Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J4sJ4lbFq0XCg99DlF3SsK8j3KQ.roa
File: J4sJ4lbFq0XCg99DlF3SsK8j3KQ.roa (raw, json)
Hash identifier: oBM8qRpLgZMHGRx7rViJ7np/Uh1l+qvNiwIdLviTZzk=
Subject key identifier: 27:8B:09:E2:56:C5:AB:45:C2:83:DF:43:94:5D:D2:B0:AF:23:DC:A4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01852932D7C8BC94248830CE1FDE10FE31E3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J4sJ4lbFq0XCg99DlF3SsK8j3KQ.roa
Signing time: Mon 19 Dec 2022 07:04:35 +0000
ROA not before: Mon 19 Dec 2022 07:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41745
IP address blocks: 195.133.75.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:32:d7:c8:bc:94:24:88:30:ce:1f:de:10:fe:31:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 19 07:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=278b09e256c5ab45c283df43945dd2b0af23dca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:ab:12:99:71:cc:ad:5e:17:e4:a8:18:28:
94:5a:fa:50:24:42:45:e4:8f:14:44:38:aa:66:80:
2d:2f:3e:52:db:51:80:41:25:97:59:74:81:dc:dc:
f2:0f:f0:7a:19:f0:15:77:dd:1e:fb:d0:39:af:24:
c6:21:96:56:6a:f9:3c:f4:44:1b:b0:56:80:54:b8:
d9:77:27:8f:18:34:1d:ab:77:b4:8b:eb:ae:8c:36:
4e:0b:02:ac:37:e3:31:a1:56:e4:0b:d4:d1:24:91:
24:42:f2:60:66:07:84:f6:c8:0f:16:32:f9:cd:91:
68:3c:ff:6c:55:b4:cb:ed:64:9c:a9:a8:04:16:d0:
cc:77:ba:b9:ab:d3:8c:55:fd:95:b2:c4:65:a2:a4:
a1:52:d4:a6:61:e2:78:65:ac:93:22:49:3d:e7:f2:
59:49:f2:2e:6d:97:10:06:80:75:c0:51:c5:ad:e3:
93:3e:b9:d9:6e:8e:d0:b6:f1:e7:51:f8:57:88:d7:
fa:00:98:96:70:ff:a6:b1:56:31:53:72:bc:c6:1f:
da:12:9e:a6:44:3e:c2:4d:fd:18:71:b1:04:bc:4a:
d8:49:ec:49:b3:cb:6c:2f:15:b1:7c:2c:9f:42:13:
0e:0e:a3:bf:34:03:41:53:6f:60:0e:24:20:ef:03:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:09:E2:56:C5:AB:45:C2:83:DF:43:94:5D:D2:B0:AF:23:DC:A4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J4sJ4lbFq0XCg99DlF3SsK8j3KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.82.0/24
194.87.219.0/24
195.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
43:67:94:10:be:6f:67:ea:9b:5e:46:33:cf:67:b5:03:8a:19:
54:e2:c4:a9:e9:56:e0:b2:f7:b3:27:ab:37:43:ca:8e:56:fa:
67:c4:17:79:5c:92:30:e9:a8:3a:4a:d0:e2:cf:d0:a7:10:4b:
60:a7:f0:99:73:41:d2:e1:4c:51:69:06:79:47:52:c7:1a:aa:
b9:5d:c6:67:dc:88:03:76:12:d7:15:e3:7e:cf:22:1e:38:66:
71:4e:32:be:2b:73:ab:e8:af:47:aa:18:b4:35:4b:2b:c8:24:
d3:71:8f:84:de:53:e7:1c:5c:58:a5:6f:bb:cf:34:b0:62:aa:
b5:5a:61:df:28:b7:d0:83:d4:a3:cd:5a:fc:af:f7:b8:0b:4f:
71:f1:87:3e:7d:5f:69:71:74:57:63:22:37:3e:24:06:ee:22:
82:1a:4d:f2:f1:06:14:2f:01:cd:61:a4:63:c5:f1:a6:ac:75:
91:65:31:d7:6f:a8:89:f2:e3:7b:25:65:e5:02:7f:d5:66:5a:
65:7f:22:7d:17:77:d2:5f:db:ea:8e:cf:87:69:26:62:35:ce:
a6:85:c7:41:b2:99:58:4e:83:80:e3:0a:8b:fb:23:2b:cb:f4:
27:4e:2a:ea:48:ad:a5:cd:f1:e2:97:e0:df:17:68:69:4b:64:
36:eb:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:00 2023 by rpki-client on console-fra.rpki-client.org