Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/42SOLBHAvypDlcGguJ_Ah7o1wPI.roa
File: 42SOLBHAvypDlcGguJ_Ah7o1wPI.roa (raw, json)
Hash identifier: sE1NzF6RdUi9+gydUarQSQyIpQ9bHNTk6jbFNAI8YRo=
Subject key identifier: E3:64:8E:2C:11:C0:BF:2A:43:95:C1:A0:B8:9F:C0:87:BA:35:C0:F2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 10153AB0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/42SOLBHAvypDlcGguJ_Ah7o1wPI.roa
Signing time: Wed 25 May 2022 16:01:15 +0000
ROA not before: Wed 25 May 2022 16:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/23 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269826736 (0x10153ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 25 16:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3648e2c11c0bf2a4395c1a0b89fc087ba35c0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:6f:bc:d4:f1:95:d5:b8:1b:c7:e9:15:07:
c8:4d:a1:a1:ab:25:86:39:6f:8b:fa:13:a6:7d:de:
7a:3a:68:98:80:92:42:57:de:a3:9b:91:d4:a5:0f:
18:30:a3:43:ab:f0:f2:92:9a:9d:45:0b:1a:76:03:
5b:86:dd:0c:20:09:ad:5f:47:f0:c5:48:9c:c9:bd:
7b:0b:af:68:59:0c:45:5a:fe:11:10:cb:25:b8:f2:
de:a8:4c:51:13:9f:12:d2:ae:ef:78:92:70:06:2f:
49:aa:6c:42:3b:f3:ba:53:1a:16:85:1b:fd:7c:47:
4e:77:b2:c8:db:8d:3f:7a:f0:8b:9a:ef:27:a4:e7:
01:a0:9e:25:7f:4c:8b:12:f7:14:ea:7b:0a:25:a3:
e4:4b:50:74:cb:99:7b:1d:9b:56:e1:3b:78:5d:f0:
03:28:6c:f3:d9:6e:2f:18:c4:18:c3:b4:99:e1:21:
69:12:c9:a8:29:a8:4c:6b:98:bc:57:83:90:a9:08:
b0:04:9c:91:56:cf:e4:8d:6d:15:c7:9a:65:58:fe:
97:29:ee:2b:c7:68:65:3b:b5:58:4a:47:f1:70:21:
9e:29:3b:e6:5d:b8:ab:78:d0:bd:4c:76:8a:8a:bb:
cc:6f:bb:98:43:6d:5e:fe:a2:c3:61:f6:80:ff:ea:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:8E:2C:11:C0:BF:2A:43:95:C1:A0:B8:9F:C0:87:BA:35:C0:F2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/42SOLBHAvypDlcGguJ_Ah7o1wPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.89.0/24
193.124.93.0/24
193.124.95.0/24
193.124.202.0/23
194.58.60.0/24
194.87.7.0/24
194.87.16.0/24
194.87.64.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.226.0/24
194.135.23.0/24
195.58.52.0/24
195.133.81.0/24
212.192.10.0/23
Signature Algorithm: sha256WithRSAEncryption
51:a2:21:0e:98:2b:c2:1b:71:64:85:fc:f0:00:6c:c7:9d:d5:
98:5a:f1:bd:3b:32:65:64:1d:c3:61:1a:8b:d9:cc:fe:ab:20:
95:e5:1d:86:cc:85:1a:3f:4a:05:8b:c4:26:eb:3d:ce:a2:40:
f8:c4:0a:08:c4:5a:5e:2f:63:00:78:eb:a6:df:55:eb:b1:98:
5b:48:1f:49:77:b8:8d:7c:e5:b3:cf:a4:b7:64:fa:0e:06:fc:
1d:86:97:c1:10:26:27:29:9d:d2:ce:c0:87:b4:5d:12:f2:49:
f1:e0:a7:45:38:ce:ed:b9:54:5e:47:48:81:08:56:27:a5:f9:
95:5a:98:24:90:39:6c:67:07:6a:86:5e:a3:d1:c7:c0:83:3f:
ed:c5:75:9a:45:eb:d4:f3:5d:6a:37:47:ad:ce:2d:36:9d:ad:
bb:c3:9e:8b:a8:66:21:8f:93:48:d2:f6:0f:9d:2a:1a:0a:b8:
9e:fc:cd:41:3b:53:5b:fb:76:a9:94:2c:8e:42:12:cf:16:05:
67:a1:13:c5:ca:5b:7a:5a:55:9d:92:c3:5b:1c:79:51:89:07:
cb:17:a1:31:e4:c2:2c:be:1e:d0:f2:c5:98:71:5e:54:8f:47:
2d:04:15:22:d5:b5:6b:f1:8a:00:b3:81:59:2a:0d:13:a0:d8:
45:f8:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org