Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R7Od65TlNFKs_Sc7xPmQ72qlHAg.roa
File: R7Od65TlNFKs_Sc7xPmQ72qlHAg.roa (raw, json)
Hash identifier: 1fElBRM/+EuDZunXlVJ76NFF9aQua+GdY+VyILNL9rk=
Subject key identifier: 47:B3:9D:EB:94:E5:34:52:AC:FD:27:3B:C4:F9:90:EF:6A:A5:1C:08
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183A331717B0FD759B893073D645C2B637E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R7Od65TlNFKs_Sc7xPmQ72qlHAg.roa
Signing time: Tue 04 Oct 2022 13:31:10 +0000
ROA not before: Tue 04 Oct 2022 13:31:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:31:71:7b:0f:d7:59:b8:93:07:3d:64:5c:2b:63:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 4 13:31:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47b39deb94e53452acfd273bc4f990ef6aa51c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:a2:9a:b9:c4:16:4f:96:e0:67:1d:b3:c3:
7c:00:69:60:51:46:57:a8:df:1c:2a:43:bf:c8:90:
8b:d7:f3:f8:f6:e4:42:c2:9b:d7:5b:1f:a0:9d:b2:
13:7f:72:a5:fb:ea:ec:bf:db:a2:65:d7:71:8c:bb:
e5:69:37:d3:43:f0:fb:6a:c5:71:90:52:c0:5b:0d:
93:67:1a:05:7d:c5:6e:56:78:93:2b:0c:0a:96:8d:
63:a0:7c:db:ca:75:4e:43:ba:af:3e:bb:44:8b:8f:
0e:44:8d:28:3c:d9:5e:52:a2:2d:95:4a:7b:50:25:
dc:e3:bb:7c:5b:1a:a3:32:8f:64:cc:b6:c1:ff:63:
08:d3:f2:81:8d:65:bc:cd:12:85:49:a1:2a:4d:46:
fb:85:4f:82:cf:3c:8b:91:9d:3f:13:a5:57:7e:f4:
37:bd:03:db:6d:d7:7d:7a:bf:f3:a7:1e:7d:cd:65:
e0:f6:ba:f6:63:1d:0f:ea:51:47:0f:1f:82:ca:52:
61:30:f7:04:cf:78:14:e6:65:cf:41:9f:a1:6e:ed:
fb:9b:30:20:d5:ce:8d:f6:93:5f:f6:c7:24:7e:92:
7e:c0:df:1f:0b:ba:d4:44:91:59:8a:e0:91:ff:e7:
d9:af:c2:0a:96:3a:4f:54:e1:67:d5:f3:88:b2:27:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:9D:EB:94:E5:34:52:AC:FD:27:3B:C4:F9:90:EF:6A:A5:1C:08
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R7Od65TlNFKs_Sc7xPmQ72qlHAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.227.0/24
194.85.249.0/24
194.85.251.0/24
194.87.165.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ce:09:1c:42:90:1d:ff:b2:e0:bf:ed:54:03:73:32:fa:2b:
85:74:36:b8:b8:69:60:84:0e:05:5e:5c:0b:87:75:20:a6:db:
81:87:dc:f4:01:b0:1d:82:84:6e:05:76:dc:e8:e7:28:91:35:
19:35:55:cc:41:9e:61:b0:b9:bf:fd:93:63:08:b7:46:20:72:
57:3f:c1:b1:ba:d4:22:fe:c1:55:04:ce:d9:55:55:8b:64:3d:
e8:55:f7:72:f1:fc:4d:97:4c:1b:ca:9c:fc:5f:0d:5c:d4:e5:
9c:70:49:c5:1f:28:71:9f:39:e9:2b:c3:91:af:51:5e:1b:95:
34:32:51:8e:e8:c7:4e:4c:99:80:d8:ae:54:15:d4:4b:65:d8:
58:bc:c3:24:b1:92:d8:ed:64:dd:72:66:73:9e:69:06:cd:04:
c4:0f:e1:aa:43:20:ce:95:e9:0d:08:1e:23:8d:a1:2f:bf:21:
cf:a4:a6:f4:54:19:70:75:3c:27:35:65:98:e4:9e:90:b0:26:
e5:db:2b:c9:d2:4d:ef:7f:6a:1a:ce:35:87:12:96:67:14:c4:
b6:88:84:fa:f5:11:50:5e:59:5c:4b:60:01:50:f2:11:3f:82:
c4:bf:62:dc:f4:76:da:07:19:9b:7f:bc:18:85:df:df:d7:19:
14:8c:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org