Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PvjPYpSpyW7cmtCcHpUGZMQV-Xc.roa
File: PvjPYpSpyW7cmtCcHpUGZMQV-Xc.roa (raw, json)
Hash identifier: c2cln1nJXfS7cPcI5gnkZA/IdGye4V7+eKTiC/8sPBE=
Subject key identifier: 3E:F8:CF:62:94:A9:C9:6E:DC:9A:D0:9C:1E:95:06:64:C4:15:F9:77
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018259D9D184045390442E05A7D2283E654E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PvjPYpSpyW7cmtCcHpUGZMQV-Xc.roa
Signing time: Mon 01 Aug 2022 14:40:23 +0000
ROA not before: Mon 01 Aug 2022 14:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 212.193.15.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:59:d9:d1:84:04:53:90:44:2e:05:a7:d2:28:3e:65:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 1 14:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ef8cf6294a9c96edc9ad09c1e950664c415f977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:c4:ce:3d:4a:a0:26:f6:06:f4:e9:75:7a:
c7:2f:46:da:8a:aa:48:99:b8:21:dc:7a:90:2c:dd:
bc:91:d3:58:d5:38:65:2b:dd:d4:21:ba:7b:32:76:
a5:de:3f:07:1f:cc:a2:65:af:9a:87:93:55:71:24:
e3:f1:c0:eb:0a:7d:9c:51:c3:b6:fb:58:32:ce:ae:
0e:38:f4:a6:2d:90:7c:0b:bb:56:5d:36:ee:23:e4:
ba:b8:68:50:48:94:27:09:ae:52:b8:ac:9b:a6:40:
9c:7d:1c:1b:37:86:ca:9f:12:4d:95:5a:4e:cf:aa:
73:6a:20:a1:5a:a3:60:c0:14:05:10:3b:f9:e8:9d:
3d:05:a9:d0:98:ce:89:e5:26:fa:5a:70:96:c6:b8:
ea:41:43:0b:42:ad:65:8a:54:f9:07:aa:bf:49:94:
ae:95:50:65:34:65:84:42:40:e7:c3:5f:c4:71:78:
10:c1:6e:40:02:07:da:db:08:3f:81:58:c2:e4:c5:
0d:f6:81:9f:c4:66:e8:75:82:df:e5:d7:2c:44:f3:
24:9d:f0:1f:75:bf:4e:2f:79:5b:c5:66:3d:4c:d8:
45:1c:7e:bc:de:ac:5b:7d:05:78:8a:63:98:8f:3d:
a5:d7:6c:1e:64:68:43:df:0e:bb:b1:b7:b9:e4:7d:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:CF:62:94:A9:C9:6E:DC:9A:D0:9C:1E:95:06:64:C4:15:F9:77
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PvjPYpSpyW7cmtCcHpUGZMQV-Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
26:56:8f:17:5d:60:77:bb:52:bb:7d:4c:c2:8e:c0:95:f1:5d:
94:44:de:70:51:44:08:54:76:d4:89:b3:c1:6b:bc:ad:a2:10:
14:c5:0c:00:e1:9b:0d:13:4e:bc:be:0d:3d:b3:4b:f8:d2:76:
d5:c3:57:13:dc:2d:25:1e:98:95:8b:67:0c:b4:39:6a:38:1d:
8b:d6:b1:fb:9e:df:16:44:fc:3c:d3:40:41:c4:55:0f:4f:f3:
b2:3c:48:bd:2b:d8:ce:42:a0:79:f5:99:81:5f:db:e3:93:ad:
c5:1c:21:14:ee:a6:92:80:c8:f7:ae:c3:c1:cb:25:15:73:4e:
9a:9c:8a:9c:e7:6b:12:ce:bd:96:c9:56:43:8e:b5:2e:59:91:
4b:73:79:80:12:f6:41:f0:40:c0:b0:0d:5e:56:b3:de:97:94:
51:61:2b:a4:7d:5e:99:83:89:b9:88:7c:11:32:43:27:77:2f:
02:6d:a1:96:56:76:26:89:a7:2e:03:74:08:75:b5:de:3b:78:
86:20:d7:d3:2e:b7:0c:48:99:d5:15:42:4e:c3:04:6e:72:11:
95:9d:c8:a9:df:b0:6f:a1:67:ce:97:f2:f6:64:f6:46:1f:ea:
c6:85:98:8b:c0:5d:58:a2:0b:3b:b3:cc:a8:49:05:68:26:f6:
9b:f0:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:03 2023 by rpki-client on console-fra.rpki-client.org