Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YiWnUJJFv1RoWZe86Yv4AqtWcxU.roa
File: YiWnUJJFv1RoWZe86Yv4AqtWcxU.roa (raw, json)
Hash identifier: CpuPfQJ7XmzWZK6MvTYWFemI5BKKPrdgn+91OyhVdiw=
Subject key identifier: 62:25:A7:50:92:45:BF:54:68:59:97:BC:E9:8B:F8:02:AB:56:73:15
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184C29871EB3586E33F480D713545383296
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YiWnUJJFv1RoWZe86Yv4AqtWcxU.roa
Signing time: Tue 29 Nov 2022 08:54:41 +0000
ROA not before: Tue 29 Nov 2022 08:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.29.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:98:71:eb:35:86:e3:3f:48:0d:71:35:45:38:32:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 29 08:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6225a7509245bf54685997bce98bf802ab567315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:58:10:a9:3f:d4:94:a1:c5:e9:77:ed:af:
3c:42:ad:4f:66:1e:b9:ab:49:f1:91:b5:5e:d6:16:
33:d6:4c:8a:7e:19:52:a9:0f:64:f8:8a:38:b0:f1:
2b:81:b7:dd:8a:ff:76:3c:6a:d0:5c:51:1a:16:e9:
3f:8b:1e:87:5a:82:2f:f1:44:81:2e:fd:80:dd:cd:
a9:b8:f7:6c:90:eb:ce:5d:63:d0:84:d3:6e:14:1b:
61:c2:29:03:21:c9:b7:dd:07:97:e8:8a:e2:18:17:
db:f3:e8:9b:96:a0:d8:a8:0e:1a:f0:80:5e:2b:d0:
1f:b0:4a:da:ff:0c:f8:f3:ee:b0:a8:46:45:10:38:
68:a1:56:c3:87:a2:a2:73:23:a3:6b:fa:26:7c:65:
88:61:12:60:f2:61:ad:14:29:64:7d:58:2e:be:e9:
38:35:50:16:f9:f1:43:be:19:d2:5e:cc:b9:c7:a0:
a4:12:25:85:f8:ff:90:52:fd:5b:83:0b:78:c3:bb:
b6:84:7c:b7:62:85:42:cb:14:59:16:3c:2e:d9:40:
66:8c:40:60:44:95:ef:40:49:aa:02:65:a6:3d:c2:
f0:d1:ea:de:ce:f5:cc:d5:bf:73:88:5d:0b:5c:c5:
ac:7b:7b:f3:7e:39:d9:c7:4a:31:7a:a6:64:a5:29:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:25:A7:50:92:45:BF:54:68:59:97:BC:E9:8B:F8:02:AB:56:73:15
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YiWnUJJFv1RoWZe86Yv4AqtWcxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
192.124.188.0/24
193.124.41.0/24
193.124.91.0/24
193.124.93.0/24
193.124.95.0/24
193.124.227.0/24
194.58.58.0/24
194.58.60.0/24
194.85.249.0/24
194.85.251.0/24
194.87.187.0/24
195.58.59.0/24
195.58.62.0/24
195.133.13.0-195.133.14.255
195.133.29.0/24
195.133.31.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
195.133.75.0/24
212.192.4.0/24
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ec:5f:78:62:b0:27:1d:6a:a9:ca:47:7c:b8:cf:7e:0d:bd:
21:40:95:b9:f3:f6:54:22:d9:5e:7f:a4:54:cf:60:53:55:4f:
64:4f:6b:4a:01:cc:97:07:c9:45:06:5f:a0:f8:be:ee:ef:ab:
9b:b8:6f:14:0c:e7:1c:22:4a:ce:30:51:b8:f5:ef:b9:73:9b:
fd:c5:25:c3:45:8e:15:06:bd:65:65:0d:b6:f4:4e:f1:28:a7:
f8:8d:02:62:aa:33:cf:1c:2e:3b:73:57:b3:fd:10:5c:b1:1a:
12:78:fb:ce:41:90:23:ac:1f:a8:bf:b8:28:d4:20:dc:5a:ec:
a5:80:47:43:c3:18:79:ed:19:46:0b:3a:1e:9c:96:00:e0:8d:
32:24:79:4f:b2:aa:8b:f7:93:0c:fa:06:77:51:69:f3:4e:5f:
5e:31:f0:f8:f4:5e:4c:38:15:88:ff:f3:8b:76:13:e6:a8:e8:
37:53:71:fb:b3:47:ef:0e:9b:86:c1:4c:b5:82:fa:59:9d:77:
b6:65:83:83:80:09:52:55:74:ca:e9:25:f3:05:45:ee:5e:a4:
9c:5a:41:45:2a:1b:5b:d9:df:1a:de:c2:c7:6c:a0:dd:bc:ee:
bf:5a:db:76:da:6e:70:99:01:51:e3:42:56:1f:51:55:31:5f:
6a:3e:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org