Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PlocrcBbatWDNxAhHO1npJlXlvo.roa
File: PlocrcBbatWDNxAhHO1npJlXlvo.roa (raw, json)
Hash identifier: WX7pyRrb7nnbJKrqLJt01n3EJYd+vDoxXmGZXmH8Xdc=
Subject key identifier: 3E:5A:1C:AD:C0:5B:6A:D5:83:37:10:21:1C:ED:67:A4:99:57:96:FA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01840FE629EEA5D8ED9A1265187B42CFC56B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PlocrcBbatWDNxAhHO1npJlXlvo.roa
Signing time: Tue 25 Oct 2022 16:07:32 +0000
ROA not before: Tue 25 Oct 2022 16:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.29.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:e6:29:ee:a5:d8:ed:9a:12:65:18:7b:42:cf:c5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 25 16:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e5a1cadc05b6ad5833710211ced67a4995796fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:d1:fc:ab:48:a7:bc:6e:ed:a7:c4:a4:91:
72:5a:79:42:a1:f8:44:b7:f4:73:4b:71:83:87:47:
f8:4f:ed:43:98:14:29:f9:72:1e:0f:48:aa:e6:6f:
f9:e5:94:09:42:d4:45:fa:51:5b:f8:66:1c:7f:58:
40:a9:e8:cd:61:8c:11:07:a5:de:8c:df:db:63:fd:
52:a2:28:da:47:08:ba:97:b6:f0:ef:22:77:ce:26:
03:df:bd:b7:9b:94:51:bf:44:a6:42:ec:b4:d7:b7:
6d:31:05:43:20:ec:2e:e7:1d:ee:31:21:42:6a:5f:
41:6a:6e:dd:13:0a:e5:05:c1:b3:5f:4b:f8:b6:d3:
c5:b0:e0:91:ab:5a:93:1a:2e:b3:0d:0e:b9:e5:7a:
31:25:80:5f:9c:48:25:e9:c7:93:07:fa:aa:14:a2:
fc:84:34:a7:fa:57:0d:c3:49:68:23:e5:79:95:a0:
54:b4:e9:f0:c9:2f:4a:f3:c4:39:5b:39:b7:ba:74:
21:d2:f0:09:64:47:92:9b:55:b9:e9:0c:2d:90:20:
71:7b:6f:df:32:9c:fc:ea:19:51:cb:7b:a3:30:38:
f7:eb:5b:ea:e4:0e:1b:b1:d8:e2:59:9f:7c:75:e6:
8c:8c:41:0c:a5:02:40:a0:2d:63:31:d0:5e:5f:f5:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:1C:AD:C0:5B:6A:D5:83:37:10:21:1C:ED:67:A4:99:57:96:FA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PlocrcBbatWDNxAhHO1npJlXlvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
193.124.41.0/24
193.124.91.0/24
193.124.94.0/23
193.124.227.0/24
194.58.39.0/24
194.58.58.0/24
194.58.60.0/23
194.85.249.0/24
194.85.251.0/24
194.87.165.0/24
194.87.187.0/24
194.87.190.0/24
195.133.13.0-195.133.14.255
195.133.29.0/24
195.133.31.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
195.133.75.0/24
212.192.4.0/24
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4c:e4:7d:d8:d4:84:29:3c:78:6e:33:33:df:3f:62:b9:86:
c7:df:00:ea:9b:80:de:33:1d:e5:44:c8:7a:fc:f3:44:b9:8b:
0e:63:e9:5a:3c:6c:b6:35:7c:a7:f3:f6:73:ca:c6:24:93:ee:
ad:7f:6d:1b:ba:64:d8:8d:d2:a6:0c:3b:3f:a6:ed:cb:b4:dc:
7e:80:e2:67:0f:31:11:33:81:42:88:db:26:42:13:fd:cd:49:
39:36:74:5f:93:ba:64:f3:35:1b:c8:d3:80:14:fa:ad:4a:2c:
b7:fd:13:cf:c7:61:ab:d5:3a:39:62:b0:59:6e:fc:e1:79:de:
60:b5:fa:3c:a9:46:82:ae:6c:4b:4e:5a:77:c1:88:e9:05:3f:
ae:6f:1e:e4:27:ea:5c:90:5d:39:2b:ab:0f:95:c1:be:45:8d:
65:6a:bb:fd:8e:ef:46:b8:4a:24:8b:b0:91:55:8a:a4:ff:86:
8e:d4:31:58:36:66:2f:26:47:a8:45:c7:82:a9:96:35:68:1a:
c7:1e:2d:62:24:f2:84:fa:a0:f8:df:c0:61:4f:3a:ce:81:8d:
8e:6d:c6:8c:cc:f4:07:e8:fd:fc:c0:60:0a:16:2c:b2:6d:72:
a3:b2:4f:cc:db:c4:85:7e:a3:17:c8:99:1e:f2:4a:0c:d5:2c:
3a:1d:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org