Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S5t5ofoQaqU6ie9vFZYSxiLkz3U.roa
File: S5t5ofoQaqU6ie9vFZYSxiLkz3U.roa (raw, json)
Hash identifier: y+w8prR+F22qFOFbOY3L8cYxsvq12tsDG7YNTIgdJ/c=
Subject key identifier: 4B:9B:79:A1:FA:10:6A:A5:3A:89:EF:6F:15:96:12:C6:22:E4:CF:75
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018452C988AF20DFD4C8842DF35E2D67FA6D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S5t5ofoQaqU6ie9vFZYSxiLkz3U.roa
Signing time: Mon 07 Nov 2022 15:50:50 +0000
ROA not before: Mon 07 Nov 2022 15:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:c9:88:af:20:df:d4:c8:84:2d:f3:5e:2d:67:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 7 15:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b9b79a1fa106aa53a89ef6f159612c622e4cf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:11:6e:59:75:20:11:f9:9e:06:48:37:79:
b3:27:ab:ca:3e:cd:d8:8a:05:da:af:8f:e7:93:83:
09:44:a9:c6:8e:5b:ef:bf:07:6c:5e:8f:41:25:80:
b8:9f:c1:8e:f1:cf:9a:52:93:ba:82:9c:05:61:71:
ee:27:4e:b6:e5:4e:de:fb:5f:2b:53:67:b7:36:b1:
57:4a:9b:6c:46:ed:02:a6:4e:f5:99:7f:ae:a7:7a:
80:16:d3:c8:e1:f4:46:92:ad:d0:8d:ba:7a:f5:44:
7d:ce:27:aa:39:31:2f:b1:1a:7e:9a:55:bd:90:49:
66:dc:68:9e:65:cf:6f:17:61:46:73:49:a1:7a:e5:
31:b0:a5:dd:8d:61:46:01:19:da:7c:0e:6b:ca:9e:
87:f6:e3:ec:08:14:d3:90:03:1e:7f:99:2c:27:f6:
04:f9:07:11:4c:b2:46:c2:20:b2:ca:dd:a9:2c:0e:
7d:f4:28:f6:ff:dc:4c:61:c5:c1:36:30:87:81:b0:
5a:95:27:04:9d:10:64:a9:6e:67:b6:bc:4a:8d:7d:
fe:27:dd:6d:1c:d7:5c:fd:7b:6f:64:f7:21:54:05:
83:c9:d8:bb:9f:98:6a:2b:bc:dd:4a:d1:b8:75:78:
15:2a:9f:15:bb:e5:2d:cb:e3:52:37:92:72:e0:89:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:79:A1:FA:10:6A:A5:3A:89:EF:6F:15:96:12:C6:22:E4:CF:75
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S5t5ofoQaqU6ie9vFZYSxiLkz3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.190.0/24
194.87.37.0/24
194.87.83.0/24
195.58.58.0/24
195.133.86.0/24
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:66:ab:70:0d:32:78:dd:24:77:f3:2e:e6:5f:f5:b7:6b:d2:
3c:cf:ea:d7:d3:c0:9e:a6:d8:67:b0:d0:be:f3:c2:64:29:fd:
74:49:66:da:d4:dd:9d:b1:45:2f:b4:a9:a7:92:da:e2:ec:1e:
cb:c6:ab:6b:10:34:dc:17:f2:bf:e9:2a:f6:bd:55:f6:22:99:
d7:e1:45:9d:fd:8a:3f:93:af:ad:77:6e:6e:45:e1:8c:6f:55:
22:88:a8:a6:cb:40:dc:84:03:e3:f3:c0:ca:aa:70:25:b7:a5:
b7:85:ba:86:d9:fb:70:6b:9e:4d:d8:4e:2f:58:bb:d0:3d:c0:
6b:ec:a1:1b:00:a9:f7:60:2b:91:53:92:83:96:10:0d:63:cf:
ca:73:e0:28:19:76:38:34:c1:47:a3:e7:c5:15:db:e3:21:8f:
5e:c9:e8:45:15:60:7b:2a:d0:66:9f:5b:76:62:2b:28:09:44:
1c:8e:75:56:7b:b0:41:e1:8b:ee:9c:a2:3d:81:d5:68:da:af:
eb:d7:9f:0b:7f:2a:a1:81:33:01:ce:2e:ea:76:0f:f2:8d:19:
99:90:8d:f4:d9:39:9e:b9:6a:15:14:57:a8:e4:47:20:84:05:
00:87:aa:0c:78:35:ae:f7:4b:90:56:c3:7c:b0:0d:bb:a3:e0:
4c:9d:9e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org