Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IV_wD8u9w7hOU12-u1EYDXRrM8Y.roa
File: IV_wD8u9w7hOU12-u1EYDXRrM8Y.roa (raw, json)
Hash identifier: VYQyWygY8KpYdOScOUA4WnnkVs7naOuuFyh6JEHdBtU=
Subject key identifier: 21:5F:F0:0F:CB:BD:C3:B8:4E:53:5D:BE:BB:51:18:0D:74:6B:33:C6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184F62D64E1125BC9D7D8B40F7E9F74A40B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IV_wD8u9w7hOU12-u1EYDXRrM8Y.roa
Signing time: Fri 09 Dec 2022 09:18:00 +0000
ROA not before: Fri 09 Dec 2022 09:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:2d:64:e1:12:5b:c9:d7:d8:b4:0f:7e:9f:74:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 9 09:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=215ff00fcbbdc3b84e535dbebb51180d746b33c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:49:7c:06:81:45:32:23:e4:7d:dc:84:9f:
46:d0:6d:28:39:d8:45:c0:a4:6d:e9:6c:ef:7d:58:
0f:b3:e3:f1:32:04:ae:4a:2f:e9:33:07:12:5c:54:
76:a9:dd:91:5a:28:0e:09:74:6d:9b:96:b7:d2:b8:
00:a5:0b:a6:4b:3f:cc:f0:f7:e5:77:06:33:2f:9a:
4a:fe:c3:2a:c5:dc:44:e3:c1:68:01:73:22:3e:db:
96:74:36:ee:bb:06:17:e9:be:d0:3a:90:fe:a6:23:
4b:4e:05:cd:9b:fe:fe:87:8c:25:f4:87:7c:17:b4:
08:75:5a:74:c1:88:7c:7a:63:57:03:a2:72:b7:fc:
3d:1a:2f:fb:4a:78:ce:3e:87:7d:80:c4:fb:7b:a6:
41:aa:ef:1a:30:e1:86:f4:40:3e:9c:b0:b3:01:af:
81:f6:ce:5e:d3:a8:c9:a6:09:6c:67:38:76:2f:5c:
24:c3:71:f4:e6:8e:77:2d:52:a3:ee:5f:d5:fd:bd:
25:17:53:2f:4f:0b:bb:13:51:f5:ea:e1:e8:11:fd:
70:99:d9:6f:1b:fb:88:2e:0a:87:be:a8:89:e4:a0:
ba:e4:17:0d:88:22:71:46:37:ad:bb:4c:4a:0b:1a:
73:2b:b4:32:24:73:c5:e7:7d:15:33:9d:b2:f0:b7:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5F:F0:0F:CB:BD:C3:B8:4E:53:5D:BE:BB:51:18:0D:74:6B:33:C6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IV_wD8u9w7hOU12-u1EYDXRrM8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0-62.76.226.255
192.124.180.0/24
192.124.183.0/24
193.124.18.0/24
193.124.45.0/24
193.124.90.0/24
193.124.133.0/24
193.124.200.0/24
194.58.40.0/24
194.58.46.0/24
194.58.59.0/24
194.87.122.0/24
194.87.124.0/23
194.87.170.0/24
194.87.200.0/24
194.87.205.0/24
194.87.226.0/24
194.87.233.0/24
194.87.252.0/24
195.133.76.0/24
195.133.193.0/24
212.192.5.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b8:f8:50:6c:30:5e:08:c2:21:24:85:15:8a:3e:ae:69:25:
c3:b1:e5:d4:f9:e8:9f:fc:3f:51:d8:25:13:4c:4f:a1:ef:fb:
10:32:31:38:fd:99:ec:24:3e:75:f4:df:01:8c:f4:da:30:2c:
88:57:0c:44:85:56:df:14:05:04:45:1d:d0:45:9a:f7:9e:19:
b3:84:2e:f2:b8:a6:c1:1d:f9:33:a7:8b:9d:81:c5:fd:1c:cd:
6c:a8:a9:22:2b:2e:72:8f:f1:c5:7c:b2:f2:1b:20:4d:ce:a3:
5b:74:9b:9c:a6:26:0f:1d:ff:d2:dc:00:43:08:0d:86:2d:90:
4f:39:f9:16:57:a3:8e:7c:0e:86:96:5f:63:37:5e:31:67:0e:
b8:13:0c:4c:d6:8a:51:d8:d0:4d:54:f2:61:ce:4b:87:12:82:
b5:88:c9:4d:4b:6e:48:8a:2b:8b:a1:40:c9:4a:d1:f7:7a:e0:
ec:64:aa:f0:49:8a:19:7f:70:2f:15:43:0d:d4:16:38:3f:9e:
6f:7d:2c:99:a4:99:d5:e3:99:7c:73:17:04:ec:cd:0c:ac:48:
17:11:c4:fe:a9:1e:07:9a:07:a5:b9:d7:18:22:bb:a8:51:82:
9d:a8:4f:da:ff:2d:74:dc:2c:f1:41:9a:c9:6e:f3:62:4f:44:
b3:63:63:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org