Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FfjaGkSk5tdsyDLMduwGuxgZ2ug.roa
File: FfjaGkSk5tdsyDLMduwGuxgZ2ug.roa (raw, json)
Hash identifier: AHz8LO2K+7m9eQr5x1sph4R1O2+gPIxJTAun0llnVv4=
Subject key identifier: 15:F8:DA:1A:44:A4:E6:D7:6C:C8:32:CC:76:EC:06:BB:18:19:DA:E8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184D1ED54B5B48BFE3DB2D9895204D0FE9E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FfjaGkSk5tdsyDLMduwGuxgZ2ug.roa
Signing time: Fri 02 Dec 2022 08:21:42 +0000
ROA not before: Fri 02 Dec 2022 08:21:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 195.133.75.0/24 maxlen: 24
212.193.31.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.29.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
195.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:ed:54:b5:b4:8b:fe:3d:b2:d9:89:52:04:d0:fe:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 2 08:21:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15f8da1a44a4e6d76cc832cc76ec06bb1819dae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:17:5c:b0:eb:2d:42:1b:70:76:ad:ca:63:
af:b7:b4:81:03:ae:0e:3e:97:c2:74:72:e4:36:f4:
f3:c3:65:81:99:2f:8a:db:b3:59:31:34:3f:f4:57:
8c:a4:a9:78:02:74:ff:5b:04:e2:08:ed:06:ce:31:
3f:92:d3:03:eb:64:bf:08:a0:00:f7:86:bc:ef:b8:
2f:59:d5:d1:45:7e:b6:9e:01:f5:7d:7d:5c:5a:23:
36:5f:f8:9b:5b:b5:44:62:7b:7f:ea:6f:9c:02:2e:
9b:45:4a:da:c9:d3:69:0b:e4:4a:bb:bc:fd:dd:4f:
c0:5a:4b:30:87:f2:46:7e:9a:83:d2:66:df:2d:e1:
e0:90:1d:29:e8:69:c3:4f:04:11:3f:44:5e:e9:0d:
13:21:14:90:3c:ba:28:cc:8f:0f:76:ea:a1:69:40:
e1:e4:7a:e9:3d:1c:02:c9:73:a6:02:37:2b:9b:e4:
b3:da:29:5d:59:13:64:e0:b6:12:b9:1e:97:f8:43:
f3:14:16:7d:4b:bf:c2:9c:bf:e0:3c:34:2e:97:04:
a5:99:66:2e:62:94:fe:39:49:e6:70:76:5c:b1:86:
f9:b3:95:97:31:51:31:60:03:2a:40:16:7f:ae:ba:
ab:66:1a:81:9d:3c:cc:f5:ff:15:16:0a:96:79:17:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F8:DA:1A:44:A4:E6:D7:6C:C8:32:CC:76:EC:06:BB:18:19:DA:E8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FfjaGkSk5tdsyDLMduwGuxgZ2ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
192.124.188.0/24
193.124.41.0/24
193.124.91.0/24
193.124.93.0/24
193.124.95.0/24
193.124.227.0/24
194.58.60.0/24
194.85.249.0/24
194.85.251.0/24
194.87.187.0/24
195.58.59.0/24
195.133.13.0-195.133.14.255
195.133.29.0/24
195.133.31.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
195.133.75.0/24
212.192.4.0/24
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ce:e4:86:91:f9:77:dd:cf:87:a7:e0:89:4e:ef:20:b6:56:
96:99:b9:bf:53:5c:4b:6e:b9:69:0f:69:14:9c:b7:ab:48:45:
58:41:a0:81:b5:f2:6b:79:85:11:dd:00:65:1a:4c:43:97:7a:
13:6d:67:49:63:83:c5:84:ae:7d:08:67:58:1d:fe:5d:e7:f8:
64:49:dc:52:79:e3:cd:36:15:65:c3:e7:de:90:a6:da:ee:1a:
0e:7a:90:07:b0:2e:c4:54:f9:27:6e:c2:cc:32:ce:13:05:88:
0c:fd:e2:4e:0f:55:c2:30:b5:a5:dd:72:3c:0f:2b:2a:03:cb:
3f:f3:fc:7a:9d:74:e0:b7:5f:46:af:a1:39:c9:a1:49:dd:81:
78:4c:59:89:36:7e:91:cc:be:5b:02:76:2d:d8:84:89:f5:42:
f4:be:ad:48:2f:07:d3:d1:ec:1b:80:c9:73:40:48:92:b3:00:
d8:1d:af:25:b4:a9:c3:6c:46:40:07:3e:53:63:65:6e:35:82:
5f:27:92:69:2c:15:bc:e2:b5:36:c4:d9:28:ca:9a:af:5d:65:
c7:cf:35:1b:55:2c:a7:77:3c:7a:ae:d4:65:f1:ad:20:1c:6f:
fc:5d:27:7c:1e:24:9b:59:47:da:af:3c:60:73:e5:02:ea:ae:
3f:36:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org