Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S0GBQJ_TEaaBu7YQ-wpA0S2eIbk.roa
File: S0GBQJ_TEaaBu7YQ-wpA0S2eIbk.roa (raw, json)
Hash identifier: XAcTBg5lv079Ymuc8bj0aS3ifWP+ZXudXwcf5NaG+mY=
Subject key identifier: 4B:41:81:40:9F:D3:11:A6:81:BB:B6:10:FB:0A:40:D1:2D:9E:21:B9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183E61AAFD1A38B576B23D60B9FC548C7A9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S0GBQJ_TEaaBu7YQ-wpA0S2eIbk.roa
Signing time: Mon 17 Oct 2022 13:20:52 +0000
ROA not before: Mon 17 Oct 2022 13:20:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:1a:af:d1:a3:8b:57:6b:23:d6:0b:9f:c5:48:c7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 17 13:20:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b4181409fd311a681bbb610fb0a40d12d9e21b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:10:e3:7d:18:b8:88:8d:19:3c:70:31:d6:
21:62:62:28:9f:9d:08:69:28:9d:77:ec:8d:34:82:
4d:46:e5:c2:3b:26:c8:3d:c4:b9:27:ba:98:5c:8c:
c0:e5:0d:ba:92:04:b9:74:4c:88:3a:9b:2f:f6:5e:
b2:19:ea:2f:e4:a2:3a:a0:90:f1:3d:3c:43:a5:09:
d0:03:55:3f:db:e2:48:ff:10:1e:d7:76:02:d4:12:
26:aa:03:cf:cb:cb:41:bf:8a:95:8f:6b:2e:78:b1:
bc:b6:00:ee:42:4a:3f:d2:bd:0d:2e:0e:17:bf:9e:
24:e6:6e:6c:61:3f:16:e9:e6:68:b1:8d:75:58:c9:
d6:ca:ec:de:6f:24:37:38:fd:65:60:47:a7:ad:4e:
38:07:31:76:32:68:2b:58:e8:97:24:a5:84:24:1f:
08:40:eb:dd:b1:99:8a:6d:3e:fe:78:ba:c0:5d:5b:
cf:40:c2:28:b0:9e:80:56:21:79:5d:f6:ce:7a:e0:
74:db:1a:6b:cd:e1:82:7b:6a:33:f2:80:fd:27:93:
6f:64:6e:1f:52:90:55:c7:f5:3f:0b:72:9a:0a:aa:
2b:5a:af:ed:15:6f:e7:8e:8f:21:a9:08:b6:0f:68:
80:22:c4:b6:e3:c5:c2:1f:3e:3f:9f:df:34:76:d5:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:81:40:9F:D3:11:A6:81:BB:B6:10:FB:0A:40:D1:2D:9E:21:B9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S0GBQJ_TEaaBu7YQ-wpA0S2eIbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.209.0/24
193.124.3.0/24
193.124.95.0/24
193.124.203.0/24
194.58.45.0/24
194.58.60.0/24
194.87.1.0/24
194.87.24.0/22
194.87.165.0/24
194.87.170.0/24
194.87.179.0/24
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.226.0/24
194.135.23.0/24
194.135.30.0/24
195.58.54.0/24
195.133.76.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
11:89:b6:69:b5:7a:4e:4a:a9:d9:0e:c2:92:0b:9e:21:e4:f1:
28:28:c1:0c:c2:d5:b2:e6:38:fe:29:7b:d5:48:74:8b:ee:ee:
1b:87:d6:8c:1e:0b:82:44:96:dd:3d:3e:9e:eb:63:08:ab:2e:
3f:b7:66:90:ab:ce:5a:87:e9:10:5e:d1:ad:50:ae:c4:94:e3:
5b:20:a2:11:59:52:51:fe:38:b3:f5:44:21:b6:94:79:09:ad:
c7:25:cd:3d:eb:5f:a5:c0:0c:67:ff:84:80:fc:c1:9f:75:f0:
6d:7e:fd:ef:9d:f6:f4:28:69:bd:2c:6f:33:15:77:cd:86:c2:
8d:25:15:28:38:23:aa:4f:ed:a1:f2:b3:32:02:ec:60:00:e5:
f2:d7:cf:10:c4:bd:b4:4b:1f:98:74:f2:76:ca:8e:65:db:72:
e6:f9:e9:d0:cc:53:e6:9b:3c:72:7c:64:e8:68:c5:62:b8:3e:
60:30:53:c3:11:5f:c6:ea:36:2e:31:7b:57:95:1c:64:89:47:
06:7a:90:83:ac:22:89:08:be:bd:f8:67:d8:45:fe:bd:72:5b:
61:21:eb:27:3a:41:31:fb:d7:ca:12:73:fd:f5:f5:3d:98:e7:
e2:2e:f0:25:c4:e4:9d:a1:0b:94:ad:da:28:6a:46:80:fb:bd:
df:a8:92:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org