Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CbRsdlnoouzcPDeTPF2oH7her3s.roa
File: CbRsdlnoouzcPDeTPF2oH7her3s.roa (raw, json)
Hash identifier: QWLc92hxs4iAeXI2BguJCTetwhnxfe+rzs1gNQMBsqk=
Subject key identifier: 09:B4:6C:76:59:E8:A2:EC:DC:3C:37:93:3C:5D:A8:1F:B8:5E:AF:7B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 109D8DB1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CbRsdlnoouzcPDeTPF2oH7her3s.roa
Signing time: Thu 30 Jun 2022 12:32:02 +0000
ROA not before: Thu 30 Jun 2022 12:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
193.124.124.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278760881 (0x109d8db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 30 12:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09b46c7659e8a2ecdc3c37933c5da81fb85eaf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:81:4f:0c:0e:76:31:fb:6e:6d:85:c3:56:
52:7f:a6:94:a2:5f:8c:4a:e0:bc:0f:2e:b8:d2:1d:
59:81:b4:20:a5:d0:fb:0e:6b:dc:86:ea:6a:dd:23:
74:e6:8c:e8:e3:8f:33:97:2b:c9:9c:92:8e:c3:c6:
51:fb:06:58:bc:d1:24:0e:76:4d:ee:c6:69:71:e3:
45:1b:5b:72:20:e9:a6:9b:89:8c:24:b1:bb:f7:62:
c3:b7:b2:d4:f0:d4:22:ba:f3:e5:56:18:e3:5c:c3:
76:7d:4f:86:bb:48:34:e1:e0:4a:0b:82:00:14:6b:
46:25:93:f9:fb:f2:72:80:46:bb:e0:9b:c8:66:76:
7e:70:ca:12:2b:7a:d7:94:02:14:3f:11:35:6f:cc:
48:11:98:7f:13:92:2d:34:d2:84:c1:18:d2:ae:c8:
7e:9c:3f:05:ea:7e:3e:4c:dd:f2:a4:8d:c4:fe:f2:
69:5f:3e:a1:bd:7d:86:b1:42:b2:36:58:46:95:c7:
7e:99:03:2c:c1:b6:18:1a:a0:42:a0:af:a6:c9:40:
5a:53:d3:24:cc:78:52:5b:ac:d0:c2:91:7f:65:f4:
33:68:7c:fd:72:0f:b7:52:b5:1b:02:4a:4d:12:ce:
d4:ed:cb:fe:c5:32:bf:91:72:d9:a5:db:05:f1:35:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:6C:76:59:E8:A2:EC:DC:3C:37:93:3C:5D:A8:1F:B8:5E:AF:7B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CbRsdlnoouzcPDeTPF2oH7her3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.41.0/24
193.124.93.0/24
193.124.124.0/23
193.124.202.0/23
194.87.1.0/24
194.87.7.0/24
194.87.16.0/24
194.87.30.0/24
194.87.56.0/24
194.87.64.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.135.23.0/24
194.135.124.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4a:21:37:51:84:7d:5f:71:f9:5d:39:e8:7f:c8:cb:da:aa:
9b:88:b1:61:b5:96:8b:a7:ee:f2:e5:4d:ae:3a:84:8c:3f:87:
45:ae:9b:6a:fa:c0:a1:1d:b4:06:ac:34:5a:e8:e7:2f:04:58:
e4:63:25:54:67:58:2f:00:63:32:64:8b:ab:14:19:86:f3:b1:
40:90:f5:d5:d9:c1:99:86:8b:8d:26:0c:29:10:95:8a:3c:5d:
b8:00:66:b0:7f:de:29:5c:8f:78:9c:0b:ec:cd:cc:53:44:f9:
3c:00:22:ad:e2:cb:f9:49:41:b7:e3:7d:93:c2:c8:87:6f:57:
7f:03:0f:40:3b:69:a1:13:20:60:7e:49:d5:0b:f5:96:e0:dd:
f2:8e:f5:3f:ad:e0:d6:bc:5a:74:ca:ff:65:b1:68:0e:0b:22:
c4:dc:87:74:8c:20:cb:56:c6:1b:d6:91:8e:1b:81:a3:1f:65:
26:bb:66:7e:9e:2f:bc:80:97:3f:0b:ab:08:53:53:11:94:a7:
ad:b8:0b:27:22:5a:c2:9e:e3:9a:f0:ef:6c:08:39:a4:b6:c8:
e0:fd:c8:7d:ee:db:5d:b5:f4:15:66:6a:df:9d:de:f1:8e:da:
f9:7f:db:b9:f0:9e:79:6d:c8:2d:1b:05:76:4a:20:e0:c5:86:
4a:ec:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:58 2023 by rpki-client on console-fra.rpki-client.org