Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GOgl7cf1w5LkhZ6hnIMoV11NMQc.roa
File: GOgl7cf1w5LkhZ6hnIMoV11NMQc.roa (raw, json)
Hash identifier: 18BAOD8Enbo2s6qhYx63fn4tvSxTLoxsBBO+0Pj8pT8=
Subject key identifier: 18:E8:25:ED:C7:F5:C3:92:E4:85:9E:A1:9C:83:28:57:5D:4D:31:07
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018559884C99DDA9A0E4A4325E0DA3C07830
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GOgl7cf1w5LkhZ6hnIMoV11NMQc.roa
Signing time: Wed 28 Dec 2022 16:19:42 +0000
ROA not before: Wed 28 Dec 2022 16:19:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:88:4c:99:dd:a9:a0:e4:a4:32:5e:0d:a3:c0:78:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 28 16:19:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18e825edc7f5c392e4859ea19c8328575d4d3107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:e9:b5:12:4a:0d:f3:cf:e9:4e:46:d5:82:
47:52:9c:c0:b2:5d:ec:cf:9b:06:9d:f0:e7:80:f7:
fb:51:b9:fe:3e:f6:37:e8:4a:b2:bc:8c:16:85:4b:
04:5c:4a:28:c1:fe:1d:4e:49:29:dd:97:2f:13:b4:
e7:3d:02:d7:c0:c4:a5:89:c8:94:e4:07:16:85:61:
3f:30:15:81:e2:41:6c:2b:17:a4:46:63:fa:2c:32:
8a:82:11:b9:bd:58:92:9b:1f:26:c1:0d:e9:6c:b3:
39:46:c3:61:89:8d:e8:4d:2c:c9:00:d2:17:fb:65:
33:0d:47:42:49:06:69:2f:ba:13:2e:de:f5:77:23:
52:92:c8:7a:07:15:8c:79:bd:f8:44:03:34:46:8f:
57:9b:2b:fe:d9:a9:21:5f:56:0f:d0:fc:4f:55:47:
f3:71:41:99:9c:c5:12:01:93:df:18:9f:9c:41:4c:
43:be:6c:58:a3:12:aa:d6:d3:cd:a7:52:19:55:df:
b7:c1:ee:4e:22:a2:e9:a9:60:2b:ae:0f:e3:41:91:
2e:5c:2a:64:33:c3:fe:72:2f:fc:1e:1b:f3:15:64:
30:c8:72:2d:eb:78:cd:c0:7b:38:1f:6a:9f:4e:78:
c9:ac:a1:cb:ac:11:50:c1:bb:61:78:7d:18:4d:aa:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E8:25:ED:C7:F5:C3:92:E4:85:9E:A1:9C:83:28:57:5D:4D:31:07
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GOgl7cf1w5LkhZ6hnIMoV11NMQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
193.124.9.0/24
193.124.44.0/24
194.87.1.0/24
194.87.38.0/24
194.87.42.0/24
194.87.73.0/24
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.178.0/23
194.87.187.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.56.0/24
195.133.0.0/24
195.133.30.0/24
195.133.35.0/24
195.133.195.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
57:48:ff:10:dc:df:a3:13:6a:ab:54:0a:fc:52:2e:af:46:57:
b8:90:65:53:de:21:f0:17:e1:ba:58:ef:5c:1a:1e:0d:1c:ee:
f7:f0:02:9f:30:75:fc:06:0d:49:00:21:d4:91:33:8a:d0:89:
09:88:a2:f4:02:8d:fc:a0:12:2e:ea:d0:ae:ea:11:79:20:8a:
a5:5f:aa:dd:32:33:4d:11:01:ae:69:aa:7b:b9:e7:37:b6:40:
9b:eb:ec:26:ff:bc:28:d2:9d:8c:27:34:aa:eb:0f:f5:d4:ef:
cf:53:76:7d:f8:2b:9c:57:b6:7f:7f:84:c3:3b:37:e5:fe:58:
a4:de:4f:6e:7a:39:1e:31:44:f4:69:56:dc:b9:a0:70:0f:34:
86:68:f7:c1:94:b9:68:6c:84:e7:bb:08:b5:22:0b:0d:bc:b4:
e3:e2:e0:a9:4e:bd:fb:08:cd:3b:44:1a:63:11:39:fa:66:71:
69:ef:4c:2f:2d:79:a4:9b:d7:29:8d:29:d2:08:7b:5b:41:9f:
18:8d:df:f5:c2:aa:a0:86:e3:82:3c:2f:75:a4:f2:39:ee:dc:
ee:c6:4d:2d:d1:87:b2:00:26:85:39:6f:32:19:b6:31:c2:e7:
55:5c:48:4b:a1:11:d6:31:b9:6e:8c:82:7e:58:78:8c:31:dc:
54:06:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org