Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aT0LYBChQtLPCS12kINW_GoWA1U.roa
File: aT0LYBChQtLPCS12kINW_GoWA1U.roa (raw, json)
Hash identifier: OnbZGXcrm3zwYyas2pAOR7dzTBgxLR0utv4K8g6fOUg=
Subject key identifier: 69:3D:0B:60:10:A1:42:D2:CF:09:2D:76:90:83:56:FC:6A:16:03:55
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183D60BC3D09D634C0FB32252FA4558A8B9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aT0LYBChQtLPCS12kINW_GoWA1U.roa
Signing time: Fri 14 Oct 2022 10:30:38 +0000
ROA not before: Fri 14 Oct 2022 10:30:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:0b:c3:d0:9d:63:4c:0f:b3:22:52:fa:45:58:a8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 14 10:30:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=693d0b6010a142d2cf092d76908356fc6a160355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:b0:80:74:31:b6:7e:4f:9f:d6:88:15:9b:
b6:04:94:1b:04:9c:2c:e5:3f:2d:9c:b7:94:19:1d:
10:cb:b7:6c:d7:fb:d8:96:e0:8d:05:bb:29:71:0a:
d2:c3:d0:13:67:76:2b:fe:8e:43:1f:27:84:fd:9b:
1f:98:d8:9c:11:dd:65:0d:78:62:4d:02:4d:55:46:
68:8f:8d:9f:58:d2:b5:1f:18:fd:62:9c:2b:e0:0b:
8d:5f:f9:1a:92:46:1b:fe:89:b5:4c:88:ea:ae:ef:
97:9c:30:a7:c2:30:66:c2:8c:52:87:63:27:25:25:
ba:11:4d:60:63:ad:28:27:cd:d6:87:29:a7:56:92:
a9:25:7e:1c:d0:f2:54:54:b5:b6:a3:5a:c7:b4:3a:
0a:25:bb:0c:c4:71:6f:92:4d:29:b4:73:ff:d5:27:
6b:e2:cb:50:3b:2d:a0:69:cf:0c:4e:fa:6c:98:69:
4a:21:95:a6:92:e6:26:c0:8a:6a:e6:5c:26:03:e4:
ce:b7:47:76:52:cc:d4:0c:c1:44:fc:cc:80:a2:28:
f5:84:f8:49:8b:55:66:d6:88:f0:1e:13:7e:b9:78:
f7:48:1a:17:83:d4:fb:12:73:21:3c:7a:8e:8b:b1:
47:43:e9:6a:d1:a1:d1:10:b0:3e:d4:1f:fa:4b:5b:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3D:0B:60:10:A1:42:D2:CF:09:2D:76:90:83:56:FC:6A:16:03:55
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aT0LYBChQtLPCS12kINW_GoWA1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
193.124.16.0/24
193.124.47.0/24
193.124.93.0/24
193.124.125.0/24
194.58.45.0/24
194.87.37.0/24
194.87.56.0/24
194.87.162.0/24
194.87.207.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
63:52:84:6b:49:04:40:72:9f:8c:f6:06:2c:29:ce:25:42:d3:
e1:70:4e:b5:71:a6:52:b4:8d:e4:7a:db:d9:5d:b7:3f:9f:45:
9d:bf:83:4d:00:b4:76:d8:be:4b:a9:1b:fc:99:6d:fb:6e:34:
a6:98:c7:7d:e5:d9:84:16:52:09:a6:28:d9:de:8d:b8:ec:13:
fc:8d:47:34:13:6a:cd:0c:9b:be:28:51:a1:b7:44:bf:46:bf:
46:26:1b:8d:ee:e5:82:aa:11:b9:e3:ab:78:c5:f3:54:f2:6d:
9a:4c:03:b2:dc:ef:11:69:b3:d7:50:7f:3a:78:ac:96:28:2a:
96:5c:1d:49:fd:98:af:95:95:38:01:a7:2e:71:76:22:9e:43:
e2:10:b4:5c:54:70:7a:af:a6:2b:7f:4a:98:01:a7:5b:cb:e0:
04:3d:20:94:b6:64:0a:a0:49:46:4a:c2:0b:4b:29:13:33:55:
ef:b3:06:ea:1c:13:b8:f1:1b:d1:57:40:9b:2d:58:7f:13:a6:
77:75:bd:d8:9f:6d:75:3b:d2:c3:93:2e:8e:9d:5c:58:92:38:
8e:73:2a:e2:41:85:05:ee:ae:38:15:a6:c5:06:d7:fb:c2:6b:
51:52:c9:b3:73:a8:e4:c8:3a:2a:93:8d:aa:a2:cd:35:ad:71:
5c:39:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:07 2023 by rpki-client on console-fra.rpki-client.org