Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EaSd10N3vTwLZNor2ofNdA6pCM8.roa
File: EaSd10N3vTwLZNor2ofNdA6pCM8.roa (raw, json)
Hash identifier: 9K+gCIcteqCT2rHdcIUoS2CmSQmH4S2Ap4EebT9v+j4=
Subject key identifier: 11:A4:9D:D7:43:77:BD:3C:0B:64:DA:2B:DA:87:CD:74:0E:A9:08:CF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018476267C858E55F195224BC984690DF1B4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EaSd10N3vTwLZNor2ofNdA6pCM8.roa
Signing time: Mon 14 Nov 2022 12:39:04 +0000
ROA not before: Mon 14 Nov 2022 12:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:26:7c:85:8e:55:f1:95:22:4b:c9:84:69:0d:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 14 12:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11a49dd74377bd3c0b64da2bda87cd740ea908cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:9b:d7:ba:d3:91:de:e5:da:d1:3c:f3:a8:
5f:14:5a:31:66:c2:0c:67:f2:4a:6e:32:8b:f3:37:
68:ce:4a:0d:df:5c:6e:66:5f:c7:ac:9b:d7:26:64:
d4:af:81:0d:7b:69:df:df:3d:c5:14:b2:4a:ca:6f:
81:ea:4a:19:ec:82:22:b0:c7:32:ec:c4:38:ff:5e:
1f:19:7b:ea:20:14:71:62:34:94:1e:27:5a:21:17:
3b:99:bb:41:8b:9c:d4:16:aa:bb:94:31:25:e6:6d:
ca:e6:e6:c3:e5:8b:a4:6c:25:d5:00:3d:fa:f9:00:
ba:53:7d:31:0a:c3:0d:58:e7:0d:91:15:b6:e5:4d:
60:2a:ff:4d:1b:34:75:a8:5c:af:d1:6e:24:13:b0:
fa:99:cc:9b:ce:4f:ed:2c:cf:94:0a:74:e2:8e:d9:
43:d6:a1:4f:64:0e:5f:fb:42:27:13:88:7e:73:98:
29:cd:41:70:7f:43:f7:87:5b:99:3f:20:2c:d5:01:
c2:a6:48:3e:6c:c2:cf:fe:34:3a:bb:67:5c:f7:24:
2a:a2:ae:3c:7c:e5:84:61:2f:44:34:cc:c9:79:a3:
0d:90:96:d0:d0:f3:a7:55:26:75:e5:bc:d4:af:33:
31:37:28:eb:00:fd:17:ec:5c:34:8c:5e:32:f7:11:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:9D:D7:43:77:BD:3C:0B:64:DA:2B:DA:87:CD:74:0E:A9:08:CF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EaSd10N3vTwLZNor2ofNdA6pCM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.112.0/24
193.124.3.0/24
193.124.207.0/24
194.87.36.0/24
194.87.38.0/24
194.87.73.0/24
194.87.130.0/23
194.87.137.0/24
194.87.166.0/24
194.87.168.0/24
194.87.178.0/24
194.135.23.0/24
195.58.35.0/24
195.58.50.0/24
195.133.0.0/24
195.133.35.0/24
212.192.31.0/24
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:45:e5:f6:88:21:df:40:0f:06:f7:f0:0a:2b:c4:04:bb:2e:
a8:53:89:4c:77:15:95:8f:21:dc:44:5f:f9:a0:71:05:20:65:
9f:b2:24:e0:c8:f7:40:c8:db:cb:7e:8b:b7:4c:ba:12:09:c0:
2d:07:5f:14:d3:2d:c2:d8:57:39:92:fb:e2:8e:27:fd:b2:0c:
90:9e:27:96:e3:f8:62:ac:6f:56:02:4f:57:c1:73:c3:9b:1c:
5b:b5:c2:7d:9d:1f:7a:e2:06:d2:7d:b6:bd:02:a3:ee:5a:15:
0f:65:4b:dc:ba:36:2f:28:21:6e:3d:79:e4:ce:1d:78:84:5f:
90:1c:f2:26:8e:6d:61:60:31:71:65:37:46:c4:a1:b4:5d:ca:
eb:6f:3b:ee:8e:f4:71:62:2f:ba:82:52:c1:f0:6b:2b:a3:e0:
33:30:2b:37:ea:2f:8b:94:5e:e4:c6:b6:05:d3:bc:bf:7d:ed:
d5:21:34:b3:c4:82:58:85:8e:49:7c:0d:9a:65:5a:24:1c:c8:
a0:a9:d1:f3:09:76:c5:e0:07:dc:13:8f:ad:97:2f:35:58:4c:
a3:07:86:8c:11:8a:f2:10:bf:5c:f5:bd:65:c3:2b:37:db:be:
e8:5e:dd:11:6d:18:7b:8c:f1:1e:00:d6:d2:d6:ee:ff:06:4f:
e0:b4:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:59 2023 by rpki-client on console-fra.rpki-client.org