Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DprcUUzA93cS81SlW--6djQTH5M.roa
File: DprcUUzA93cS81SlW--6djQTH5M.roa (raw, json)
Hash identifier: oq2zkU1FXo1MEHDMgxBvrfMH8yhifdktBdYp656CXjE=
Subject key identifier: 0E:9A:DC:51:4C:C0:F7:77:12:F3:54:A5:5B:EF:BA:76:34:13:1F:93
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182588A7061A685E21774A82CEED0B13E04
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DprcUUzA93cS81SlW--6djQTH5M.roa
Signing time: Mon 01 Aug 2022 08:34:03 +0000
ROA not before: Mon 01 Aug 2022 08:34:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.32.0/22 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.87.116.0/22 maxlen: 24
194.87.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:8a:70:61:a6:85:e2:17:74:a8:2c:ee:d0:b1:3e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 1 08:34:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e9adc514cc0f77712f354a55befba7634131f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:68:a5:b4:64:1f:e0:d7:0a:a1:54:2c:c5:
ab:37:49:e6:2c:94:52:85:03:b7:45:38:80:4b:56:
25:47:98:bb:bf:57:c5:5b:4b:29:60:0b:0c:8a:43:
ab:24:fc:9a:3c:a2:e0:b3:61:85:b8:d2:cc:e5:ab:
09:bf:25:2e:92:50:5a:4f:c2:1d:9e:2a:71:8d:81:
57:37:1f:8a:d8:2d:47:38:dd:bf:84:48:8f:58:12:
ac:d2:93:83:6a:93:9d:b8:cd:ab:5e:39:ab:25:a9:
96:86:a4:06:52:be:28:cc:02:c6:df:4e:f2:76:0d:
af:8c:98:a7:a3:13:92:b0:ec:19:40:99:94:bc:ad:
1c:eb:15:b2:46:8e:1a:98:42:93:2b:22:b3:7e:3c:
94:25:3d:f5:31:cc:6f:7b:cc:26:e8:e9:6f:23:b1:
0c:7e:f2:81:a4:26:b9:72:0e:4c:b9:55:98:86:b2:
aa:b9:d1:8f:66:9b:92:c7:bb:ff:8c:66:91:99:08:
4f:44:59:f1:83:3c:75:70:f7:c9:43:ee:1e:f3:e0:
ef:1c:e3:01:f0:b6:61:7f:19:21:3c:48:71:63:0a:
aa:e7:24:46:58:dc:fe:8d:59:29:18:67:49:82:e8:
76:16:9d:0e:27:51:a8:ed:e6:52:73:6a:bc:e9:96:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:DC:51:4C:C0:F7:77:12:F3:54:A5:5B:EF:BA:76:34:13:1F:93
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DprcUUzA93cS81SlW--6djQTH5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.203.0/24
194.87.1.0/24
194.87.32.0/22
194.87.64.0/24
194.87.116.0/22
194.87.179.0/24
194.87.187.0/24
194.87.222.0/23
194.135.23.0/24
195.133.77.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
41:43:df:1e:fc:21:c2:54:fb:84:4b:9d:7d:b2:fa:dd:e5:9d:
f8:e1:75:3a:cd:a4:05:c1:28:5a:ef:d3:f1:67:45:45:f0:5b:
d4:a8:a1:2d:31:f9:dd:36:37:0e:ab:3c:50:9a:3f:a0:0d:c8:
ec:3c:34:ed:a7:72:20:3c:e0:a0:d2:da:ff:c5:75:9d:b3:97:
54:e7:17:59:18:4a:8c:60:23:1a:72:cf:ca:02:fb:b3:f3:03:
46:31:da:8e:f9:95:00:6c:3a:28:99:01:40:74:e7:3c:7b:75:
4c:3b:40:87:5d:d1:43:b9:e1:01:7d:51:9c:c6:8a:46:30:4d:
7d:05:c4:32:f8:30:92:09:6e:fb:97:9b:ac:f1:20:9b:d4:43:
a2:73:aa:c7:dd:25:81:8b:e4:d6:9c:cf:73:dc:1b:d6:f8:6b:
0b:c4:e4:36:a4:9f:bd:13:ea:b4:51:3a:ca:e2:f4:06:0b:e3:
8a:fe:6b:07:2e:8c:9d:05:29:42:a0:e5:2b:4a:4e:63:32:13:
a2:9c:bf:79:ad:ae:ae:9c:0b:53:81:67:c7:c9:5c:41:6f:d9:
70:b1:be:6a:a5:e4:16:2f:8b:66:aa:59:d0:20:9a:02:4c:92:
c2:64:66:f0:98:51:ce:63:c4:2e:fb:ab:9a:03:af:ec:b9:33:
2c:f4:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org