Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E-V9W3pNp8Q6-Uxf3AUE8g-ln4k.roa
File: E-V9W3pNp8Q6-Uxf3AUE8g-ln4k.roa (raw, json)
Hash identifier: t/QmkF9KBqmcjy9GkSyQfAzDeEAtb+J3a3JEgwnukUk=
Subject key identifier: 13:E5:7D:5B:7A:4D:A7:C4:3A:F9:4C:5F:DC:05:04:F2:0F:A5:9F:89
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F8F97F2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E-V9W3pNp8Q6-Uxf3AUE8g-ln4k.roa
Signing time: Wed 27 Apr 2022 08:16:17 +0000
ROA not before: Wed 27 Apr 2022 08:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.193.24.0/22 maxlen: 24
193.124.224.0/23 maxlen: 23
193.124.226.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.87.32.0/22 maxlen: 24
195.133.22.0/24 maxlen: 24
212.192.16.0/21 maxlen: 24
195.58.56.0/21 maxlen: 24
194.87.192.0/22 maxlen: 22
212.193.4.0/22 maxlen: 24
212.193.8.0/22 maxlen: 24
194.87.116.0/22 maxlen: 24
194.87.124.0/22 maxlen: 24
194.87.120.0/22 maxlen: 24
212.192.208.0/22 maxlen: 24
194.87.41.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261068786 (0xf8f97f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 27 08:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13e57d5b7a4da7c43af94c5fdc0504f20fa59f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:10:4d:04:c9:fe:eb:0a:1f:15:60:b5:db:
32:8f:b3:71:e6:ec:b9:5a:e9:a8:66:b4:4c:75:59:
63:d7:0e:16:ce:c9:eb:62:b8:b0:3c:67:51:7d:a9:
f3:51:af:b1:d5:b0:7b:e8:f2:45:86:b4:9f:d1:47:
87:c1:e3:bb:51:c2:ff:7e:cd:db:ee:3f:95:ba:60:
1a:6d:b5:d3:13:ad:bf:52:2e:e8:2f:57:fb:51:27:
85:65:49:74:55:b2:93:4f:96:96:94:75:dc:9d:c3:
8f:f3:6f:89:6f:7f:d2:4c:42:c1:91:b1:21:48:4b:
aa:a5:81:e8:35:d8:06:58:57:e9:3c:2f:08:d3:e1:
8a:a5:15:85:08:bd:9c:b0:08:82:67:61:00:12:d4:
bb:a3:28:1f:37:e1:a1:9d:bb:d3:62:58:58:ae:c8:
ce:28:36:ef:44:8e:d0:b3:e6:75:3d:c7:e5:36:cf:
78:33:29:b2:aa:76:5f:54:29:4f:2d:0c:9a:aa:53:
54:63:8e:0c:83:93:e1:12:f0:e2:ee:b7:96:14:b2:
a5:b5:e5:ad:6f:85:f5:43:22:2b:88:3a:05:69:da:
c4:f3:e3:67:af:aa:0d:33:29:66:2c:61:fb:2c:52:
5e:1e:c5:95:5a:46:e5:6f:77:c0:cd:e5:67:4b:44:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:7D:5B:7A:4D:A7:C4:3A:F9:4C:5F:DC:05:04:F2:0F:A5:9F:89
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E-V9W3pNp8Q6-Uxf3AUE8g-ln4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.49.0/24
193.124.224.0-193.124.226.255
194.87.32.0/22
194.87.41.0/24
194.87.61.0/24
194.87.116.0-194.87.127.255
194.87.192.0/22
194.135.46.0/24
195.58.56.0/21
195.133.22.0/24
212.192.16.0/21
212.192.208.0/22
212.193.4.0-212.193.11.255
212.193.24.0/22
Signature Algorithm: sha256WithRSAEncryption
83:8e:aa:10:af:bf:d9:bf:24:2f:86:5c:47:a9:4e:15:19:15:
3f:4f:e8:bd:48:a6:36:36:39:e7:04:5c:2a:f1:d8:9a:62:82:
cf:9a:35:a3:99:fa:7d:d0:94:05:c7:82:08:f0:ca:d4:e0:72:
93:b0:41:54:9b:9c:4a:c2:14:21:65:85:d7:ed:69:2c:c5:b5:
0f:39:8f:5c:74:39:83:71:ad:9b:31:cd:4b:00:d5:93:39:e8:
c1:68:bf:bc:16:84:27:5a:fb:eb:ce:f2:ed:76:eb:34:31:07:
86:64:f9:48:81:94:cb:ec:9c:53:03:12:50:e2:39:24:ae:39:
04:04:27:83:89:7b:6b:fa:89:07:71:72:4a:cf:d7:df:a6:a4:
3e:56:dc:c5:95:6a:a5:71:94:e6:90:7a:1e:a6:1c:1c:79:35:
4b:08:db:d6:27:9b:58:40:4c:2c:2f:bb:13:7d:29:15:f5:f0:
22:c4:a3:86:90:b4:6d:da:24:ce:99:c7:c4:81:cf:f8:7e:1a:
0e:14:40:36:d4:b0:d0:e8:d3:1f:e6:a9:2c:b3:44:aa:08:24:
56:ef:5e:7f:04:d6:38:19:94:4b:f0:2e:a2:53:88:0e:6f:35:
bb:6a:0d:a7:e4:58:c5:17:e9:24:69:f5:49:eb:b5:e2:15:78:
6b:5d:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org