Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S5iZcizabZqU2L5PuepHuLi_Ues.roa
File: S5iZcizabZqU2L5PuepHuLi_Ues.roa (raw, json)
Hash identifier: 5uGFohhewKHJCcbkclZkv8v0hAps/AZfLGGfjKXSIuk=
Subject key identifier: 4B:98:99:72:2C:DA:6D:9A:94:D8:BE:4F:B9:EA:47:B8:B8:BF:51:EB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 108A38B7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S5iZcizabZqU2L5PuepHuLi_Ues.roa
Signing time: Mon 27 Jun 2022 07:05:40 +0000
ROA not before: Mon 27 Jun 2022 07:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
193.124.124.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
194.87.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277493943 (0x108a38b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 27 07:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b9899722cda6d9a94d8be4fb9ea47b8b8bf51eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e4:de:5f:6b:41:68:5b:3b:50:32:31:51:98:
1b:ec:02:ed:e7:ab:66:f4:3f:93:db:8d:0c:5a:07:
c2:c0:27:75:c6:8d:05:6d:66:19:63:66:99:e2:ad:
05:75:f3:51:7a:73:2c:4f:a6:01:f2:2b:40:e4:95:
dc:59:d8:24:16:0d:ee:78:1f:0a:97:26:dd:d9:1e:
88:30:ce:6d:d1:9e:c7:37:4f:a4:26:61:b4:4d:39:
75:30:4e:e1:dc:a5:eb:7a:6a:07:cb:57:e1:5c:e8:
08:73:9e:64:80:3d:d6:91:45:0a:70:d8:a4:bd:0f:
68:3a:d6:e2:70:d7:da:15:53:d3:b7:05:74:31:15:
cf:cd:fc:42:72:89:31:d9:c1:6a:6c:db:b7:1b:7f:
00:27:e1:9e:0c:c4:bb:7c:17:18:3c:73:29:e0:cd:
b5:a2:03:c4:87:b6:99:06:e6:cf:2a:5f:bb:98:15:
16:20:fb:f8:7e:42:a1:2b:eb:02:29:33:f0:4d:d9:
9d:ca:4b:df:7a:67:47:1e:df:09:32:d6:cb:2f:a6:
b7:13:3c:8f:a0:98:3e:a3:e7:22:65:bf:48:a5:85:
79:a7:47:0a:97:6a:0c:72:e2:07:b1:2d:ea:fa:5c:
b3:ec:52:b2:d7:08:2b:eb:52:ce:5f:5c:5e:58:38:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:98:99:72:2C:DA:6D:9A:94:D8:BE:4F:B9:EA:47:B8:B8:BF:51:EB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S5iZcizabZqU2L5PuepHuLi_Ues.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.41.0/24
193.124.93.0/24
193.124.124.0/23
193.124.202.0/23
194.58.41.0/24
194.87.1.0/24
194.87.7.0/24
194.87.16.0/24
194.87.30.0/24
194.87.56.0/24
194.87.64.0/24
194.87.77.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.254.0/24
194.135.23.0/24
194.135.124.0/24
195.58.52.0/24
195.133.73.0-195.133.74.255
Signature Algorithm: sha256WithRSAEncryption
8a:21:c2:43:e6:c3:e0:e8:07:1d:de:4c:a7:a9:f8:f5:eb:01:
b9:d0:2c:89:ff:ba:d2:0a:8e:61:e5:00:4c:4c:2b:30:56:9f:
be:58:fd:7a:aa:13:74:e0:c1:c1:fc:02:38:05:a6:9f:86:cf:
24:57:6f:0d:5f:e7:30:26:ab:af:a0:a1:bb:1c:b0:5b:66:95:
9c:0b:67:c2:33:a3:1f:c0:3b:8a:68:f4:48:dd:20:1c:05:88:
9b:b7:89:22:ba:6f:39:bf:59:ec:3c:74:a0:fc:de:d3:d4:27:
38:fd:13:1d:3e:17:c8:97:7e:25:95:a4:eb:6a:b2:0a:8a:df:
f8:74:9f:b6:fa:b6:23:d2:a8:77:ac:e1:46:60:d7:8c:50:1c:
16:22:76:f1:9c:76:bf:d7:47:84:4e:6c:73:70:ab:2a:1f:57:
2f:98:8c:69:9b:0f:5c:ff:a4:8c:a7:0b:b4:14:eb:cd:06:4e:
32:7f:c1:e3:f3:0e:77:c2:d0:81:39:9f:30:24:45:7b:9a:12:
32:83:f5:58:9f:8f:a8:b5:35:9c:64:d9:c7:66:86:1d:a7:ba:
2c:31:25:f5:fe:e0:c3:35:a9:62:16:ad:49:a7:bf:01:0d:52:
10:09:82:72:e9:76:ce:a8:49:d0:3e:01:3d:10:19:86:65:e7:
e5:97:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org