Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OUfzT40TfB5jY4lEurHmY1UquZg.roa
File: OUfzT40TfB5jY4lEurHmY1UquZg.roa (raw, json)
Hash identifier: +aGEotYLus4NPr3YXX7dVLlGoH9TDldwC8oHU+dxxeQ=
Subject key identifier: 39:47:F3:4F:8D:13:7C:1E:63:63:89:44:BA:B1:E6:63:55:2A:B9:98
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01853371FCBA0EF490158C6EB0F75FC190F9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OUfzT40TfB5jY4lEurHmY1UquZg.roa
Signing time: Wed 21 Dec 2022 06:49:46 +0000
ROA not before: Wed 21 Dec 2022 06:49:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:71:fc:ba:0e:f4:90:15:8c:6e:b0:f7:5f:c1:90:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 21 06:49:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3947f34f8d137c1e63638944bab1e663552ab998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:4d:58:62:84:19:90:37:d4:57:f3:6c:fd:
9a:4f:87:46:ab:3c:0f:81:9c:84:70:8d:0f:0d:29:
fb:7c:b1:a7:41:07:72:19:b5:73:98:aa:12:87:ac:
7d:81:ad:ba:51:f5:14:22:7c:6c:ff:82:3b:bf:a0:
a7:c0:da:c4:9b:c9:f5:a9:6a:89:3e:2c:7c:90:a4:
5f:a8:67:e0:f4:59:15:40:34:40:0a:9b:76:31:f3:
4a:1d:1e:e2:a3:c6:93:86:cf:30:3c:00:34:82:0e:
5a:82:83:a1:d3:92:2a:58:80:3f:a3:c5:7e:2a:4a:
98:98:40:bb:cf:d0:9d:c6:dc:20:63:05:3c:66:08:
b6:7f:ff:b4:81:51:d8:b9:61:53:dc:3d:eb:8a:d0:
dd:5d:26:82:96:14:78:21:07:4b:97:5b:72:ed:29:
ba:98:16:b9:b9:5d:50:84:c3:1c:6b:ec:79:71:7b:
43:1a:2d:23:27:23:a5:0f:40:e5:41:fb:0a:82:a2:
31:34:fe:50:4b:0b:dd:a6:92:33:bc:a4:d9:66:de:
8a:9e:ac:cc:61:49:8c:ac:8e:a3:29:1f:8c:21:d0:
ae:da:19:db:4f:bc:ea:36:11:c1:a4:b5:5b:ed:0c:
6e:3a:90:8c:bf:5d:41:04:d6:31:fb:47:eb:e4:58:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:F3:4F:8D:13:7C:1E:63:63:89:44:BA:B1:E6:63:55:2A:B9:98
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OUfzT40TfB5jY4lEurHmY1UquZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.58.46.0/24
194.87.64.0/24
194.87.207.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:94:13:dc:d0:46:d7:dd:33:79:61:6f:09:57:15:4f:0b:9e:
5f:c2:76:aa:45:67:22:5a:21:45:0f:84:74:20:ae:ef:7a:8e:
97:61:d3:95:98:11:e2:45:de:24:ad:99:fa:70:cd:70:9d:66:
9f:7c:d1:12:a1:e7:0d:83:a7:86:6b:cb:1e:61:c7:85:20:5e:
a8:89:7b:df:d0:c3:5a:2a:db:b1:e5:dd:ba:f3:09:b3:fe:53:
c7:df:e6:f8:15:3b:76:2f:61:9f:8c:be:94:ba:7d:ce:ac:2d:
bf:82:ac:22:ce:e5:e4:2c:05:3e:0e:f7:26:bc:77:b9:41:12:
53:ec:91:34:f2:f3:d6:6b:4d:af:89:e9:6c:ad:59:6f:c1:b7:
6e:47:3a:0d:f7:e2:d7:4c:29:97:20:ee:7c:c1:ca:40:75:8a:
f3:1f:75:c8:79:46:79:fe:d6:65:f2:bf:a9:60:e8:f2:62:06:
7f:11:2c:56:be:05:b7:cd:e8:f0:6e:3d:55:74:ad:22:10:97:
47:2a:55:98:be:3f:00:1e:6c:2d:f8:9b:03:e1:ca:fe:5e:da:
f0:f0:12:dc:94:78:77:40:0f:31:85:0e:0d:f2:d0:cb:a8:fa:
12:ad:40:b6:2a:93:6d:fc:9a:8f:2c:f0:b1:00:9e:0e:87:90:
83:82:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:02 2023 by rpki-client on console-fra.rpki-client.org