Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6XT4oUOneNoGZLPhdWybzMrVZGc.roa
File: 6XT4oUOneNoGZLPhdWybzMrVZGc.roa (raw, json)
Hash identifier: CMoP4CvZVG8OgZTZVeiH4hv1XY6njeIhHdOg0wMEd6U=
Subject key identifier: E9:74:F8:A1:43:A7:78:DA:06:64:B3:E1:75:6C:9B:CC:CA:D5:64:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01822F9189E72ED42F7343DB095CD933AD6E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6XT4oUOneNoGZLPhdWybzMrVZGc.roa
Signing time: Sun 24 Jul 2022 09:37:23 +0000
ROA not before: Sun 24 Jul 2022 09:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 212.193.30.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
194.87.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2f:91:89:e7:2e:d4:2f:73:43:db:09:5c:d9:33:ad:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 24 09:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e974f8a143a778da0664b3e1756c9bcccad56467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:dd:d4:ed:b6:df:c0:1d:46:14:d7:dc:72:
03:8f:90:9e:62:ac:8b:17:f6:ea:4d:6b:44:d4:23:
97:92:7d:5e:37:c9:8b:c8:36:55:ec:de:41:72:2a:
86:15:30:fb:b0:0c:4a:40:f1:18:64:9a:9c:0e:70:
52:a9:cd:18:87:fb:14:00:af:f0:8c:09:40:58:3e:
28:64:6a:9c:67:05:88:da:3b:03:38:ec:c3:16:05:
96:e7:93:de:e8:a6:a5:a6:74:78:c6:de:81:71:da:
79:ca:dc:54:6f:ba:c0:2d:21:ff:78:0e:0a:20:ee:
9e:66:7e:26:2b:51:9e:bd:3d:94:39:90:32:fd:06:
d0:5d:7f:f9:36:2d:3b:25:af:b0:37:cd:f6:be:ce:
b5:93:b9:fb:87:98:0c:71:b4:a0:e3:0f:4b:6c:1d:
31:97:0d:e5:f0:df:5c:5e:c8:2f:6c:81:0b:56:4c:
88:96:ff:8f:52:4a:7e:cf:74:36:33:74:f3:45:10:
30:c7:77:04:ae:65:ba:ba:1c:81:a6:8e:a9:a3:ae:
f2:55:bf:df:a5:0a:2b:08:3a:c5:24:6d:2a:cf:89:
00:6c:8a:73:4a:4a:cc:ea:20:a4:86:0d:c8:7f:2c:
83:78:9a:e0:b3:5d:4b:ab:90:0b:c2:72:26:f3:90:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:F8:A1:43:A7:78:DA:06:64:B3:E1:75:6C:9B:CC:CA:D5:64:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6XT4oUOneNoGZLPhdWybzMrVZGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.84.0/22
195.133.18.0/24
195.133.38.0/24
195.133.40.0/24
212.192.8.0/23
212.192.241.0/24
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
17:49:8f:7d:d2:8b:17:44:cd:4f:15:9c:ac:a4:df:5d:d9:65:
77:7e:3a:83:eb:e0:e7:b5:2b:f3:67:7b:73:a6:68:5e:e1:8d:
28:84:0b:dd:07:a2:6e:75:46:3e:fa:77:a5:18:cd:38:32:fc:
28:e9:f4:34:1c:f4:fe:b1:6a:1b:8d:e3:0f:ae:2c:81:35:99:
8d:b4:58:81:5f:77:c5:cc:11:53:89:a6:b9:5d:55:c7:9d:a7:
35:40:cb:cc:e5:bf:cd:0b:fd:c0:0c:b5:6e:16:0c:70:07:c1:
01:03:27:dd:73:e1:68:6c:ed:e2:82:ed:5e:4e:49:ce:1c:a5:
cc:6b:d1:3b:ba:7d:99:26:66:28:8b:bf:2a:6c:2f:c5:07:ce:
e3:ac:73:1b:38:62:8d:1b:57:79:c7:fa:e1:54:f7:51:76:b5:
9d:dd:19:08:10:4c:2b:94:fe:c4:87:e6:22:18:65:8e:0f:28:
05:42:52:43:63:19:d9:37:3a:6b:21:4a:0c:eb:66:d1:6f:e7:
6f:85:16:00:58:38:2d:54:c4:b3:3c:d9:1f:28:94:cd:32:9a:
7f:97:f1:82:b5:e1:4c:05:08:d3:dc:74:f4:8e:da:0a:b7:75:
fa:93:ca:8b:f3:c2:75:46:7c:1c:31:17:14:ca:48:6d:5d:c9:
71:14:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:56 2023 by rpki-client on console-fra.rpki-client.org