Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RdBTdmM-O7wjX2Qxz01CikaFGMQ.roa
File: RdBTdmM-O7wjX2Qxz01CikaFGMQ.roa (raw, json)
Hash identifier: iOHdECYlz79z5vt1t+N3H1Y+gsGMyLaNP8Peh1xSYgc=
Subject key identifier: 45:D0:53:76:63:3E:3B:BC:23:5F:64:31:CF:4D:42:8A:46:85:18:C4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182CA1A465D60E99FDCBAAE7D3BD2DE423B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RdBTdmM-O7wjX2Qxz01CikaFGMQ.roa
Signing time: Tue 23 Aug 2022 09:48:15 +0000
ROA not before: Tue 23 Aug 2022 09:48:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
195.133.12.0/22 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:1a:46:5d:60:e9:9f:dc:ba:ae:7d:3b:d2:de:42:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 23 09:48:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45d05376633e3bbc235f6431cf4d428a468518c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:7c:5b:7f:28:2a:bf:bd:94:b0:56:65:bf:
03:bc:02:f2:2f:ed:df:73:08:66:2a:09:d2:c4:56:
87:65:b6:f7:3d:a7:b5:70:48:5b:32:2a:b8:b4:9a:
fb:c3:d4:35:13:c6:87:cb:aa:24:69:c4:a5:0d:e7:
ef:8a:f6:51:99:f7:76:c6:b1:10:8f:b7:e8:eb:a1:
7e:c9:36:2f:c5:8b:a0:f5:b4:99:61:5d:5e:ca:2f:
fb:ba:4a:aa:b8:11:1f:f5:9b:84:32:11:49:49:dd:
bc:29:1f:d3:f0:9b:8a:56:85:a0:c0:f3:3f:49:30:
b6:15:55:89:fa:7a:7b:59:83:fe:cb:0f:6b:41:4b:
4f:ca:04:bf:db:fa:ac:e6:6b:af:22:e9:6f:46:42:
00:5e:8d:30:38:ac:e2:b1:ac:03:90:72:e9:e2:ac:
2f:77:86:5a:d2:4f:dd:71:39:74:19:6c:fb:bd:8f:
eb:76:95:fe:cd:73:85:4c:f4:02:9d:49:82:c0:a1:
0c:31:cc:f4:0e:17:7c:b5:80:76:dd:b5:2d:49:c1:
8f:7c:85:dc:7f:fc:60:b4:3b:98:fc:2c:ca:13:a3:
06:13:98:f9:75:1d:ec:a7:0b:a6:1d:ee:1f:da:84:
b0:7b:13:3f:17:3a:61:d5:f2:03:b9:f3:8e:01:c3:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:53:76:63:3E:3B:BC:23:5F:64:31:CF:4D:42:8A:46:85:18:C4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RdBTdmM-O7wjX2Qxz01CikaFGMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.203.0/24
194.87.1.0/24
194.87.24.0/22
194.87.179.0/24
194.87.219.0/24
194.87.222.0/23
194.135.23.0/24
195.133.12.0/22
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
27:94:15:6f:a9:6e:2b:69:e7:30:0c:9e:6e:59:18:e0:8c:e4:
a3:4a:16:8e:81:d7:5b:7b:46:ae:7c:52:27:25:95:72:b6:f3:
b2:38:7c:a9:d9:09:d9:ee:aa:bd:85:18:aa:84:19:80:52:48:
0e:88:47:b4:48:f3:9b:a8:a7:a8:8f:e6:29:e8:d8:8e:f9:fa:
1f:1e:f5:83:f2:ad:95:d6:2c:b5:96:0b:72:db:34:bb:7a:b3:
57:2a:26:74:21:cb:a4:e5:e9:a0:a9:74:98:df:a0:bc:83:70:
70:fa:6e:6a:56:37:76:f8:8f:cd:73:23:21:be:c7:f9:06:1a:
17:2a:3f:5f:52:0d:82:7e:4c:a6:24:1a:25:a7:34:df:33:fd:
4b:e3:6f:e7:8f:b2:da:67:c8:c1:10:03:7a:9c:34:a8:e0:7f:
91:65:27:34:f0:a1:45:a0:62:22:76:07:5b:ee:22:76:26:58:
32:26:6e:d2:6c:91:98:6e:03:ab:56:ed:4d:9a:06:4e:a2:85:
e6:9d:82:6f:d3:93:a8:6a:6d:bd:c5:ec:dc:c1:b5:bb:8d:aa:
9d:15:7f:21:de:66:54:c7:03:7a:bf:f6:77:24:8d:57:43:03:
26:94:fd:ba:56:12:76:b4:5b:87:86:80:6b:27:3d:d4:bf:16:
ea:93:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org