Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E9JKOO4gkywZjfNfqCjoxkoN6WE.roa
File: E9JKOO4gkywZjfNfqCjoxkoN6WE.roa (raw, json)
Hash identifier: zYOgA/6N1mB5eymIWxNDsXAZLccULs+bI6B9TAxqAOE=
Subject key identifier: 13:D2:4A:38:EE:20:93:2C:19:8D:F3:5F:A8:28:E8:C6:4A:0D:E9:61
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018495C5B74A1E0F69B310A8D34581E782B8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E9JKOO4gkywZjfNfqCjoxkoN6WE.roa
Signing time: Sun 20 Nov 2022 16:01:13 +0000
ROA not before: Sun 20 Nov 2022 16:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41745
IP address blocks: 194.87.219.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:95:c5:b7:4a:1e:0f:69:b3:10:a8:d3:45:81:e7:82:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 20 16:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13d24a38ee20932c198df35fa828e8c64a0de961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:fc:33:9d:6c:42:d0:11:f4:fc:ba:99:73:
18:60:8a:6b:d7:9e:12:f5:2f:3e:86:97:54:77:f3:
84:08:e8:3a:6a:60:bb:67:60:f2:bb:8c:3c:2a:72:
e9:64:35:36:56:a0:69:46:05:61:68:a5:0a:3e:11:
8d:50:4d:0b:52:e9:37:28:47:90:98:3c:fe:d0:65:
6f:95:48:84:ca:07:06:30:43:12:a2:9a:93:22:32:
99:7d:c4:f9:74:29:c6:21:2d:4e:00:c2:68:07:8b:
2b:6b:21:bc:fa:b4:24:8a:c8:ce:84:ae:4b:4b:d4:
83:ec:39:81:fd:dc:5c:46:e1:1e:84:47:a1:9e:93:
44:e9:05:b2:e6:55:12:e5:bc:73:2e:72:23:59:ad:
c9:f3:ee:a8:08:ef:b3:1e:d3:0d:ca:e1:f6:7b:1a:
28:00:40:cd:93:13:62:e0:2a:f4:4d:70:85:7f:b1:
c3:37:91:c8:f9:38:8c:7d:f9:25:eb:08:e8:59:f0:
ad:13:eb:79:9d:48:e2:d5:87:65:d6:19:7f:6f:75:
30:2e:c1:83:53:76:4a:29:db:b9:28:19:72:15:52:
54:19:e9:76:06:a5:0d:84:5e:ba:5e:4e:3c:c6:9e:
2c:35:0f:2d:3a:04:4b:a9:d1:cc:f3:c5:cc:0e:3c:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:4A:38:EE:20:93:2C:19:8D:F3:5F:A8:28:E8:C6:4A:0D:E9:61
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E9JKOO4gkywZjfNfqCjoxkoN6WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.82.0/24
194.87.219.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f9:ac:20:11:54:e6:2b:7e:29:70:6c:67:2c:fb:b6:74:7e:
a2:64:6e:ae:26:cd:18:47:38:16:01:ef:20:cd:57:c2:28:f7:
71:e3:20:94:da:22:93:71:4e:52:dc:e5:55:66:83:aa:86:a1:
77:bf:a5:d0:c2:1b:d2:f6:9f:21:65:44:6c:9c:d9:86:99:9e:
5f:d3:ff:61:4e:de:cb:fd:ac:93:72:91:8c:15:d6:ae:7c:1a:
b8:fd:ed:4f:4e:5b:2d:48:bc:70:42:a8:5c:01:8d:15:7f:0c:
a1:ea:95:20:d3:7a:74:f2:97:89:46:6e:49:24:fa:08:21:96:
12:6d:1b:e1:1c:22:65:cb:c9:9b:da:11:de:83:83:a5:62:f0:
92:3a:e7:5c:32:2f:cb:85:2a:c9:4e:6c:54:fc:3f:1d:61:ea:
3a:11:73:f1:b6:01:9d:81:d6:a9:04:8c:6e:a2:82:e0:ab:f0:
48:f3:48:7f:fd:03:ce:e7:88:34:8c:5e:c5:e6:a0:a9:5c:04:
12:23:99:02:b9:8c:34:cf:30:86:2a:0b:99:44:76:32:b6:13:
dc:c8:ce:5c:c2:a4:a9:5e:fe:f6:fd:c3:19:e1:66:8e:0d:2b:
9e:49:60:da:98:c2:ec:57:0f:21:75:19:47:b0:ba:a5:5e:b1:
a3:41:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:58 2023 by rpki-client on console-fra.rpki-client.org