Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E18OvQpe8IgbiBP7e8Mjq_-0jEA.roa
File: E18OvQpe8IgbiBP7e8Mjq_-0jEA.roa (raw, json)
Hash identifier: UpV5itP0yHH46vfQ8/Kg4U2lLMLStNEPQQvkL5qZgmo=
Subject key identifier: 13:5F:0E:BD:0A:5E:F0:88:1B:88:13:FB:7B:C3:23:AB:FF:B4:8C:40
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01831BFE7326072BCFE67B98F187EA6F2E5D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E18OvQpe8IgbiBP7e8Mjq_-0jEA.roa
Signing time: Thu 08 Sep 2022 07:26:43 +0000
ROA not before: Thu 08 Sep 2022 07:26:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.223.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1b:fe:73:26:07:2b:cf:e6:7b:98:f1:87:ea:6f:2e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 07:26:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=135f0ebd0a5ef0881b8813fb7bc323abffb48c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:de:ad:58:7e:10:4c:82:7b:9d:32:26:f9:
9a:d1:c1:27:15:c9:40:a0:cc:fa:b2:8d:d4:d6:60:
ec:93:bf:cc:63:23:9d:ce:c9:b8:c0:19:52:09:ba:
f5:35:7d:cc:ec:e6:2b:bd:49:b7:59:e9:1f:df:0c:
12:fc:a8:3f:5d:e7:4e:f9:10:27:a6:0f:81:f2:99:
42:fd:22:b0:34:54:92:1e:32:1d:7f:bc:67:10:9f:
23:53:63:87:5a:65:ec:a7:8c:7c:b3:5a:11:9d:67:
08:5f:94:d5:2d:66:9b:85:4b:75:98:b6:e4:67:ba:
c3:55:16:4a:4d:79:28:64:7a:13:ce:74:0a:5c:60:
cf:ab:a0:17:9c:3e:de:91:71:1e:00:6e:21:bd:69:
db:0d:04:18:ec:73:56:e3:61:04:8e:f1:72:73:a1:
2a:82:cc:14:85:86:02:63:e9:75:3d:d8:2e:ae:4e:
10:ed:68:fb:d8:65:42:87:c8:63:4c:b6:25:65:6c:
4f:05:2a:13:d7:e6:ea:e8:e9:38:d8:df:3e:a6:6d:
f5:99:24:7a:82:14:99:b6:70:fa:6e:e2:40:71:d6:
55:53:44:57:bb:f2:9a:29:02:f3:5d:23:7d:1d:c9:
ec:4d:09:75:61:da:c7:e0:a3:75:0f:06:a6:1a:51:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:0E:BD:0A:5E:F0:88:1B:88:13:FB:7B:C3:23:AB:FF:B4:8C:40
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E18OvQpe8IgbiBP7e8Mjq_-0jEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
194.87.118.0/24
194.87.160.0/24
194.87.187.0/24
194.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e6:4e:f8:f6:a6:38:2e:35:b6:fb:a8:79:95:7d:9c:ca:fa:
4b:a6:2a:79:22:7c:d2:b1:8a:1f:a9:b5:97:7a:8f:03:53:f2:
92:f5:45:bb:d4:4c:e1:90:5b:49:74:09:f2:63:1a:56:8a:a3:
44:d9:eb:83:00:d9:35:da:68:76:9b:18:66:d0:a2:7f:a2:d6:
fa:b5:a5:39:6c:11:8c:46:e9:af:84:cd:b6:bf:80:7e:56:41:
04:0b:33:4b:57:35:7b:e9:af:94:d4:63:62:99:01:38:a5:2c:
28:4c:2f:df:b1:47:95:62:7e:7a:08:7b:66:ca:af:3c:bf:f0:
dd:d4:8b:79:83:64:ce:ea:c4:6e:5c:68:b0:61:db:e9:6f:85:
a7:93:49:7f:e9:a6:05:a8:df:0c:b2:ee:1d:4c:d0:cd:63:aa:
e4:16:35:f4:c0:39:72:f8:68:47:21:99:62:c9:74:4d:82:8e:
f8:f0:40:ad:37:26:75:1f:41:72:c5:0a:b8:af:ef:94:da:4a:
24:f1:41:79:de:b3:e5:e4:db:bb:de:47:72:10:8b:70:b7:05:
91:4f:17:e8:df:f5:34:67:e9:2e:b9:11:cc:e5:82:b6:da:e2:
61:72:91:b9:43:99:db:84:ce:57:0a:6d:4c:f8:e8:17:a3:26:
94:0d:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org