Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PwF6cT-v_1cSNXTIGVjgHuuSGiE.roa
File: PwF6cT-v_1cSNXTIGVjgHuuSGiE.roa (raw, json)
Hash identifier: KOCUeYAy4vC4XsnqkwRvyXzQlUK68+k/xpsqClj2gPg=
Subject key identifier: 3F:01:7A:71:3F:AF:FF:57:12:35:74:C8:19:58:E0:1E:EB:92:1A:21
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184150FC6B12DC4674DCBB4343CA672FE62
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PwF6cT-v_1cSNXTIGVjgHuuSGiE.roa
Signing time: Wed 26 Oct 2022 16:11:06 +0000
ROA not before: Wed 26 Oct 2022 16:11:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.29.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:0f:c6:b1:2d:c4:67:4d:cb:b4:34:3c:a6:72:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 26 16:11:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f017a713fafff57123574c81958e01eeb921a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:11:65:06:e9:99:5a:d3:cf:13:6e:e7:c0:01:
b6:04:98:17:da:f1:f1:66:61:f5:a9:51:2f:f6:a5:
77:a5:5c:36:af:93:bf:ef:8f:3f:b1:a7:d8:58:5e:
4f:20:19:4d:94:e8:84:db:b4:1b:26:34:d0:9d:48:
a9:17:13:e6:15:ca:b8:ba:ea:7f:cd:1c:36:09:cd:
24:2b:8a:31:87:f6:bf:69:c0:0b:fc:b5:83:a9:13:
9a:01:0d:ed:87:c2:9e:38:8d:9d:0b:90:c2:b2:e6:
09:26:b8:3f:bc:79:15:3c:a7:89:57:2c:70:39:01:
00:2b:7f:bf:c5:44:61:54:cf:16:31:d3:73:e8:1d:
64:20:d6:38:59:3c:e1:d8:ea:22:ad:27:f2:3a:26:
f2:c5:7c:c0:82:06:f7:21:65:de:7e:c2:8e:26:17:
20:05:11:0b:6b:f0:78:e8:35:35:c4:c3:ae:1e:e4:
dd:a6:d7:da:34:db:84:ae:32:be:65:5b:a5:ee:77:
be:8f:1f:18:df:ce:0f:b2:2e:62:13:17:35:bd:a7:
c7:b8:3c:11:fc:c0:9b:0c:b0:90:45:8d:88:30:7a:
af:30:a8:ca:e6:b2:55:83:f4:cf:22:0d:29:00:d5:
0a:66:db:78:40:45:75:68:72:a7:e5:db:20:0b:e9:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:7A:71:3F:AF:FF:57:12:35:74:C8:19:58:E0:1E:EB:92:1A:21
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PwF6cT-v_1cSNXTIGVjgHuuSGiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
192.124.188.0/24
193.124.41.0/24
193.124.91.0/24
193.124.93.0-193.124.95.255
193.124.227.0/24
194.58.39.0/24
194.58.58.0/24
194.58.60.0/23
194.85.249.0/24
194.85.251.0/24
194.87.165.0/24
194.87.187.0/24
194.87.190.0/24
195.58.59.0/24
195.58.62.0/24
195.133.13.0-195.133.14.255
195.133.29.0/24
195.133.31.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
195.133.75.0/24
212.192.4.0/24
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
51:55:94:93:7b:30:7a:2a:ee:9e:ff:9d:c3:db:9e:9c:00:fc:
8f:50:1c:d2:69:51:5b:7f:f5:93:bb:00:a1:d5:c2:6d:3f:ec:
67:01:d8:9b:09:9b:9b:29:2f:49:18:02:c6:02:13:ce:92:bd:
88:f9:30:c0:ed:11:60:70:6e:00:cd:0e:7b:7a:8e:35:f7:02:
91:1d:d8:64:33:17:cf:6a:f0:03:3e:24:e6:05:7f:67:fb:16:
cd:d7:ef:87:61:74:63:9e:df:0a:f4:4a:a4:7e:4b:8b:aa:b1:
89:65:b4:68:d4:2b:5d:b6:7e:4f:49:3b:5c:dd:c2:1e:c6:db:
48:fa:68:8f:3b:ea:2e:e1:24:62:ea:4a:0c:20:c1:dc:17:af:
37:e4:13:04:a7:7f:ce:f8:bc:83:a1:22:67:e9:c0:af:b9:91:
53:80:a0:de:fa:5c:f9:7d:8f:ee:18:e1:58:ea:d2:9c:11:90:
05:0f:12:72:3f:79:52:a7:97:9a:14:4c:28:73:97:8f:39:58:
06:b1:09:4f:74:21:53:7a:98:e1:1e:11:c1:19:4e:91:8d:41:
b5:cb:e1:64:35:0c:b8:e3:b2:3c:80:96:a0:55:a5:f0:8e:0b:
42:ac:35:6f:cc:d3:0f:3d:15:cf:4e:83:dd:fa:99:80:b4:3b:
7c:49:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org