Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3XcyWfYL4TLnMbF8urSGymkVn5Q.roa
File: 3XcyWfYL4TLnMbF8urSGymkVn5Q.roa (raw, json)
Hash identifier: +9DnbX5tO1NbpnuYKErsBnXuvQkDqJ2E9Ukldx9LYzA=
Subject key identifier: DD:77:32:59:F6:0B:E1:32:E7:31:B1:7C:BA:B4:86:CA:69:15:9F:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018475881601134A44703B037AF0A312B47F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3XcyWfYL4TLnMbF8urSGymkVn5Q.roa
Signing time: Mon 14 Nov 2022 09:46:03 +0000
ROA not before: Mon 14 Nov 2022 09:46:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203639
IP address blocks: 194.87.204.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:88:16:01:13:4a:44:70:3b:03:7a:f0:a3:12:b4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 14 09:46:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd773259f60be132e731b17cbab486ca69159f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:ed:80:a2:db:27:bb:16:2c:07:62:06:ff:
4a:3b:05:00:59:d4:24:1b:e3:b3:57:12:30:48:fd:
d0:bc:e0:f2:23:6b:c1:1f:b9:fc:2d:43:bf:1d:4d:
5f:4e:7e:44:9e:d9:82:a6:62:2c:ec:02:ee:0f:e6:
be:ab:be:11:0e:8f:7a:14:3f:62:c2:78:ec:72:5c:
4c:51:0d:19:48:15:2b:13:dd:41:93:60:6f:01:de:
51:fa:d1:a0:af:0b:85:de:79:31:b8:49:db:bf:ce:
3a:38:f4:54:d6:18:f0:24:d5:e5:db:2d:d2:bb:a0:
bf:d8:d4:ff:14:a5:5d:db:31:ea:3b:e5:65:ee:f2:
81:61:d0:f4:10:a5:be:83:7f:d1:4e:5f:81:8d:0a:
3c:02:7e:28:7c:77:7e:a4:2b:f1:8f:16:26:d1:db:
32:55:bf:60:14:00:b6:cc:bc:51:ea:ee:1d:85:6c:
9c:85:01:5b:73:83:e0:d9:a7:99:d2:8f:e9:aa:bb:
29:d1:54:87:ac:70:a6:70:6e:b2:5b:99:ac:39:e6:
69:46:4a:6b:d0:7d:68:93:be:0a:a7:00:14:76:c1:
89:ce:04:06:fa:08:9c:2a:94:c1:ee:04:4c:24:66:
9f:a5:ac:40:e7:96:03:4c:f7:8e:5f:ac:59:83:a8:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:32:59:F6:0B:E1:32:E7:31:B1:7C:BA:B4:86:CA:69:15:9F:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3XcyWfYL4TLnMbF8urSGymkVn5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.204.0/24
194.87.208.0/24
195.58.38.0/24
Signature Algorithm: sha256WithRSAEncryption
47:25:78:54:86:aa:04:31:39:39:27:f5:11:08:b3:8b:04:8d:
79:69:a2:c9:57:b2:44:71:df:fc:52:76:23:cc:b2:52:b9:ec:
d9:fd:ed:e2:40:72:2e:84:0c:f8:24:36:8b:86:21:fe:76:60:
3e:cf:5b:d1:67:2b:f5:1a:e6:33:17:15:2d:36:20:b8:0f:ec:
c0:03:f0:23:d6:74:62:46:00:95:a8:cb:46:66:2c:fe:1e:1c:
75:85:c4:a7:66:b8:f6:7b:82:74:77:99:48:06:c6:a1:32:3d:
8b:f9:ae:b7:32:99:26:6c:df:ae:b8:2e:10:18:e7:62:d0:4e:
8f:fe:7d:b9:f1:b2:65:7e:ff:ee:df:76:4a:17:16:3a:7d:de:
f3:f8:ee:25:f9:a1:fe:69:67:08:05:89:de:d7:a1:c4:76:df:
a3:4d:b1:f5:60:9d:6f:38:19:cd:f4:72:ce:ee:32:89:52:80:
ec:49:d4:12:91:5f:60:a4:3b:cf:83:d4:c6:f5:f0:51:fc:c4:
01:94:3c:79:c4:5a:7e:3e:8a:25:a4:d7:b0:35:e2:2f:d2:a5:
1c:d8:46:c0:f2:26:a8:5b:f7:20:7a:42:19:dd:0e:71:a0:b3:
f2:0b:47:1e:34:c9:a9:b0:ae:4d:8a:3c:d8:81:28:62:29:4f:
98:6a:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:55 2023 by rpki-client on console-fra.rpki-client.org