b6:3b:b4:b9:5b:a6:bf:07:c6:9d:a9:c1:b2:1b:
89:b7:ee:6a:15:c7:ff:4a:1b:79:92:ec:b0:15:14:10:79:e3:
77:93:7f:58:e5:0c:54:8b:8b:2c:ee:a2:9c:f8:d8:13:b3:ad:
b2:9c:32:b4:50:e9:48:d4:af:5d:75:1e:5f:69:b1:b2:5d:e3:
c8:e5:fe:ad:08:a3:59:aa:bc:22:1e:e1:71:b2:fc:36:ee:0a:
f6:e6:39:68:f2:55:73:67:42:6a:ae:26:d3:b7:c5:91:09:b1:
90:8f:56:33:63:5d:67:f2:c2:bb:c7:3c:24:99:1a:0f:b8:8d:
4b:fb:77:0f:96:0c:32:95:7b:18:64:1e:40:6b:4e:e3:a2:06:
91:d7:fa:5d:92:2d:fc:c5:66:91:b0:e3:61:ff:23:7f:f6:e5:
ca:47:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:54 2023 by rpki-client on console-fra.rpki-client.org