Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CPpBeb6Vihfm9UyF0qpmiuiHn8g.roa
File: CPpBeb6Vihfm9UyF0qpmiuiHn8g.roa (raw, json)
Hash identifier: FYF9kePN3P2P4vJ0bifrHZewO5ojpYyVUI1XfJopLA8=
Subject key identifier: 08:FA:41:79:BE:95:8A:17:E6:F5:4C:85:D2:AA:66:8A:E8:87:9F:C8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018458D685DB1D1798870FF5D08EE2D05C06
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CPpBeb6Vihfm9UyF0qpmiuiHn8g.roa
Signing time: Tue 08 Nov 2022 20:02:44 +0000
ROA not before: Tue 08 Nov 2022 20:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:58:d6:85:db:1d:17:98:87:0f:f5:d0:8e:e2:d0:5c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 8 20:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08fa4179be958a17e6f54c85d2aa668ae8879fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:f2:df:3c:08:dd:26:db:a0:a8:a7:b4:07:
bf:5f:29:d3:68:d2:2b:51:65:e9:48:e2:b8:17:f9:
55:25:31:c3:dc:0b:1a:0b:5c:34:94:84:d9:78:1a:
76:fb:b7:2e:a3:fb:9c:fa:d2:cf:10:11:c8:83:e7:
be:5a:be:da:8d:94:a1:6b:c1:01:b1:f2:a1:42:f2:
ba:6e:fd:a5:d6:8f:3a:5f:62:80:bc:4b:fd:1f:cc:
de:f6:35:71:49:a0:65:32:42:75:e4:b1:f7:33:d1:
8d:7b:c7:74:26:e8:28:bb:b0:3a:a8:cb:ff:6c:7d:
0d:25:f1:45:27:9f:52:af:4c:da:45:7c:d5:37:34:
e4:e3:7f:ee:58:9d:78:9b:11:08:6a:ca:d7:b3:dc:
13:d0:2c:ea:77:fc:d0:e8:17:30:86:3f:4f:76:8c:
a9:4e:42:3a:e4:0f:16:43:7a:e9:05:df:65:bf:7a:
e9:ea:c2:c8:6a:5b:bb:02:b7:13:ce:eb:75:80:69:
70:4d:68:2e:bd:bc:dd:90:ed:23:a2:2b:48:00:43:
5f:6f:e6:1c:6f:63:40:e4:4c:bf:ce:d7:0b:74:6d:
e9:c0:4d:5f:a4:e5:a7:de:5b:18:3e:ad:f8:fd:69:
b7:eb:31:5c:43:3b:28:bf:98:b8:06:f7:0b:2a:5f:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FA:41:79:BE:95:8A:17:E6:F5:4C:85:D2:AA:66:8A:E8:87:9F:C8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CPpBeb6Vihfm9UyF0qpmiuiHn8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
193.124.16.0/24
193.124.47.0/24
193.124.125.0/24
193.124.201.0/24
194.58.45.0/24
194.87.37.0/24
194.87.126.0/24
194.87.162.0/24
194.87.207.0/24
195.58.63.0/24
195.133.73.0/24
195.133.195.0/24
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
48:af:69:27:2e:24:4e:f8:fd:aa:9b:98:70:d7:83:33:75:98:
f4:ab:72:41:4d:36:78:07:c6:9a:aa:7a:f7:0f:77:5c:92:8d:
15:02:b9:e4:88:55:29:dc:80:12:f2:6f:cc:26:89:ab:d8:af:
81:7a:69:b0:1b:7a:77:e1:33:e5:5a:0b:64:26:eb:b0:7c:34:
39:1b:e9:6d:d2:95:6e:bb:93:d7:f8:24:59:53:e7:63:67:cc:
e6:ca:24:37:3a:34:43:2f:2a:bd:ee:c3:bd:40:d1:19:f5:ac:
2e:2c:7b:6e:f8:46:92:57:78:58:37:18:11:61:0a:c4:18:e0:
19:10:e6:42:8d:c2:b6:02:ec:e0:94:f1:98:28:83:de:25:f0:
c6:2a:ed:5a:9d:9a:4d:0b:40:c7:36:53:b4:a7:cd:ae:e8:c0:
2e:ce:6c:ba:f3:05:b5:7a:9e:80:02:b1:59:c0:13:15:54:73:
00:66:e9:65:c8:3f:30:11:db:10:9d:24:06:41:38:04:4f:5a:
1c:ab:b7:28:dd:be:fe:16:d0:bb:bc:54:88:7d:41:37:72:c0:
d0:ae:e4:8e:cd:ff:bf:9b:fd:bf:7d:e9:15:ea:b2:e1:c7:6d:
6f:76:65:ee:bf:06:f9:85:ac:90:fe:1c:06:f4:06:38:96:88:
f2:ba:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:52 2023 by rpki-client on console-ams.rpki-client.org