Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2aA6CI4f_yEsOzaYYzlO7VH3NSs.roa
File: 2aA6CI4f_yEsOzaYYzlO7VH3NSs.roa (raw, json)
Hash identifier: mdMxIUmaMoeBtXNZ8SeWPN/SYL1j9eHAEwgt32eVh8w=
Subject key identifier: D9:A0:3A:08:8E:1F:FF:21:2C:3B:36:98:63:39:4E:ED:51:F7:35:2B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01853DC84E04A4B976145C4851002099B511
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2aA6CI4f_yEsOzaYYzlO7VH3NSs.roa
Signing time: Fri 23 Dec 2022 07:00:15 +0000
ROA not before: Fri 23 Dec 2022 07:00:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 194.87.114.0/24 maxlen: 24
194.87.132.0/22 maxlen: 24
212.192.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3d:c8:4e:04:a4:b9:76:14:5c:48:51:00:20:99:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 23 07:00:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9a03a088e1fff212c3b369863394eed51f7352b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:29:ff:f4:47:b8:c7:5d:36:ec:e1:bb:78:
bc:c1:41:05:00:63:fd:c1:6d:18:27:fe:f1:9d:f0:
ad:ab:df:92:0a:65:c5:8d:ca:4b:01:cd:83:99:c3:
dd:8a:f1:9b:6a:dd:9b:04:25:d7:93:c6:da:18:70:
83:01:40:59:94:aa:7a:d7:d8:95:f8:61:02:31:84:
ec:c7:de:b2:bf:66:de:36:ca:6d:28:0e:17:51:4d:
87:c8:24:e7:18:e3:79:e6:21:72:d8:0a:a4:70:90:
69:0b:3e:a1:6b:b3:4c:a9:06:4f:95:93:90:a5:43:
79:f5:9b:99:7c:4c:d3:56:ee:b7:45:09:93:46:57:
87:04:b9:d7:4e:53:7c:17:e5:38:6b:06:83:48:ea:
29:ba:9d:56:75:b0:d2:1a:91:01:20:9c:0e:e2:ff:
e2:e3:d4:3b:5b:ee:a3:a2:de:87:ef:c9:38:c3:5b:
7d:c1:9b:0e:06:04:c4:a7:12:ce:de:78:a1:2e:78:
c9:2c:04:1f:a2:cb:f9:49:be:25:c5:30:ff:25:cb:
69:d7:01:be:9e:6c:87:dc:b8:6f:be:82:9f:6e:e8:
16:a4:97:fd:d8:79:89:45:c2:03:97:83:fd:de:a0:
d6:ec:4f:10:50:7c:40:7e:41:91:70:7b:83:42:b0:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:3A:08:8E:1F:FF:21:2C:3B:36:98:63:39:4E:ED:51:F7:35:2B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2aA6CI4f_yEsOzaYYzlO7VH3NSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.114.0/24
194.87.132.0/22
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:72:7c:1b:39:49:d6:75:f5:82:ce:32:32:86:7c:d7:f3:58:
75:61:70:66:40:33:58:9c:8f:74:f9:f0:89:eb:af:04:4c:99:
d9:2c:03:ff:b9:6d:49:31:a4:a3:1c:0a:93:b2:e6:fc:c8:97:
cb:3d:64:6f:4e:9f:62:ae:40:8b:94:af:44:17:36:06:44:b7:
8c:b1:e3:2c:59:55:31:ce:8a:c6:07:f2:eb:14:ff:e8:6c:89:
1e:76:04:e8:2a:d1:18:ef:5b:b2:aa:17:77:e2:b4:d3:28:4e:
71:3d:4a:95:f8:27:ad:a8:2c:d1:4d:8f:56:61:9e:77:6d:c4:
5e:16:04:4b:b0:84:3b:1c:6c:06:a6:9f:67:ee:fb:9e:c7:8c:
c3:13:6b:4f:d9:35:e2:2d:42:44:c2:02:1e:c7:17:5f:5b:d3:
b3:a0:fb:e5:fb:f3:c3:0d:14:4c:0b:bf:9e:f2:d0:2f:ce:25:
84:4c:04:4b:e9:6e:21:bf:a6:8f:eb:04:a5:1f:1d:b4:b0:17:
46:8f:2d:2e:68:51:39:fd:e0:5b:8f:a1:01:48:95:b5:dc:50:
61:07:29:53:9c:98:8f:3c:16:07:d6:36:1c:35:5d:4d:61:7f:
5d:f8:b3:1a:8a:0d:18:53:4d:74:99:41:bc:ea:0e:6c:85:6b:
8f:f5:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org