Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R349zsDvScI_50bglcFIAt3i_Nk.roa
File: R349zsDvScI_50bglcFIAt3i_Nk.roa (raw, json)
Hash identifier: z2giTgncrEyZM3ANL+a1DabvNlMZFMWGvn0+r8QDpmg=
Subject key identifier: 47:7E:3D:CE:C0:EF:49:C2:3F:E7:46:E0:95:C1:48:02:DD:E2:FC:D9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01843F83C1F09E4D093ABB8EC35CF413E22C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R349zsDvScI_50bglcFIAt3i_Nk.roa
Signing time: Thu 03 Nov 2022 22:01:50 +0000
ROA not before: Thu 03 Nov 2022 22:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 194.87.218.0/24 maxlen: 24
194.87.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3f:83:c1:f0:9e:4d:09:3a:bb:8e:c3:5c:f4:13:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 22:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=477e3dcec0ef49c23fe746e095c14802dde2fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:1f:71:1e:0a:74:a7:5e:38:ce:d3:fc:63:
f2:79:09:e4:16:9a:c2:99:42:9b:d5:d7:60:61:a2:
38:aa:01:6c:7a:80:9f:e9:de:05:27:78:59:56:95:
1c:a0:ec:34:58:a0:b7:66:99:5a:3d:2a:64:76:92:
1f:53:e9:8e:9d:66:dc:0c:ab:27:04:33:61:63:42:
0e:4c:94:a2:e0:2b:a0:d4:68:9e:91:19:ed:07:21:
28:5d:ee:53:f6:cd:b0:c1:32:53:8f:a0:69:9e:4f:
dd:22:e5:ae:cb:57:ed:ae:0c:cb:50:6a:f9:09:5f:
5b:92:a1:1b:5e:3b:f9:a6:87:85:ab:52:d4:15:2a:
f8:35:72:52:b0:ad:b4:e8:f7:7b:ca:23:d5:92:90:
f4:4c:98:aa:4e:0a:0a:2c:82:86:0b:13:d5:19:4f:
4d:c0:eb:67:6a:5c:bb:72:0a:2c:91:22:45:22:cc:
4d:64:d1:a7:66:bd:9f:db:66:5b:1a:62:c4:a9:ff:
14:ab:50:71:67:ed:f4:f9:08:77:66:72:1f:fc:3b:
a6:c0:c4:03:27:ac:84:80:3f:97:7f:02:0e:34:01:
51:43:f4:a7:b2:2b:3d:f4:70:92:44:36:aa:9c:da:
21:ff:44:30:35:de:77:2a:f3:12:50:d9:6a:72:41:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7E:3D:CE:C0:EF:49:C2:3F:E7:46:E0:95:C1:48:02:DD:E2:FC:D9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R349zsDvScI_50bglcFIAt3i_Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.216.0/24
194.87.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8c:ba:5d:81:c6:dd:89:f5:fa:16:ad:56:fd:af:c9:db:70:
87:44:6b:b5:55:4e:d1:7f:a9:8c:2a:36:b1:c6:a3:5d:77:aa:
00:2b:2f:46:c7:27:0c:80:34:f9:6f:a4:af:66:b2:71:3a:8c:
76:7f:0e:09:67:10:f1:e3:7b:d0:bc:12:08:39:17:f3:7d:18:
d7:f1:a6:c0:82:6f:e2:1d:7a:ed:03:38:3f:5b:f6:17:34:fc:
80:e3:54:8b:e5:2e:55:ab:e9:dd:62:9b:82:84:ec:ca:ee:7a:
e1:8e:1f:97:b1:13:60:70:65:a6:e6:bf:b1:8f:9e:e1:b9:e5:
c1:70:6a:d0:a8:c1:17:38:cb:6e:5d:54:c5:ae:97:1c:28:f2:
3c:33:bd:f1:b3:9e:f7:30:4b:c2:f8:08:d7:05:01:d0:c0:d6:
00:d4:65:b7:49:b7:e8:5f:ed:cd:ba:23:f8:fe:35:6a:19:27:
bb:46:9f:13:91:34:03:ea:0d:d1:75:70:8c:f4:d4:21:2a:f9:
da:5a:8f:ae:ec:82:a2:fa:76:de:c4:9e:e5:68:7b:49:27:34:
6f:07:00:76:4b:12:e1:fc:99:e1:8a:52:81:a1:38:63:7b:47:
55:1f:8a:3a:39:db:a2:9c:1b:4b:98:a7:98:a5:54:a1:ab:d6:
3e:62:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org