Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbCswClk2_qrGHa5IzG9SlDfZAw.roa
File: PbCswClk2_qrGHa5IzG9SlDfZAw.roa (raw, json)
Hash identifier: xoe7+kxlY/2KScy3a+RB+Bi3iWQlhlxGlAvNGMfr4zc=
Subject key identifier: 3D:B0:AC:C0:29:64:DB:FA:AB:18:76:B9:23:31:BD:4A:50:DF:64:0C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01850F6C9901C7780D1EE5CA6AA7A00CA59A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbCswClk2_qrGHa5IzG9SlDfZAw.roa
Signing time: Wed 14 Dec 2022 06:57:33 +0000
ROA not before: Wed 14 Dec 2022 06:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 212.192.7.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:6c:99:01:c7:78:0d:1e:e5:ca:6a:a7:a0:0c:a5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 14 06:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3db0acc02964dbfaab1876b92331bd4a50df640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:df:0c:29:9f:62:5f:d3:e1:05:ea:b4:c9:
3e:0e:0d:dd:08:65:69:b2:d3:42:75:7f:22:c7:cd:
9e:d3:ab:78:ab:02:85:41:51:04:67:be:1b:e7:4e:
84:91:ea:4f:1f:e7:5c:38:04:9b:50:61:fe:6d:3c:
36:7f:07:c3:d7:db:8c:df:15:3b:4e:dd:ac:6a:fb:
23:2b:7f:c3:e1:3b:c5:82:82:47:c5:75:66:56:c4:
8a:14:8b:b5:f0:5e:53:32:68:7b:0f:d2:7d:c3:10:
8d:a4:90:ba:60:fc:95:65:5f:bd:d4:25:b2:2a:da:
34:ea:33:02:e7:29:bc:41:fe:52:36:96:d8:cb:21:
41:e3:ed:d5:70:56:ca:0d:77:bb:17:b6:43:11:92:
11:61:24:b7:73:9e:78:98:38:7f:e7:e8:7b:de:75:
85:06:d0:6c:01:fb:a1:39:bd:10:21:58:fa:c0:4b:
f7:c7:97:90:d6:d4:94:d7:52:6c:88:a3:a3:64:a9:
33:e4:f4:24:0a:4d:b7:45:6b:b0:94:a2:3e:fa:66:
71:4a:f2:b0:0b:86:1a:69:6f:e7:25:3c:16:31:52:
53:20:a0:80:db:e3:92:f8:a6:96:d7:e5:d5:04:08:
13:db:83:35:da:8f:4a:cd:2b:57:35:9f:f5:50:fc:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:AC:C0:29:64:DB:FA:AB:18:76:B9:23:31:BD:4A:50:DF:64:0C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbCswClk2_qrGHa5IzG9SlDfZAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.87.64.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d1:1d:c3:52:64:7e:85:a9:5d:d4:86:30:cf:4b:61:2d:ef:
8a:c6:c3:94:03:20:e9:20:68:23:3d:33:fb:8d:47:fd:50:32:
bd:4c:f0:46:00:2a:51:75:69:f0:a1:63:fa:6d:62:54:b7:9e:
f9:a8:ca:6f:25:8a:5d:14:76:76:b7:a3:66:2d:f3:31:f3:d8:
c2:91:c1:17:3e:66:9d:eb:dc:c6:93:e4:9f:53:83:73:9e:a8:
81:0f:35:82:b3:bb:af:27:9b:9a:8f:7a:93:67:47:2b:e1:90:
13:d0:ce:de:bf:5c:3e:5d:92:9d:70:3c:87:83:4a:22:f7:3a:
b2:b0:8b:5c:97:ef:44:0e:5b:41:3a:30:ab:ae:a2:3b:54:34:
de:a7:b9:38:4f:51:ca:0c:ac:5d:9a:8b:a2:f1:c0:5d:99:60:
2d:0a:09:b5:16:f9:a6:36:80:85:be:b0:4f:2d:74:69:d9:bb:
38:b5:ca:93:ff:e2:5b:1a:55:c3:01:04:56:73:ca:bc:87:dc:
59:91:6e:6c:cf:ec:32:d4:c5:d3:93:21:e1:e1:2c:2f:83:37:
74:c2:7f:3b:7d:96:75:0e:da:88:41:1c:4d:29:23:6b:4b:92:
b1:7a:91:c1:be:b6:d5:6a:70:0e:7e:df:35:f7:49:4d:41:79:
74:b6:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:03 2023 by rpki-client on console-fra.rpki-client.org