Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FpKWuOAMe5-i5LqcGOGBgfdI-LU.roa
File: FpKWuOAMe5-i5LqcGOGBgfdI-LU.roa (raw, json)
Hash identifier: /BXeTeA+LtyRLMx5iMfYpWW4roX5hHE8L+dV5aqHw0E=
Subject key identifier: 16:92:96:B8:E0:0C:7B:9F:A2:E4:BA:9C:18:E1:81:81:F7:48:F8:B5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183BE54A733856F9ECA1FAD0E90656D34B3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FpKWuOAMe5-i5LqcGOGBgfdI-LU.roa
Signing time: Sun 09 Oct 2022 19:59:22 +0000
ROA not before: Sun 09 Oct 2022 19:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.87.200.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:be:54:a7:33:85:6f:9e:ca:1f:ad:0e:90:65:6d:34:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 9 19:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=169296b8e00c7b9fa2e4ba9c18e18181f748f8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:66:38:9b:7d:50:43:29:d3:66:f5:4c:bc:
75:84:31:a9:ff:48:37:51:b5:e0:fc:07:a9:b2:81:
94:68:78:4d:04:1a:fb:f8:1e:7b:be:75:65:4a:d5:
81:60:62:70:36:3a:b6:eb:6d:26:6b:21:dd:72:0f:
1e:20:4c:44:05:d4:3b:ad:79:0b:9b:36:fa:04:64:
13:55:08:02:0b:04:97:48:f6:cf:e3:31:d0:d2:07:
dc:84:59:64:8b:ac:3c:71:4f:a4:5d:f4:35:76:06:
c7:ff:43:be:c1:f9:4b:d3:e2:ee:d0:8c:6f:98:77:
a0:55:89:2f:1c:ca:ef:69:4c:be:92:e1:f6:21:3a:
43:6a:e3:74:c3:cd:7b:8b:b7:00:4f:72:42:8b:2a:
aa:c2:5b:d0:93:e3:42:a9:e0:b4:f5:a8:a7:66:6f:
a1:ff:2c:2c:64:35:1f:8b:7e:d1:5f:bc:c8:24:5b:
f7:68:8c:41:28:2f:61:93:f9:08:e1:c2:20:fa:27:
a9:9e:20:b1:26:61:52:72:35:27:3b:0b:41:2e:87:
d3:0c:b4:94:ad:df:70:b7:e9:01:5b:ce:cf:92:06:
3a:2e:5f:e3:2b:d7:44:c9:94:6a:b6:2a:af:30:2a:
ac:c3:c6:70:3f:eb:d1:0e:82:38:57:e3:f4:9a:c3:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:96:B8:E0:0C:7B:9F:A2:E4:BA:9C:18:E1:81:81:F7:48:F8:B5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FpKWuOAMe5-i5LqcGOGBgfdI-LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
194.87.22.0/24
194.87.26.0/24
194.87.200.0/24
195.133.12.0/24
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0a:e7:32:92:e5:d0:bf:ec:b1:cf:c1:45:ac:27:9e:e6:6f:
69:79:55:13:84:a1:95:3e:2d:f8:77:bc:46:74:08:59:55:c8:
73:e8:c3:19:53:d0:4a:18:0e:6d:7d:9f:ee:76:89:21:b2:55:
10:e9:eb:78:38:7e:54:dc:f6:1c:3c:b4:0a:ae:b1:f0:a4:3b:
86:ef:58:a0:4f:e3:3f:80:eb:03:35:44:62:ae:96:99:ec:7e:
ea:ae:7b:60:b8:8a:9d:54:a3:cd:e3:63:0d:7c:37:ee:7b:59:
fd:fd:90:57:a2:3b:d1:82:cd:e2:bf:ff:e4:b3:c2:af:e5:ab:
24:8f:fb:03:62:d2:14:07:d0:f4:f7:29:3b:c8:0b:fd:ea:36:
8b:d3:09:a3:d4:74:24:6e:06:4d:02:c6:6d:9a:10:8a:e9:9c:
cc:55:74:79:13:55:7d:a0:a1:47:29:99:d3:29:dc:0c:25:23:
3d:cb:21:88:cb:af:0c:e5:ad:15:fb:25:7f:4b:56:26:c6:f2:
68:81:a8:30:12:14:97:9b:7a:63:0c:21:4d:00:a6:a0:57:ff:
a3:ac:99:5f:59:bb:3f:90:e9:7b:f9:ac:a4:f3:7b:21:5b:25:
2b:99:76:2e:d9:a4:d0:28:bb:ee:6e:01:a7:9d:65:9b:cc:33:
82:b5:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org