Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8Qpp_EoRo-7TuZRVGipkN2OiMN0.roa
File: 8Qpp_EoRo-7TuZRVGipkN2OiMN0.roa (raw, json)
Hash identifier: wDFe2K/bj3pp1UkZ0rzsV1mxRfDFomBMkFFcx7HYSqM=
Subject key identifier: F1:0A:69:FC:4A:11:A3:EE:D3:B9:94:55:1A:2A:64:37:63:A2:30:DD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01849A35F155B1AF2D9C1919FE5095AA09D9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8Qpp_EoRo-7TuZRVGipkN2OiMN0.roa
Signing time: Mon 21 Nov 2022 12:42:17 +0000
ROA not before: Mon 21 Nov 2022 12:42:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 194.87.202.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:35:f1:55:b1:af:2d:9c:19:19:fe:50:95:aa:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 21 12:42:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f10a69fc4a11a3eed3b994551a2a643763a230dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:0c:d9:51:ee:d4:ef:96:7d:21:16:aa:46:
48:63:c3:26:26:97:db:91:42:f7:3c:5e:88:53:50:
d0:02:94:02:4d:f7:61:53:3d:08:c7:ba:79:7d:b7:
58:63:aa:f5:cf:c9:c8:2b:b5:c5:f1:d1:d4:0b:52:
b0:ca:c8:63:3c:01:35:b7:3c:8f:e4:b8:de:65:7f:
d1:12:df:d9:01:e8:2c:46:ef:4c:92:4a:7f:c7:33:
5d:eb:5b:cc:f9:e8:b9:21:6a:80:e9:13:73:03:b0:
c2:a7:a8:3f:4a:a1:9b:39:0b:21:32:18:f9:73:75:
b9:42:67:06:d8:83:00:cc:37:87:62:6b:4b:5f:8a:
bd:7d:1f:61:f4:39:d4:06:0d:ef:3b:2b:fe:5c:17:
fd:66:96:59:23:f7:d0:d8:66:eb:c7:5a:ff:5e:5c:
35:a2:c1:98:95:0a:7a:8b:78:bf:0e:cf:ce:a8:bf:
52:ae:2b:d4:91:ce:33:3a:aa:51:1c:86:4e:b6:7e:
fd:ff:c8:cd:1d:f6:36:79:c5:67:21:fc:02:5d:5b:
e8:2b:35:9c:1c:a9:16:4d:1b:4f:61:a0:1c:9e:07:
9b:a4:45:ad:ec:d1:85:a2:85:b3:fc:0d:9b:7f:a0:
44:ef:66:86:72:1d:18:c1:94:81:fd:5a:3f:87:34:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0A:69:FC:4A:11:A3:EE:D3:B9:94:55:1A:2A:64:37:63:A2:30:DD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8Qpp_EoRo-7TuZRVGipkN2OiMN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.46.0/24
194.87.176.0/24
194.87.202.0/24
212.192.210.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ea:9f:2a:07:99:b9:91:a6:4b:9b:ab:55:01:f2:d4:f3:5f:
fa:d3:9e:c7:d9:3f:50:f0:3c:05:4f:31:0d:92:67:c3:7b:e1:
08:7b:52:a9:66:a9:a8:13:e6:81:e2:5d:19:50:ca:b5:58:9c:
a4:d7:a5:fa:8a:ed:c3:92:0a:5e:b4:0c:e5:56:0e:43:39:59:
e3:e4:5e:78:58:29:63:a9:b2:f8:b5:0c:01:6b:c7:8a:1a:dd:
d8:60:b8:2f:e5:e1:bc:79:8a:46:38:3b:ec:3b:b2:19:ef:10:
82:02:1c:b1:44:5e:7c:62:a0:81:96:a2:16:38:0d:8d:c9:9f:
57:95:93:11:3d:24:0d:1e:de:e5:8a:9f:d2:2c:19:6d:db:73:
bb:a3:a2:aa:43:a4:9c:f0:3c:43:a9:0c:bb:27:bf:a3:46:33:
8f:0a:3b:8e:98:fa:9c:04:d0:05:b5:43:65:b8:1d:a4:df:20:
97:14:6d:21:c8:13:b9:c3:2a:6a:2b:5c:6d:da:43:38:68:26:
3c:8e:0c:8e:94:da:7a:e2:d0:50:29:18:d0:43:a6:c8:5a:cf:
ae:b5:55:e5:70:0b:0c:2c:33:5b:aa:c2:b0:f5:f6:5c:7a:0f:
bf:14:57:4b:3d:50:73:5c:40:4e:8a:51:b7:18:38:ed:c4:0c:
61:ca:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org