Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ey0B_ew7n9loBwO5jaZpkk3dG0c.roa
File: Ey0B_ew7n9loBwO5jaZpkk3dG0c.roa (raw, json)
Hash identifier: ay7ZZLkg0AaCEA0Ryify5MGzwSYkfWYu/Okf+BDzJ3U=
Subject key identifier: 13:2D:01:FD:EC:3B:9F:D9:68:07:03:B9:8D:A6:69:92:4D:DD:1B:47
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 1098323B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ey0B_ew7n9loBwO5jaZpkk3dG0c.roa
Signing time: Thu 30 Jun 2022 12:28:02 +0000
ROA not before: Thu 30 Jun 2022 12:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 212.193.30.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278409787 (0x1098323b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 30 12:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=132d01fdec3b9fd9680703b98da669924ddd1b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:a9:21:ef:0b:c7:08:36:d2:13:c0:1d:ac:
f4:1f:15:85:63:8a:31:2d:38:0e:05:e1:e9:1e:66:
1b:5a:21:8a:ee:96:81:8a:b2:93:cc:8e:63:e6:35:
9a:dd:3e:74:d0:10:16:7b:f9:09:a8:3a:15:b2:8e:
7b:f8:e8:ef:2c:94:41:30:f1:36:b4:4a:c9:72:11:
75:d7:d4:b0:43:13:68:e5:6f:79:9b:cc:5d:83:95:
1a:1e:2e:a3:9e:d2:d8:43:64:3d:eb:b1:48:e1:c1:
33:05:bc:fd:74:c8:42:2a:a6:4b:84:dd:f1:55:ef:
3f:42:05:71:1c:fc:67:91:1d:4c:b9:82:80:45:89:
a6:d6:75:7d:9e:65:6b:13:a3:ff:21:80:53:21:3b:
12:38:a0:d9:85:de:cd:60:c7:d0:99:b8:ba:62:4d:
03:96:39:19:35:1e:a3:8d:58:c0:b0:80:87:c8:26:
bc:40:cf:6a:e3:56:bc:b2:1e:e3:29:ae:08:f3:d9:
78:62:b4:32:61:30:42:72:e4:b5:fb:bd:d2:86:05:
88:0d:86:57:59:22:5a:00:a7:48:1d:e7:94:63:0c:
c4:ad:09:70:ea:ca:ff:e7:c8:7c:e3:34:7f:7e:a6:
79:86:7b:d9:dd:7e:72:20:a2:64:c7:c8:03:b5:8f:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2D:01:FD:EC:3B:9F:D9:68:07:03:B9:8D:A6:69:92:4D:DD:1B:47
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ey0B_ew7n9loBwO5jaZpkk3dG0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.75.0/24
194.87.84.0/22
195.133.18.0/24
195.133.38.0/24
195.133.40.0/24
212.192.8.0/23
212.192.241.0/24
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3b:c3:ea:69:02:09:3e:a6:92:08:a6:76:b6:c8:08:66:c8:
57:10:24:ba:7d:21:d9:38:32:1e:93:7d:b3:94:40:79:49:58:
60:dd:d0:f1:31:f9:af:5a:02:f7:43:9c:d2:d7:ad:0e:7a:40:
5e:24:e1:19:3a:ea:ba:26:94:61:e2:3b:44:36:37:81:4e:b4:
11:1e:e4:33:cd:7d:36:15:14:2b:b8:fc:4a:39:6b:41:9e:b7:
93:52:00:c5:08:d7:01:ba:44:19:c9:e8:81:60:f5:de:c8:35:
cd:3a:4f:4e:a6:3b:83:89:9c:50:1b:ff:94:80:e7:84:d9:cd:
d4:d8:3c:44:ec:94:9d:20:c9:d6:96:d6:0d:dc:57:3e:18:55:
b5:e7:e6:80:ad:9a:52:cf:cb:7c:5a:f9:1b:5c:fa:f7:84:f4:
ff:b2:0c:78:28:1e:08:db:da:79:00:1a:a5:41:2e:ab:32:26:
cd:de:9e:53:d7:95:3d:ec:4f:b6:28:e5:60:6a:d8:96:cd:42:
78:92:35:0f:95:d9:d8:82:54:80:9e:ba:4c:fb:00:ae:e2:9a:
15:6b:b7:50:a1:d6:e6:a6:a2:39:60:bf:c8:32:fd:94:ea:96:
73:eb:eb:3f:3d:f8:dc:48:94:f1:4f:d7:ed:c7:31:9c:a9:0a:
f9:54:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org