Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8MPExkkJxNCUfqCZsUmcgWOIYrY.roa
File: 8MPExkkJxNCUfqCZsUmcgWOIYrY.roa (raw, json)
Hash identifier: FwwSmp2srzKbMYtMx3GVTZypyaGjBKf/UB3NsOf1fQo=
Subject key identifier: F0:C3:C4:C6:49:09:C4:D0:94:7E:A0:99:B1:49:9C:81:63:88:62:B6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01845B6F2FB74DA8D87022CD411BB694238A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8MPExkkJxNCUfqCZsUmcgWOIYrY.roa
Signing time: Wed 09 Nov 2022 08:08:44 +0000
ROA not before: Wed 09 Nov 2022 08:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:6f:2f:b7:4d:a8:d8:70:22:cd:41:1b:b6:94:23:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 9 08:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0c3c4c64909c4d0947ea099b1499c81638862b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2f:3c:73:17:2b:bb:d3:c1:ab:d7:3d:24:d2:
ea:93:2c:c0:df:76:9e:cb:9a:31:cb:08:e2:b0:f2:
7a:37:fe:2c:4a:6b:2a:8f:1f:51:80:6f:ca:8e:e5:
31:bb:a6:fa:d6:69:60:18:34:67:01:c5:55:aa:4f:
b0:7b:e5:d8:16:35:7b:7b:26:f0:84:df:93:7a:4f:
83:25:3a:c6:d1:91:35:c6:2b:90:11:12:6a:67:bc:
02:02:2b:25:b5:52:bf:d5:43:3e:9b:2d:7f:82:fc:
c8:d1:60:5f:39:f6:fc:df:25:d2:be:89:5c:dd:c4:
78:fd:2b:01:3c:53:59:6c:e9:11:fe:eb:dc:db:49:
2a:83:4d:fc:4d:97:f0:7b:ee:51:87:b4:5f:d0:11:
2a:46:97:27:51:b1:f3:ae:15:b3:86:4d:b6:0c:c2:
7b:6d:d7:63:61:ec:47:95:71:2a:2a:95:38:88:ad:
a5:74:28:fd:0b:a7:7a:09:e1:2b:1c:50:60:3b:d1:
ec:ac:f6:62:be:14:95:f9:d7:f6:4e:a4:14:94:bf:
5b:ce:d1:c4:6c:bb:17:52:c4:89:e3:cd:9e:a5:c0:
35:bb:dc:ce:3a:58:e8:f4:50:94:f4:b9:62:f9:74:
0b:7c:c3:e4:fc:b4:e3:7a:fd:94:34:15:5e:61:f0:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:C4:C6:49:09:C4:D0:94:7E:A0:99:B1:49:9C:81:63:88:62:B6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8MPExkkJxNCUfqCZsUmcgWOIYrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
194.87.38.0/24
194.87.73.0/24
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.178.0/24
194.135.23.0/24
195.58.35.0/24
195.133.0.0/24
195.133.35.0/24
212.192.31.0/24
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a3:0f:a8:45:dc:04:56:33:fb:18:d1:08:5b:ec:62:19:71:
79:3d:db:b1:b8:94:62:4b:83:d1:1b:08:31:8b:6f:5d:a8:e3:
c2:92:38:c7:cd:38:4b:4a:40:c2:50:4a:5e:57:1c:02:56:42:
56:60:ee:73:f0:80:e4:89:51:cc:47:20:a7:f4:0f:98:73:5e:
57:5e:d2:3b:6b:6b:9c:95:b3:29:27:4f:3c:a4:bc:06:3b:a9:
15:ff:bd:e2:52:7f:ef:9d:e9:f9:1f:57:0e:c8:7b:d0:ca:27:
ca:e0:28:a9:7f:ef:7b:86:76:b9:9c:49:b9:93:f5:b0:d8:04:
44:88:e6:20:3d:34:97:df:39:3c:d2:62:16:ea:d6:15:d3:6f:
ba:ac:12:2e:11:6c:66:c1:f0:8f:9a:c7:71:99:b6:4f:cb:6d:
6c:e1:af:08:dc:f1:6f:7c:3a:0e:1a:ae:30:e6:05:60:23:e5:
f9:cf:cf:88:9f:40:67:5b:4e:46:c2:3b:f5:b0:dc:ee:e4:b0:
1b:52:ab:c1:8a:07:72:42:7e:33:67:68:09:6d:ad:18:9d:26:
a5:06:89:cc:3b:d8:ca:f0:f3:1e:94:43:87:fb:27:a9:bc:65:
d8:ba:af:8f:0f:41:e0:be:f9:27:d6:36:97:5f:4b:fa:f3:d6:
f8:f3:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:56 2023 by rpki-client on console-fra.rpki-client.org