Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RYBPPUZnhsibQCUzy_N59hSoLrw.roa
File: RYBPPUZnhsibQCUzy_N59hSoLrw.roa (raw, json)
Hash identifier: gTf19jgtN4TnV6uvYC5JTBp5mdKyI8BFK7+TZe8tH5M=
Subject key identifier: 45:80:4F:3D:46:67:86:C8:9B:40:25:33:CB:F3:79:F6:14:A8:2E:BC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182C596E17FB5C573B9AB785EEBCE986702
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RYBPPUZnhsibQCUzy_N59hSoLrw.roa
Signing time: Mon 22 Aug 2022 12:46:15 +0000
ROA not before: Mon 22 Aug 2022 12:46:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
195.133.12.0/22 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:96:e1:7f:b5:c5:73:b9:ab:78:5e:eb:ce:98:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 22 12:46:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45804f3d466786c89b402533cbf379f614a82ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b9:1e:3c:36:cf:ec:f2:7a:e1:78:dd:e7:2e:
42:4b:45:73:92:f7:ff:15:e9:3b:eb:cd:4c:01:80:
99:5d:7b:7d:ee:3c:34:4a:e6:34:46:fa:9e:fa:5b:
50:87:65:a9:6b:6a:dc:c8:99:e6:ce:49:82:86:c3:
72:c9:39:af:37:7b:4d:eb:47:8c:c5:65:3b:9d:27:
d9:5a:17:a3:b4:0d:f8:b3:12:62:cc:17:d6:cd:46:
7e:ba:03:2d:e2:5c:ac:e8:fd:46:a3:74:2e:80:8c:
cf:63:be:20:4c:88:c1:01:5b:a9:1f:dd:9c:6e:43:
8b:40:4e:92:46:65:4b:1a:2a:3b:bf:8a:2e:ed:ed:
75:59:3f:b2:df:e8:fa:ab:9c:b2:de:b0:63:09:50:
67:14:d4:f2:00:4d:14:76:34:47:a6:3b:23:60:78:
26:b6:0b:5c:49:f7:77:b2:78:23:1c:d5:c2:99:ba:
0a:35:99:b2:8d:0d:48:5f:4c:4b:d0:12:ef:b4:e5:
9f:35:18:7e:b0:16:19:e0:e1:e9:8f:cd:10:67:0e:
27:e6:a7:c3:e8:94:e2:a7:ad:fb:c9:8b:90:93:84:
2b:4b:6a:7b:bd:57:77:de:a5:1f:9e:83:79:22:24:
b5:81:e9:ac:62:10:5f:34:bf:1e:fb:57:4b:68:25:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:4F:3D:46:67:86:C8:9B:40:25:33:CB:F3:79:F6:14:A8:2E:BC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RYBPPUZnhsibQCUzy_N59hSoLrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.203.0/24
194.87.1.0/24
194.87.24.0/22
194.87.179.0/24
194.87.219.0/24
194.87.222.0/23
194.135.23.0/24
195.133.12.0/22
195.133.80.0/24
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fb:7b:58:1d:71:ec:4e:d0:cb:b4:8f:96:ca:7a:c8:c9:29:
aa:f9:1a:30:db:73:b0:86:9e:b8:37:65:bb:ef:af:67:bc:13:
a7:69:7f:64:4c:76:29:5d:7a:99:a7:3b:84:94:1f:64:c0:87:
77:ef:15:8f:7c:a8:31:48:68:82:81:50:3e:38:9d:71:68:93:
81:b4:1d:2f:8e:7f:bc:27:b9:ad:b6:c5:a6:a5:e9:f1:15:f6:
47:e5:ab:f2:c4:89:d0:f0:e4:35:af:a0:b3:c5:d6:b5:49:4b:
37:b5:13:20:82:78:4f:6b:0c:35:70:06:93:d4:00:47:92:a4:
73:0c:ff:d2:9a:fc:dc:61:e6:2a:65:ed:56:51:e7:ca:ac:de:
ea:79:b9:5a:23:9b:c5:e4:50:9e:50:9f:d9:2e:14:e3:da:59:
53:13:9a:4d:a9:af:3b:b3:9a:4e:bb:6e:ae:4c:8e:3a:1d:0f:
f8:57:95:36:2a:5d:b3:f2:d8:8d:d3:3d:23:5c:97:4d:2b:df:
4b:cb:93:d9:b8:24:8b:4a:b3:bc:ef:b3:66:b3:01:27:44:17:
00:14:7b:3b:56:3b:69:f6:57:6b:1d:be:df:32:cd:5a:93:06:
08:a8:4f:c7:59:87:07:39:65:b4:71:e5:ac:a7:dd:b3:74:35:
d2:b7:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org