Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W6L_N73_K8P8ewyl98K4vRh0548.roa
File: W6L_N73_K8P8ewyl98K4vRh0548.roa (raw, json)
Hash identifier: 0aCCwWmU0ZdHe4RAREauZZvN/vhL6KB9G8pYjg7jqrc=
Subject key identifier: 5B:A2:FF:37:BD:FF:2B:C3:FC:7B:0C:A5:F7:C2:B8:BD:18:74:E7:8F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01843281FE7BCB11BE1F2EEAC5C501BE03E4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W6L_N73_K8P8ewyl98K4vRh0548.roa
Signing time: Tue 01 Nov 2022 09:24:50 +0000
ROA not before: Tue 01 Nov 2022 09:24:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 195.133.86.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:81:fe:7b:cb:11:be:1f:2e:ea:c5:c5:01:be:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 1 09:24:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ba2ff37bdff2bc3fc7b0ca5f7c2b8bd1874e78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:5a:c6:49:ae:ae:f3:8c:94:df:f2:cc:7f:
52:f6:5f:6f:81:08:d9:15:81:75:ca:15:20:8b:1f:
a2:8f:e8:68:64:d6:3e:bf:99:f1:97:bc:f2:83:3f:
31:31:ca:04:b4:dc:db:a4:06:9a:93:b5:70:11:b3:
80:e6:c7:57:97:b2:02:53:05:80:22:93:cd:e6:0f:
72:51:2b:ca:0b:e6:a4:36:46:9d:59:cf:92:1e:ec:
60:8b:b2:d5:98:a1:03:a3:b6:de:f0:f6:06:50:9c:
cb:d8:fc:41:8a:e1:d3:da:c3:20:90:07:04:70:b1:
b0:c1:3a:5b:5c:0c:65:c0:5b:88:f4:5f:68:cc:46:
0b:1c:e4:64:72:a0:64:8f:e4:e4:c7:a8:49:d4:fc:
d6:24:d2:3d:0c:fa:f6:05:bb:6e:2b:a8:ac:30:dc:
c4:f1:64:a4:17:8e:39:75:9b:b0:5f:85:91:7e:ff:
ae:8b:3f:ef:09:ad:78:bb:19:2c:7d:89:69:cc:60:
38:1a:49:a9:27:4d:44:17:6f:34:3f:13:aa:ee:89:
c3:c2:5d:b6:2b:76:27:c8:74:23:ce:88:af:e1:41:
2f:72:b4:e5:93:c7:af:f8:0d:75:3e:1e:17:c6:71:
91:a8:18:db:f3:32:f5:97:28:00:28:ae:af:70:b7:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:FF:37:BD:FF:2B:C3:FC:7B:0C:A5:F7:C2:B8:BD:18:74:E7:8F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W6L_N73_K8P8ewyl98K4vRh0548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.73.0/24
194.87.130.0/23
194.87.168.0/24
194.87.178.0/24
194.135.23.0/24
195.58.35.0/24
195.133.0.0/24
195.133.35.0/24
195.133.86.0/24
212.192.31.0/24
212.193.1.0/24
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
33:dc:43:04:6e:76:72:4a:b8:c3:aa:04:e1:e8:e8:a7:29:eb:
05:81:09:44:a0:0d:61:79:bc:49:04:f1:dd:ef:c3:9b:70:a7:
4f:a4:c2:b4:19:15:37:9b:99:04:0f:e6:f5:de:f7:05:8f:9a:
fb:7d:a3:07:12:9a:db:3b:60:13:55:ce:0e:c5:23:82:e5:d1:
ce:65:52:4a:8d:9d:14:72:96:c7:b5:ff:08:d1:6f:6e:2b:70:
93:19:c4:cc:8d:7c:5e:16:f3:b8:0c:55:2f:a9:0e:2b:b4:6d:
1b:59:75:b3:d4:da:86:66:1e:51:bb:f8:47:2a:61:01:96:82:
45:04:73:f6:eb:0c:8d:fb:0f:06:b4:36:19:81:8a:e7:1e:9d:
ed:b0:31:5f:90:a2:06:7e:6a:09:4c:05:15:9d:32:83:72:91:
df:d7:6f:c7:1a:0a:9f:69:1a:48:a9:05:c8:91:0b:76:ad:f2:
c6:49:df:a6:20:dc:8e:71:ff:6f:ad:5d:0b:e1:52:7b:0e:f6:
67:41:3d:20:98:62:ac:c8:8c:3d:be:83:91:bd:0a:f1:f6:af:
b2:b9:ad:34:19:c0:35:38:0e:e8:b8:6c:cc:91:7e:19:e2:2a:
57:ff:3e:d7:4d:1f:ac:56:4f:4d:a3:55:48:c3:cb:2c:5c:5c:
04:b0:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org