Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2Gh2DYU4yaDWGWD3yHjVDbFDDhc.roa
File: 2Gh2DYU4yaDWGWD3yHjVDbFDDhc.roa (raw, json)
Hash identifier: 1n5MRilAJUmca1WItCHoV6iIzRVfLLQjW2CVyfk1r8Y=
Subject key identifier: D8:68:76:0D:85:38:C9:A0:D6:19:60:F7:C8:78:D5:0D:B1:43:0E:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0EA64D6D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2Gh2DYU4yaDWGWD3yHjVDbFDDhc.roa
Signing time: Tue 08 Feb 2022 14:30:32 +0000
ROA not before: Tue 08 Feb 2022 14:30:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
195.133.16.0/22 maxlen: 24
195.133.37.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245779821 (0xea64d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 8 14:30:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d868760d8538c9a0d61960f7c878d50db1430e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:24:fc:73:d4:6b:2c:7a:fa:11:ff:19:3e:
68:e9:cf:c8:83:db:43:14:b1:26:b0:77:59:34:82:
9b:4d:19:b4:dc:45:2e:c6:ad:ba:fc:26:fc:6a:87:
c3:b9:32:39:86:d2:95:30:a1:22:4f:ec:6c:cc:46:
7d:59:bb:47:6b:ab:5d:0f:8a:d5:58:61:71:d9:9f:
1b:80:e3:67:48:f1:86:0b:ec:0e:71:73:1a:58:cd:
c3:69:8b:46:a7:6e:df:76:12:5f:a3:34:ce:c1:4b:
fb:ec:a4:d1:28:b3:a3:20:54:52:70:96:c1:89:4d:
7d:55:9e:72:fd:b3:77:29:ed:c5:0d:b0:0a:ef:92:
1d:bc:c5:e3:df:ea:df:45:b7:82:68:6c:44:a4:ba:
af:3d:d6:16:34:01:d9:96:13:51:75:b1:41:a7:1d:
1c:36:c3:51:5b:e2:ad:91:a7:ec:23:69:be:b2:ae:
60:e2:62:30:ed:67:4b:08:f4:c4:4b:6f:77:f1:40:
ac:b5:da:95:fb:88:24:70:bd:9c:3a:ec:cf:83:6a:
72:48:7d:c6:34:97:55:42:91:f9:9a:09:7b:97:0b:
4a:cc:84:b7:f4:64:8d:33:46:98:ae:72:fc:bf:75:
cd:98:1a:ab:20:14:de:50:18:b6:f4:30:ed:61:b1:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:68:76:0D:85:38:C9:A0:D6:19:60:F7:C8:78:D5:0D:B1:43:0E:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2Gh2DYU4yaDWGWD3yHjVDbFDDhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.227.0/24
194.85.249.0/24
194.85.251.0/24
194.87.24.0/22
195.133.16.0/22
195.133.37.0/24
195.133.39.0-195.133.43.255
212.192.240.0/24
212.192.242.0/23
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
60:55:97:24:80:0a:f4:fe:54:a1:d4:d8:71:7b:ef:c5:95:dc:
30:f1:63:9c:38:24:84:ea:6c:15:08:2e:d6:2e:58:5f:35:c9:
c9:c8:7b:1a:54:bd:06:d1:ce:8a:52:05:c6:6c:fd:c9:3d:4b:
6a:3c:54:88:4e:c5:40:ca:dc:95:20:3c:ae:5b:7e:1f:e4:d7:
9d:19:e0:cf:aa:41:e1:c1:5c:a8:5c:f4:17:1c:5f:98:7e:cb:
7e:6b:ad:25:c3:62:08:8e:a6:f5:a5:8e:0c:60:2a:5d:d6:32:
f3:97:40:64:fa:04:41:3d:ec:cd:4d:32:9e:9a:97:6b:18:59:
44:15:00:90:e4:64:b6:b8:9f:35:27:aa:38:c7:29:a9:2f:34:
d1:49:36:27:84:c1:61:02:c9:a8:ba:09:b3:4d:ed:44:a6:02:
3a:05:19:01:68:af:c0:17:72:1a:37:cc:37:a4:0d:24:a4:bb:
d8:84:27:a2:56:5a:5f:78:20:8e:5c:be:f4:16:28:90:1e:2a:
e0:28:a5:31:86:ce:8b:4f:a6:37:2a:59:44:c2:d5:fb:8b:7c:
5b:c0:2d:0a:27:36:59:60:db:3f:51:53:37:92:ee:1f:7a:7f:
2a:32:8b:7b:56:45:5f:66:c6:39:21:a2:2b:03:a8:c9:37:3d:
92:f8:ea:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org