Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmPR_3l_fTJYARb4gK-Nawvdn7g.roa
File: FmPR_3l_fTJYARb4gK-Nawvdn7g.roa (raw, json)
Hash identifier: 9UNvX9qaMA/DLv1e++5PJ+S03PGBUN/ipLkLohDwRAc=
Subject key identifier: 16:63:D1:FF:79:7F:7D:32:58:01:16:F8:80:AF:8D:6B:0B:DD:9F:B8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182B364422B4B338F9539664E1DF9E06EFA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmPR_3l_fTJYARb4gK-Nawvdn7g.roa
Signing time: Thu 18 Aug 2022 23:57:48 +0000
ROA not before: Thu 18 Aug 2022 23:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 212.193.30.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
194.87.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b3:64:42:2b:4b:33:8f:95:39:66:4e:1d:f9:e0:6e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 18 23:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1663d1ff797f7d32580116f880af8d6b0bdd9fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:c3:e1:03:8d:d3:5c:99:c1:90:9e:20:af:
61:b0:78:02:1c:a1:57:2a:30:81:2b:b9:96:e6:b6:
da:5f:cb:b4:9e:41:8b:13:3d:d7:d6:4f:f6:bb:e2:
8b:e7:2e:2d:c5:19:8d:ee:79:7f:64:45:98:0f:14:
2f:4a:14:a7:3e:d1:34:76:05:77:63:a9:97:30:2b:
25:0f:9d:c4:6f:e5:ff:ed:8c:e9:81:8c:48:cf:1e:
67:61:34:29:8f:1d:3b:3d:a1:ee:b9:8d:77:98:22:
7b:0e:a6:b6:a6:e0:b3:ae:d1:61:de:74:21:b9:28:
e7:24:9d:e3:1d:08:8b:85:6a:6e:df:71:44:67:11:
9e:64:33:51:47:b1:18:d1:f7:d7:7f:74:5a:59:f9:
34:87:53:f2:36:95:8d:a9:09:4b:a9:3d:91:78:97:
74:31:0d:66:a7:13:da:c3:94:4e:ab:d7:ef:8e:6b:
05:55:e6:9c:13:35:52:0c:4d:0f:7f:ea:7f:cb:ee:
66:ae:8c:47:e5:04:3b:66:3a:5e:01:84:b1:9c:32:
ec:fe:b5:eb:07:cc:d0:ba:d7:e6:60:67:ae:20:85:
a8:46:4b:94:96:da:f5:76:be:1f:78:19:27:e7:00:
7a:4d:03:f6:fc:a8:d1:19:f5:d7:6f:e4:71:03:35:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:D1:FF:79:7F:7D:32:58:01:16:F8:80:AF:8D:6B:0B:DD:9F:B8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmPR_3l_fTJYARb4gK-Nawvdn7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.84.0/22
195.133.18.0/24
195.133.38.0/24
195.133.40.0/24
212.192.8.0/23
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e7:37:d6:73:bc:b1:21:d0:f8:69:32:84:4f:75:3e:fd:02:
2f:fe:78:02:ea:f2:b2:88:4b:2d:e8:22:f8:93:e0:90:a9:ae:
ee:d0:05:e6:1b:4c:5d:47:5e:28:83:76:d8:17:2c:30:24:75:
ab:a0:70:5f:0a:89:fb:42:8d:a7:2a:2a:02:24:52:c3:98:8a:
8f:da:35:e4:ea:41:85:a7:ed:fd:42:dc:d5:32:57:e6:63:fc:
1a:36:06:f2:d0:83:f3:ee:d5:a0:50:26:18:ed:5c:88:b3:84:
bc:e2:71:fc:96:29:c8:78:66:68:87:fa:d7:e0:bf:f9:09:2d:
6e:00:9f:8d:67:f1:10:87:b6:28:83:5a:3b:22:bd:6b:bf:d9:
4e:2a:58:86:7b:6f:a0:37:10:96:b5:4f:a8:1c:82:e5:e5:98:
c5:47:0c:15:fa:20:c7:51:71:fd:b1:29:3c:de:95:68:17:03:
ee:cc:1b:da:ef:d9:7e:cc:e4:31:9f:5b:37:8f:28:bd:a7:af:
6d:01:80:d3:66:19:15:41:ac:24:be:c1:d3:f5:ec:c5:44:f0:
80:b4:3d:f5:f4:47:cc:2a:21:90:ff:b6:4d:23:ae:9d:8f:c6:
58:0f:15:67:74:9a:a3:53:db:27:69:ef:ae:21:3b:40:19:b9:
6a:9b:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org