Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CVjCKee6IBY7XIsRgED4nYXHfZo.roa
File: CVjCKee6IBY7XIsRgED4nYXHfZo.roa (raw, json)
Hash identifier: 8FJU8u2YBGyJ5BHVwvBI351QoaPLwTBfPkO9a5yYuuQ=
Subject key identifier: 09:58:C2:29:E7:BA:20:16:3B:5C:8B:11:80:40:F8:9D:85:C7:7D:9A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018568E39275932ED9A72F85CBA1C9B36B80
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CVjCKee6IBY7XIsRgED4nYXHfZo.roa
Signing time: Sat 31 Dec 2022 15:53:42 +0000
ROA not before: Sat 31 Dec 2022 15:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:68:e3:92:75:93:2e:d9:a7:2f:85:cb:a1:c9:b3:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 31 15:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0958c229e7ba20163b5c8b118040f89d85c77d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:ef:b5:8c:41:e4:81:44:ce:28:c2:24:cd:
83:3d:c6:f9:31:d1:28:ab:ce:5a:dc:4c:8d:b6:50:
f1:24:94:e0:89:1f:89:0d:ad:f9:e9:e7:1e:71:9a:
00:ed:fa:cb:e3:b0:e6:62:0b:a7:fc:ba:a0:e6:6d:
d3:ed:43:60:f2:46:c5:ec:72:52:ba:dc:82:64:41:
b9:0a:d0:29:ba:f1:24:61:a8:35:e6:e3:91:30:02:
b6:cd:75:83:35:db:6c:ff:8b:28:7e:18:4e:94:c2:
2e:10:b9:6a:f0:c3:e0:f2:92:1b:b4:cc:b2:18:60:
ba:0a:02:72:fc:9d:1a:9d:f6:46:53:10:b8:de:e6:
17:53:52:f5:35:38:94:4a:d6:24:ee:49:ab:de:d5:
c3:6f:09:20:95:fd:90:8e:7f:87:f0:44:09:70:f7:
a6:96:aa:bd:1b:09:fa:c5:22:92:8a:dc:88:44:bb:
6d:26:5e:35:8c:98:46:fa:ff:25:cd:6d:a1:c3:bb:
e2:ae:e1:ab:f1:f2:4f:63:01:c4:81:2a:51:e8:44:
85:7d:42:fb:0a:56:be:8d:ac:c7:6f:ea:d2:46:cf:
48:86:86:79:7f:72:a3:cb:30:89:83:db:37:a3:51:
1b:f9:17:2a:d9:ca:61:c4:a4:bf:78:e0:f8:61:a1:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:C2:29:E7:BA:20:16:3B:5C:8B:11:80:40:F8:9D:85:C7:7D:9A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CVjCKee6IBY7XIsRgED4nYXHfZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.58.43.0/24
194.58.46.0/24
194.87.64.0/24
194.87.108.0/24
194.87.161.0/24
194.87.207.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1d:e3:1a:f7:99:81:2d:e8:ba:6f:92:2d:62:e7:eb:c2:be:
2f:20:63:16:dd:d6:1e:42:93:6f:d8:c1:d9:0d:75:d4:9d:a3:
23:a0:19:41:7c:b0:06:bf:74:2e:bd:a6:e1:c3:83:09:c4:ac:
38:9f:db:11:c0:68:d1:ca:71:fa:7c:98:94:2a:ae:e8:92:3c:
e8:b7:c4:45:45:58:e4:6e:d0:c0:f6:f2:0a:7d:a4:df:2d:ff:
e3:12:50:ba:04:08:3a:f9:04:ba:b4:74:5a:8f:59:6d:58:a5:
d6:23:62:00:10:d3:71:61:fb:1e:6a:28:d9:1f:ba:c2:03:13:
1d:27:b3:17:07:c2:8b:ac:26:e2:b7:4e:84:2a:bf:45:8e:48:
62:bf:eb:b4:e0:a0:da:85:f1:59:7a:61:95:03:5c:53:c8:0e:
88:86:b0:5e:47:5d:f3:1e:97:f8:59:9d:0c:ea:7b:77:b5:36:
73:30:5c:f4:54:97:cd:8d:39:29:15:15:06:a5:86:34:79:54:
40:3d:5e:3b:36:b3:fc:37:08:6a:f0:19:06:83:fa:88:1d:40:
26:c1:e8:2f:b2:12:b5:a3:f3:f6:28:ab:43:7c:8e:ff:0f:d0:
65:4a:ec:d7:9b:f1:56:bd:8b:d1:97:44:1f:e5:31:8a:05:df:
de:1e:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:58 2023 by rpki-client on console-fra.rpki-client.org