Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UaI6zcngXhZS6RQp9grNJEWTKdU.roa
File: UaI6zcngXhZS6RQp9grNJEWTKdU.roa (raw, json)
Hash identifier: LfpOBHFTa+WMObuViZbq7P4m8/cVfpioedmAV+ka34k=
Subject key identifier: 51:A2:3A:CD:C9:E0:5E:16:52:E9:14:29:F6:0A:CD:24:45:93:29:D5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182CAC0E738C4F5CF57E61FCB2DCAD7A579
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UaI6zcngXhZS6RQp9grNJEWTKdU.roa
Signing time: Tue 23 Aug 2022 12:50:15 +0000
ROA not before: Tue 23 Aug 2022 12:50:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 195.133.86.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:c0:e7:38:c4:f5:cf:57:e6:1f:cb:2d:ca:d7:a5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 23 12:50:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51a23acdc9e05e1652e91429f60acd24459329d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a1:a6:34:26:30:49:34:6a:7a:5a:3e:4a:0d:
5a:36:83:00:4b:bd:46:9f:35:b6:5b:8a:e0:68:fd:
b7:53:b1:50:92:1d:64:95:94:d9:14:24:9e:09:13:
03:ca:9b:2b:b7:a0:91:27:13:0f:aa:87:eb:a0:c5:
e0:bc:24:d3:1b:96:89:09:52:28:3d:73:10:ca:69:
c6:78:a1:39:98:21:c2:32:fb:27:22:12:ac:a4:b0:
f5:ee:25:42:df:1a:87:0c:27:48:8b:2b:d1:f0:ad:
f4:aa:a5:ac:2b:b4:9a:50:7c:6c:87:73:65:b8:78:
6e:b6:91:82:b9:e4:31:df:1c:df:b6:19:e8:9a:e9:
45:28:5e:e0:d5:2f:c0:9f:f8:3e:bf:cb:b6:6e:4d:
0e:e4:0a:79:9f:66:25:cd:9c:db:37:50:b5:59:f6:
75:a7:e9:ce:bd:76:82:a4:0d:dd:e5:ac:c3:6e:9b:
4f:82:5b:5e:9b:ad:ca:bf:17:dc:a0:81:10:ca:1e:
0f:4c:3f:2b:ed:f4:c4:7b:29:84:e8:5d:5d:ae:46:
0f:79:35:4d:d0:a8:df:04:e7:d3:fc:f4:ff:31:15:
cf:f1:08:1e:3f:56:b7:eb:b3:7f:53:d1:dd:d0:94:
59:c6:20:3f:22:fa:43:dc:f7:08:cf:3f:ea:36:18:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A2:3A:CD:C9:E0:5E:16:52:E9:14:29:F6:0A:CD:24:45:93:29:D5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UaI6zcngXhZS6RQp9grNJEWTKdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.207.0/24
194.87.73.0/24
194.87.130.0/24
194.87.169.0/24
195.133.0.0/24
195.133.86.0/24
212.192.9.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0b:97:d8:c6:0d:b3:88:f5:1e:d1:66:40:d4:df:f9:27:2d:
54:0b:84:b3:fd:9d:41:cd:09:e5:1d:1c:ad:f1:46:be:01:e8:
f2:36:6e:9b:b5:bc:ca:b1:05:ad:06:ff:3c:e2:92:25:43:27:
ce:9e:a6:03:40:ad:47:18:14:db:6a:d3:5d:59:7d:74:01:02:
86:9b:13:b0:df:10:23:4a:81:c7:31:b5:37:d1:53:4c:9e:c7:
94:4e:4e:95:57:d0:04:96:c6:6d:aa:07:72:f1:8e:cb:08:41:
1f:e3:3d:43:23:be:31:f7:47:09:9f:0f:db:03:83:08:bf:6e:
80:26:58:d9:9d:0b:ba:de:d7:d2:c2:17:34:42:74:18:09:23:
49:b4:a8:c7:8c:64:d2:e1:c5:8d:a3:af:d7:bf:6a:9d:48:52:
c0:3e:99:83:ec:00:5d:bf:3f:21:d4:1c:1e:2b:2a:27:04:cf:
69:6e:50:5e:94:4e:6a:4d:c0:08:b3:2f:75:e2:df:72:c5:fe:
bd:36:6e:32:04:d0:3b:45:b9:fd:77:0d:ff:72:7d:ef:a5:e6:
3e:65:46:81:28:f2:7e:ca:85:f7:ff:a1:e1:1c:3e:a0:02:e7:
55:bf:a6:02:37:f9:4b:66:ab:ba:9b:d9:7c:9c:23:78:f5:12:
5a:74:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org