Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E-yRjxbc0olQAO5G4tbycYnKTwQ.roa
File: E-yRjxbc0olQAO5G4tbycYnKTwQ.roa (raw, json)
Hash identifier: FCuljcnP3RTmFACwHTyPC3VYWx1Uhe1iVEVFYJmxVPc=
Subject key identifier: 13:EC:91:8F:16:DC:D2:89:50:00:EE:46:E2:D6:F2:71:89:CA:4F:04
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183F9F6A160473503FEA77E41348D4E96BE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E-yRjxbc0olQAO5G4tbycYnKTwQ.roa
Signing time: Fri 21 Oct 2022 09:53:53 +0000
ROA not before: Fri 21 Oct 2022 09:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.200.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:f6:a1:60:47:35:03:fe:a7:7e:41:34:8d:4e:96:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 21 09:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13ec918f16dcd2895000ee46e2d6f27189ca4f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:a5:02:61:c2:07:7d:55:e8:cd:04:e3:26:
8f:68:86:c0:48:59:9a:c0:ff:53:f0:54:39:80:4e:
0b:6a:2f:e4:c4:f9:1e:a1:1f:55:65:5c:7b:8f:98:
08:17:96:03:e4:38:16:f5:d3:1f:64:1e:97:3d:01:
02:b0:9f:e5:5c:18:ee:11:35:67:05:d9:d0:4e:6b:
3a:e6:3d:39:3e:3f:94:31:9c:dc:f8:52:c4:01:3b:
3e:e3:22:67:9f:39:30:34:0e:29:64:26:15:97:cb:
79:e9:31:8a:0e:01:74:1f:2f:8b:ec:4c:1d:90:aa:
55:b4:07:eb:d6:2f:3b:e6:f0:43:61:6b:0c:fc:83:
42:42:81:6b:a0:b7:e5:3b:92:81:33:ab:c0:75:19:
9b:21:d3:7e:cd:ba:5e:cb:d4:51:2d:4e:d5:1a:08:
fe:b2:d0:9f:8c:7f:78:90:19:e3:f6:8d:7f:4f:73:
1b:e9:08:48:a5:98:11:dc:d5:6d:1a:ec:4e:58:dd:
78:da:8b:60:bc:77:3f:1d:2e:ed:98:6f:aa:44:e6:
d8:ba:8c:27:06:fc:bc:72:24:df:98:57:b0:16:a7:
55:54:48:a5:a0:1a:9b:20:56:4f:a4:82:57:4d:f7:
a9:49:4c:2b:9b:02:02:b1:8b:85:4f:78:91:d0:31:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:91:8F:16:DC:D2:89:50:00:EE:46:E2:D6:F2:71:89:CA:4F:04
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E-yRjxbc0olQAO5G4tbycYnKTwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
193.124.91.0/24
194.87.73.0/24
194.87.130.0/23
194.87.168.0/24
194.87.200.0/24
195.58.35.0/24
195.133.0.0/24
195.133.31.0/24
195.133.86.0/24
212.192.31.0/24
212.193.1.0/24
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
51:de:4a:ac:a8:49:2c:1c:9c:39:79:a8:33:89:22:32:71:23:
95:6a:10:2d:bd:76:ce:62:22:b0:85:73:6c:c0:f2:e8:9f:33:
15:95:fc:64:d0:aa:39:e4:c7:3e:5d:cd:a0:81:f2:be:f3:90:
04:c6:0b:70:86:e5:a4:a1:49:0c:cc:9f:e1:92:c2:6c:37:c4:
f8:5a:f5:2c:70:5c:dc:78:cc:c9:42:27:1c:76:11:bd:3a:51:
67:ce:c6:fb:04:30:de:7f:d7:83:bf:e6:11:5e:7b:26:35:45:
ac:be:2f:eb:9d:a9:10:20:5d:b1:1f:27:56:93:ff:87:a9:68:
af:00:1f:46:6d:d5:3c:06:0d:3f:61:3b:24:21:48:46:c0:5e:
93:2a:28:ea:5b:b8:1f:83:f5:46:0e:ee:90:01:c7:2a:16:63:
97:89:d2:39:16:c4:a3:fd:e8:ce:61:13:e1:09:0c:f0:d1:a1:
83:e6:69:39:3d:ba:4e:5e:93:80:b1:51:c1:78:90:12:b2:5d:
74:b0:09:a1:eb:bd:8e:6f:c4:c5:8c:ff:30:40:55:62:71:44:
34:33:1c:1a:bb:45:5f:1b:c6:f2:73:d0:c1:94:53:5c:74:80:
aa:ca:4c:8f:45:cc:8f:0a:88:f9:6e:d1:18:09:5f:5c:fe:c6:
23:57:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org