Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VopyQpq21zb71r3rMjz4AN0SSik.roa
File: VopyQpq21zb71r3rMjz4AN0SSik.roa (raw, json)
Hash identifier: B/u5EgmipDLhPQIMMLe5azgkBEHC08aMPuLPfms3k/I=
Subject key identifier: 56:8A:72:42:9A:B6:D7:36:FB:D6:BD:EB:32:3C:F8:00:DD:12:4A:29
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184E2835BB953337C27803780DF6ECDFCBD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VopyQpq21zb71r3rMjz4AN0SSik.roa
Signing time: Mon 05 Dec 2022 13:39:30 +0000
ROA not before: Mon 05 Dec 2022 13:39:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 212.192.7.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:83:5b:b9:53:33:7c:27:80:37:80:df:6e:cd:fc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 5 13:39:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=568a72429ab6d736fbd6bdeb323cf800dd124a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:b6:03:5e:93:3f:8d:af:6f:19:2b:9e:a1:
c1:13:a7:45:9b:7a:f6:2a:af:b9:67:91:48:7f:ca:
56:bc:74:d2:ae:57:68:56:42:99:8e:d9:18:43:8d:
2a:e7:c1:11:08:ec:cb:f7:a5:90:76:1f:8c:27:72:
75:a3:c4:1a:9a:6c:5d:f7:cc:50:d0:c4:de:bb:40:
4e:3a:64:d9:a5:5e:55:6c:06:d2:d7:17:0a:b9:dd:
15:85:56:ce:95:16:4e:97:20:c7:5d:2d:81:8d:3f:
02:e8:57:f3:70:36:b9:45:5f:17:cf:02:3a:9c:4f:
e5:73:d7:48:e7:7f:f5:75:b9:3f:ea:9e:34:1d:c7:
59:6b:0e:cb:c4:7e:6f:97:da:45:f8:9c:33:36:48:
ad:5e:32:77:2e:8f:a1:e1:12:87:9a:8e:74:7f:af:
46:41:12:e4:f5:4b:a7:31:44:e3:dc:fc:dd:1f:fb:
18:73:31:dd:fd:3a:34:76:fe:c3:41:e5:a2:58:e5:
12:6c:db:2a:e1:00:fa:75:4b:50:b7:a2:a7:ad:37:
b0:25:5c:ec:80:db:6f:00:f9:22:1d:2e:42:97:9c:
c3:28:cf:69:02:47:e7:45:73:ca:0d:2a:b6:c5:06:
a7:0a:dc:39:ea:5b:e1:90:32:91:9b:9e:47:85:72:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:72:42:9A:B6:D7:36:FB:D6:BD:EB:32:3C:F8:00:DD:12:4A:29
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VopyQpq21zb71r3rMjz4AN0SSik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.181.0/24
193.124.94.0/24
194.58.61.0/24
194.87.180.0/24
194.87.191.0/24
195.58.61.0/24
212.192.7.0/24
212.193.5.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6d:45:a0:2e:a9:b6:ab:8c:e7:6c:ed:3d:84:d6:fb:9a:4e:
e7:cb:0a:66:99:31:66:9d:7f:06:e5:07:69:0b:de:0c:f3:f0:
d6:4d:07:3d:c2:d4:75:d0:eb:3b:a8:32:79:97:46:05:94:f7:
b0:23:53:84:d7:7d:89:90:a3:b2:7f:e3:ae:09:89:79:57:66:
ec:91:3a:b1:e7:f0:30:ff:e1:36:ea:64:88:f7:8d:d0:62:b9:
6c:29:b9:62:ae:aa:10:5e:89:0b:aa:3d:6a:cd:ef:aa:e0:65:
fe:e7:2d:7e:63:c7:7a:17:20:39:2a:38:96:26:ba:99:af:5f:
31:9d:a4:32:9f:c7:55:46:97:77:01:d7:dd:af:56:e4:9f:2b:
b2:ba:06:fa:7c:f2:42:cd:79:ce:c8:15:39:4e:41:aa:47:70:
9f:4d:46:49:2d:44:a2:40:5b:af:b8:86:ee:08:70:dc:ee:95:
b6:62:9b:bc:be:3c:d9:c2:50:74:c4:2a:42:4e:1c:08:90:bb:
61:ee:55:69:8b:7d:20:7e:fb:e9:28:a2:91:29:83:5d:1e:f3:
28:f9:3c:ee:2f:b7:c0:49:45:70:3b:e2:50:64:58:fd:8a:dd:
ed:dc:32:53:66:e4:ac:e8:f4:17:6a:5a:d5:05:20:66:72:dc:
62:65:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org