Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XndHERmjaC7Rn2eGiC1KYVrcgHo.roa
File: XndHERmjaC7Rn2eGiC1KYVrcgHo.roa (raw, json)
Hash identifier: wlfKJPA96KEyhR22z6GLOAk3HUagZROukjni5swY6EY=
Subject key identifier: 5E:77:47:11:19:A3:68:2E:D1:9F:67:86:88:2D:4A:61:5A:DC:80:7A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01830C99B0C325332E758B4399908D0C81EE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XndHERmjaC7Rn2eGiC1KYVrcgHo.roa
Signing time: Mon 05 Sep 2022 07:42:22 +0000
ROA not before: Mon 05 Sep 2022 07:42:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 193.124.4.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:99:b0:c3:25:33:2e:75:8b:43:99:90:8d:0c:81:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 5 07:42:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e77471119a3682ed19f6786882d4a615adc807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:1b:66:e6:8a:63:c6:5f:5a:47:e4:33:69:
92:3f:40:b8:78:34:29:bb:c4:74:ae:d9:ac:97:88:
da:e7:51:4c:78:6c:6c:7e:9c:8c:a2:18:c1:8f:3c:
8d:fa:c3:1d:1a:6f:4e:e7:be:a3:6b:c7:c4:d6:1c:
b2:ed:3c:8c:ed:62:93:65:53:7b:ad:20:95:0b:57:
a0:fb:e1:bc:ca:17:6d:93:d4:8c:b5:0d:51:55:3f:
cb:d6:88:00:56:d6:85:80:d8:30:b3:58:cd:62:a5:
cc:0e:ff:a4:f7:40:3b:b9:0d:c6:63:67:50:12:fc:
d7:df:f4:76:50:ab:c0:82:d1:3c:ad:e7:6f:40:6b:
58:6d:9a:33:3c:45:8f:73:c8:20:cc:6a:cd:10:2f:
a6:27:4b:7e:62:95:a3:bd:07:1f:b2:91:25:a4:d0:
3d:98:d9:cb:e0:1c:e1:2e:81:86:d0:bd:91:27:60:
73:6e:7c:39:d0:a0:7f:69:81:03:f8:b6:f9:1e:35:
d9:c6:75:f2:34:79:b6:d1:b7:21:24:54:4f:9f:8f:
69:ba:bb:39:9c:33:4b:f3:32:e6:cf:82:b6:56:f4:
03:2e:af:6b:f7:68:16:8b:78:f0:ee:8b:6c:11:6d:
b5:2b:26:05:8b:18:02:ac:68:64:0d:70:22:5a:1e:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:47:11:19:A3:68:2E:D1:9F:67:86:88:2D:4A:61:5A:DC:80:7A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XndHERmjaC7Rn2eGiC1KYVrcgHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
193.124.41.0/24
193.124.93.0/24
193.124.125.0/24
194.87.37.0/24
194.87.56.0/24
194.87.162.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
43:52:75:94:b0:c0:a4:9c:db:a4:bf:d3:77:0b:e5:17:e2:d1:
79:49:2a:81:f8:74:db:c6:16:40:14:b1:b7:53:66:46:30:ab:
3a:ae:fa:b8:c5:d8:46:82:39:78:73:dc:93:7f:0c:c4:28:22:
e4:99:64:64:8e:ca:f7:22:00:5a:27:42:ce:02:59:f0:49:20:
bc:2d:c9:5e:6b:ee:bf:b2:fe:24:af:21:1d:1b:fd:ff:9d:b6:
61:e0:9f:b0:e4:72:ba:14:38:7d:ac:1e:90:26:f4:55:fa:d0:
1e:68:44:51:09:93:73:a7:0e:ce:ee:ff:f7:89:0c:42:86:84:
43:f0:5b:29:15:bf:50:29:f5:83:4a:97:d6:91:73:48:32:13:
24:93:4e:7d:a7:24:0e:5a:5b:41:e5:b5:fc:98:87:c2:8f:21:
89:b5:0f:cb:ec:9d:cf:8b:ac:b9:1d:0c:25:8e:b2:df:5e:f9:
6d:23:87:86:92:03:11:24:28:63:ad:31:da:82:ca:16:30:7a:
e6:11:ed:75:52:d7:d4:20:33:07:eb:a8:b6:5a:15:a9:f4:7c:
08:9f:d5:30:d4:6c:05:5f:3f:8f:5e:8a:4c:18:e5:ee:7d:ff:
f8:b5:0e:b7:a7:d7:16:1a:6e:64:3b:2b:e1:85:b1:82:d0:fe:
82:f1:b8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org