Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5s87KyFz2ykS1trCfPh_pWJernQ.roa
File: 5s87KyFz2ykS1trCfPh_pWJernQ.roa (raw, json)
Hash identifier: vOx3O+im6DZuazZl5bQ37uXkWAEjrcf4tlN/SQa8KUk=
Subject key identifier: E6:CF:3B:2B:21:73:DB:29:12:D6:DA:C2:7C:F8:7F:A5:62:5E:AE:74
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185298E645E0443C551AC5640CD90ECB395
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5s87KyFz2ykS1trCfPh_pWJernQ.roa
Signing time: Mon 19 Dec 2022 08:44:35 +0000
ROA not before: Mon 19 Dec 2022 08:44:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:8e:64:5e:04:43:c5:51:ac:56:40:cd:90:ec:b3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 19 08:44:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6cf3b2b2173db2912d6dac27cf87fa5625eae74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:8f:8b:17:00:dd:3c:63:db:16:f7:52:40:
a7:c9:b8:58:78:ba:1f:d7:b7:c5:f0:e9:43:06:e6:
38:e2:8e:b7:fc:c8:54:ee:27:2c:e5:d0:cf:c9:be:
f5:f2:1e:b5:0a:cb:70:a5:f8:91:90:a2:5c:18:8f:
c8:81:b6:20:82:c9:4a:df:10:08:c0:1e:ce:42:53:
74:4c:c7:27:a5:d6:7a:4a:4f:fc:5a:7c:26:80:9f:
6e:51:fe:b0:61:23:85:c8:d5:22:cd:15:28:0d:f9:
6e:a0:11:3d:7a:2d:9a:52:ae:98:3a:a1:41:d1:00:
4e:b6:4b:5d:e9:af:1c:a6:39:9a:9f:44:b9:3f:04:
4d:31:26:c8:62:69:95:3c:cf:91:58:19:ca:8c:a1:
a2:d0:1c:79:6c:85:0e:aa:b8:c9:4f:94:08:f0:0a:
77:c8:61:b4:65:df:07:95:2f:25:24:9b:ad:8e:54:
ce:c1:41:b4:86:8d:cd:f4:48:05:aa:63:e4:e4:00:
24:76:33:13:27:98:31:d9:a3:7b:60:47:e7:2d:ae:
8e:21:c3:bf:3f:c9:6f:c6:5e:13:01:4d:09:2b:d0:
68:76:ee:a9:b6:83:8b:12:5d:f8:2c:7b:35:47:84:
e6:c9:ff:d7:7f:b9:dd:c4:c3:ff:a2:6b:a5:7b:af:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:3B:2B:21:73:DB:29:12:D6:DA:C2:7C:F8:7F:A5:62:5E:AE:74
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5s87KyFz2ykS1trCfPh_pWJernQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0-62.76.226.255
192.124.180.0/24
192.124.183.0/24
193.124.18.0/24
193.124.45.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.58.46.0/24
194.87.2.0/24
194.87.10.0/24
194.87.122.0/24
194.87.124.0/23
194.87.170.0/24
194.87.200.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
195.133.193.0/24
212.192.1.0/24
212.192.5.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c9:23:af:78:46:cd:c6:a7:13:36:b2:41:3d:ab:5f:a6:08:
3e:17:6c:eb:3c:e0:17:81:c6:5f:9e:59:21:a6:12:ed:78:2a:
a1:1a:7c:b7:ea:2b:9a:67:a0:d1:40:a3:e9:ff:08:f1:0c:02:
f5:2a:6b:0e:73:de:66:f3:15:22:78:fa:8f:f4:39:25:d2:7f:
58:15:77:e2:bf:71:8e:79:16:ed:9a:a6:9a:c3:f3:81:6e:78:
c8:7b:e6:9a:ad:46:35:4d:e6:1e:b7:62:6d:09:27:66:52:1c:
6c:00:68:ba:a7:e1:b1:c8:2f:c8:b1:c2:1f:c5:cc:51:da:3a:
78:ac:58:18:e7:4b:08:23:35:a2:41:32:c5:64:05:36:80:0f:
f4:53:ee:cc:21:f7:69:da:4d:46:39:03:c7:d0:8b:b4:75:ec:
9f:54:90:5e:4b:aa:73:28:be:0e:ca:23:60:45:4b:df:b6:fb:
01:b2:50:03:df:a8:37:13:a8:62:b9:b3:a0:d2:0e:7d:bc:01:
15:51:10:c1:a7:93:95:34:74:a3:c6:2e:37:53:ae:d1:c0:3c:
09:17:e1:cc:4b:d4:b0:09:ac:ca:25:f4:00:12:d5:1a:10:b2:
e3:ca:4e:19:a8:9e:e7:63:eb:22:07:50:ea:f0:e9:b8:04:e6:
91:88:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org