Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KqODIevdWZf5MR--PEkm9PGvrWA.roa
File: KqODIevdWZf5MR--PEkm9PGvrWA.roa (raw, json)
Hash identifier: xe5CJ9AR90ohjsWb0X6QrGPCcQxjZi4AveqveNsEpBA=
Subject key identifier: 2A:A3:83:21:EB:DD:59:97:F9:31:1F:BE:3C:49:26:F4:F1:AF:AD:60
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01843762C3F003B084569B5F02D8A26F731C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KqODIevdWZf5MR--PEkm9PGvrWA.roa
Signing time: Wed 02 Nov 2022 08:08:50 +0000
ROA not before: Wed 02 Nov 2022 08:08:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 194.87.127.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:62:c3:f0:03:b0:84:56:9b:5f:02:d8:a2:6f:73:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 2 08:08:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aa38321ebdd5997f9311fbe3c4926f4f1afad60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:a5:2f:79:3c:cb:0e:f4:40:6f:bc:74:b9:
b7:3d:9e:ce:63:56:8b:ff:f8:26:23:da:3a:33:78:
32:46:c1:1e:51:e7:9f:83:72:3f:d2:5e:8f:55:68:
a8:8f:f9:49:12:9d:44:9b:85:d7:33:09:a6:39:7c:
f0:3d:16:64:d4:a8:d6:cd:d4:5b:30:5f:8c:b0:4e:
42:41:44:3f:2a:64:51:e5:9f:a2:f8:fc:d6:c6:24:
6a:da:39:52:8f:dd:fa:14:83:b9:5d:72:f6:5c:ff:
40:ea:4e:78:7b:17:52:51:15:41:1c:cf:fe:24:a2:
a9:34:ef:87:08:0d:f3:59:a9:5b:11:4e:ab:e5:15:
bd:92:4b:2a:e2:b3:3c:eb:0f:42:a1:74:86:d6:d4:
1b:98:05:eb:12:a3:13:4c:dc:9c:24:4f:c3:e2:5e:
12:b6:e8:58:c3:f0:aa:db:da:3d:eb:a5:67:a8:d0:
9a:1b:f5:97:4b:d3:bb:12:3f:aa:13:a5:e5:44:3a:
2f:05:38:21:99:22:a8:a3:9a:69:84:87:56:4a:32:
0a:7e:88:36:bf:9a:e4:11:bd:97:7d:29:4a:aa:99:
db:36:8e:57:6d:cd:0b:31:03:e9:3a:35:5f:3e:e3:
bc:e4:6f:3d:98:bc:6d:a7:a0:f8:37:dd:0a:4b:3a:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:83:21:EB:DD:59:97:F9:31:1F:BE:3C:49:26:F4:F1:AF:AD:60
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KqODIevdWZf5MR--PEkm9PGvrWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.127.0/24
194.87.180.0/24
195.58.61.0/24
212.192.7.0/24
212.193.5.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2a:3b:48:aa:b4:f9:17:9e:21:dd:63:01:94:64:94:cc:b8:
5c:e9:fa:31:ee:fb:20:26:11:03:37:5e:50:a8:63:bc:fa:8d:
06:f4:12:08:cd:a5:21:97:d6:a3:14:e2:13:a9:5e:25:9a:e6:
8a:5f:12:20:e4:e0:f5:26:21:44:23:72:b0:a6:9e:29:d2:c8:
e8:2b:c7:ad:03:8e:3a:47:8a:54:df:d3:32:64:f4:fa:bd:e0:
87:7d:0a:89:d2:10:3a:97:04:f5:f9:5a:18:e6:a0:a7:a5:2a:
0a:21:e5:53:99:ab:3a:68:46:d0:81:08:ba:e1:b9:61:db:c5:
52:9c:11:01:9a:42:b3:a0:67:ea:33:8f:97:72:af:7d:42:cf:
8c:21:ad:4a:51:f5:b8:26:07:e5:e2:c2:00:da:cd:5d:c6:c2:
65:07:19:82:2a:ef:14:34:74:92:ab:20:ab:b7:da:49:43:28:
af:50:c1:c3:34:50:83:ae:d3:5d:d4:6e:93:aa:89:9e:e6:79:
e6:84:18:8f:fd:5e:a6:75:57:4e:70:3a:77:3e:6a:1c:b7:65:
4d:1b:16:67:e2:11:40:bd:b0:38:08:3c:d7:ba:b4:5d:ad:23:
02:2e:af:57:7e:ee:b7:69:e0:0b:3b:86:5a:fc:d1:9c:8c:99:
6c:18:f7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org