Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XyXhjTwUWfHoSI9ffARymUu2sRA.roa
File: XyXhjTwUWfHoSI9ffARymUu2sRA.roa (raw, json)
Hash identifier: 2ie8k+2lhQVyyemtH7DmbThlpVu8TsXmIWClTKgZZCY=
Subject key identifier: 5F:25:E1:8D:3C:14:59:F1:E8:48:8F:5F:7C:04:72:99:4B:B6:B1:10
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185509CF523858CFEC30AE9BC999F9A8DE4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XyXhjTwUWfHoSI9ffARymUu2sRA.roa
Signing time: Mon 26 Dec 2022 22:45:41 +0000
ROA not before: Mon 26 Dec 2022 22:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26383
IP address blocks: 193.124.22.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:50:9c:f5:23:85:8c:fe:c3:0a:e9:bc:99:9f:9a:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 26 22:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f25e18d3c1459f1e8488f5f7c0472994bb6b110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:aa:24:03:44:50:a9:1c:7e:a8:d6:ee:1e:
7c:51:c6:c4:5b:c8:2f:31:83:7b:0c:0d:2e:9d:07:
9d:d3:17:00:0c:5e:b5:46:69:b3:3f:84:18:29:15:
cd:02:e7:40:93:cd:20:db:4e:ae:cd:21:c7:58:ba:
28:e3:93:1f:09:74:9f:10:75:38:df:3c:f4:0d:7c:
b6:90:27:83:4a:78:5f:fa:b1:2b:bb:69:d1:5b:b0:
2d:37:e6:6c:83:22:ad:db:d7:13:c3:4a:c4:1f:8c:
8d:f7:1e:50:98:a3:9e:93:60:fc:33:cc:7a:8e:a9:
98:3e:1b:01:fc:6d:ba:be:83:5c:c7:d6:f5:fb:4d:
35:5b:e3:4b:4c:94:a4:6a:66:ae:a4:da:75:44:52:
26:77:9f:f5:f0:78:80:43:d7:32:bd:52:a7:29:9f:
29:25:72:3d:b0:32:76:f0:7c:69:4e:cc:82:3c:62:
b6:47:29:66:e7:75:0c:cc:97:a7:8b:25:af:67:8a:
77:ad:87:62:33:79:2b:e5:86:21:a5:a4:0f:29:21:
18:5d:a6:fd:90:5f:b2:ef:97:b5:77:70:22:a1:b4:
d1:f2:27:c1:e7:48:36:2a:26:11:49:a8:93:53:11:
ff:9d:93:c0:ed:28:f4:88:16:96:e2:1e:69:02:cc:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:E1:8D:3C:14:59:F1:E8:48:8F:5F:7C:04:72:99:4B:B6:B1:10
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XyXhjTwUWfHoSI9ffARymUu2sRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
185.72.8.0/24
193.124.22.0/24
194.58.34.0/24
194.87.47.0/24
194.87.189.0/24
212.192.12.0/24
212.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d4:f8:03:6e:10:0e:37:34:a1:ba:a5:05:ea:73:65:4b:15:
37:6f:48:c0:83:57:22:17:12:7d:29:33:6b:05:73:f9:0f:7e:
00:4a:a7:73:92:db:84:8f:a5:4c:54:6e:73:ee:66:41:df:86:
3c:12:8e:97:2a:9b:cb:64:cc:ff:61:7f:fc:6e:0c:eb:ef:a6:
13:df:f0:12:c6:0c:9a:0b:e8:ac:1a:74:d3:d6:d9:79:ee:46:
a4:46:97:37:91:8b:75:12:b4:9b:8f:f5:0b:14:32:38:e2:fa:
0c:21:1f:0f:55:9c:98:69:60:d1:8f:b9:5d:75:53:54:2d:0a:
ff:76:bc:57:2f:9a:1e:60:0c:1d:23:7b:80:10:8f:19:d0:b8:
37:c0:76:e0:0f:87:a3:f2:98:ea:20:45:36:d4:6b:ff:01:13:
ac:fb:07:cd:47:f3:31:89:9d:44:b1:4d:80:83:fe:25:09:d9:
63:3e:18:6d:a0:ee:bd:a5:85:c3:7d:85:74:4b:35:22:fe:38:
e4:0f:2f:ab:64:27:00:31:02:64:c9:95:67:da:ce:d3:00:da:
5a:a8:af:8c:2a:a7:46:ee:91:4d:02:e5:16:73:68:15:03:c9:
98:04:9b:f2:89:0e:7b:d9:d6:fc:14:2e:63:7d:eb:c8:3b:75:
31:71:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:19 2024 by rpki-client on console-fra.rpki-client.org