Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7FFPBqC9ljhv4AiHW95Pdw8ir3s.roa
File: 7FFPBqC9ljhv4AiHW95Pdw8ir3s.roa (raw, json)
Hash identifier: 2JcEji9UE5uL0phOxDNHal4E5zFjwM9ThZfi2uv6uf8=
Subject key identifier: EC:51:4F:06:A0:BD:96:38:6F:E0:08:87:5B:DE:4F:77:0F:22:AF:7B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183A1D8D6E3758F276BAAB02556CE5B8F49
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7FFPBqC9ljhv4AiHW95Pdw8ir3s.roa
Signing time: Tue 04 Oct 2022 07:14:45 +0000
ROA not before: Tue 04 Oct 2022 07:14:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
195.133.12.0/22 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a1:d8:d6:e3:75:8f:27:6b:aa:b0:25:56:ce:5b:8f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 4 07:14:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec514f06a0bd96386fe008875bde4f770f22af7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:b6:a5:10:67:74:07:6c:c1:8d:02:c3:4a:
a6:5a:d0:3e:cb:82:99:d7:f8:8f:47:bf:73:fc:b8:
da:59:c7:5c:c9:51:3b:74:d5:80:74:f4:c6:be:c4:
f9:7b:2f:6a:75:7d:36:84:73:78:f8:78:ef:22:40:
7f:4b:c2:47:d0:06:b2:f5:05:ba:ac:d5:8a:91:20:
80:dc:4f:b7:17:c0:5b:d5:22:2e:45:a4:f6:e5:b0:
4e:c9:88:f2:e8:51:6e:e7:6a:9b:9e:d4:a6:23:d4:
18:12:39:33:79:91:fa:68:03:ea:8a:1d:28:2b:3a:
c2:fa:61:fb:ed:24:b4:ea:29:db:28:10:1b:a0:c2:
78:dc:43:56:37:3b:a9:d6:a2:0c:23:92:86:e1:73:
5e:32:ea:49:48:4a:1a:bb:91:21:ef:18:e6:60:de:
54:5d:44:2b:04:dc:f7:2b:61:4e:3b:9d:43:f1:06:
43:3e:ff:93:82:b9:a3:a9:65:81:a7:1d:30:4e:01:
10:4f:80:c7:8f:3e:bd:13:58:85:d5:41:f2:31:02:
04:f5:f3:e6:02:31:66:83:78:09:2d:7a:0f:e6:f5:
f0:62:23:5d:4e:3a:df:71:10:4c:d9:fa:e3:eb:29:
16:b8:4f:79:51:d3:71:1e:43:17:e0:57:d8:12:b6:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:4F:06:A0:BD:96:38:6F:E0:08:87:5B:DE:4F:77:0F:22:AF:7B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7FFPBqC9ljhv4AiHW95Pdw8ir3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.45.0/24
193.124.90.0/24
193.124.95.0/24
193.124.203.0/24
194.58.45.0/24
194.58.60.0/24
194.87.1.0/24
194.87.24.0/22
194.87.165.0/24
194.87.179.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
194.87.226.0/24
194.135.23.0/24
195.58.54.0/24
195.133.12.0/22
195.133.76.0/24
195.133.80.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
13:98:a0:d5:55:83:6d:db:40:33:01:85:8d:24:59:d7:f5:2e:
04:1f:a1:e8:1e:b1:ec:0f:6f:7e:88:4f:b7:bc:14:c1:50:73:
c5:7d:3a:d1:9a:b0:c5:b9:b4:8d:f2:1d:94:1c:74:18:8b:f9:
1c:9e:b2:ac:e1:1c:27:d6:9e:8b:c8:be:7b:b2:01:70:f2:cf:
c7:c8:d0:18:21:de:4a:2f:27:00:d8:19:8a:2f:d5:d0:db:2e:
da:9d:e6:dc:54:a7:23:e9:cf:9a:19:25:e7:72:a9:68:a4:10:
82:ec:51:33:66:56:fc:55:0d:a1:43:4d:b2:7a:95:44:70:92:
19:61:37:67:3c:bb:a0:3f:08:d8:e4:ec:bb:4f:e9:ed:f9:23:
ca:53:7a:b1:76:86:63:b6:f8:84:e2:09:f1:6a:ab:9d:ea:f0:
fe:c0:fe:c8:8f:5b:af:c4:d8:b3:17:43:26:1a:00:c1:04:b0:
24:93:e4:30:aa:55:09:da:ba:2a:17:b9:25:b2:8a:94:5d:0b:
46:e0:b7:1b:38:27:69:a8:a5:39:2a:6b:89:51:39:36:39:8e:
33:61:76:9f:80:36:a5:d9:b0:3c:5b:13:29:57:f3:b9:2f:ff:
50:c7:f2:1d:e9:eb:6b:6d:bb:ab:75:1e:96:b0:78:a9:6f:ef:
87:52:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:07 2024 by rpki-client on console-fra.rpki-client.org