Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c-UJu7dKZwNR6ZXMtqmdaZSc9NQ.roa
File: c-UJu7dKZwNR6ZXMtqmdaZSc9NQ.roa (raw, json)
Hash identifier: SP9PvqkvueiypJvVW88LOrGOFNuyHMVRQmU9VK/l9l0=
Subject key identifier: 73:E5:09:BB:B7:4A:67:03:51:E9:95:CC:B6:A9:9D:69:94:9C:F4:D4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01852F22C7A5313EEA278559D9476FD6FB3E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c-UJu7dKZwNR6ZXMtqmdaZSc9NQ.roa
Signing time: Tue 20 Dec 2022 10:44:46 +0000
ROA not before: Tue 20 Dec 2022 10:44:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26383
IP address blocks: 193.124.22.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:22:c7:a5:31:3e:ea:27:85:59:d9:47:6f:d6:fb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 10:44:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73e509bbb74a670351e995ccb6a99d69949cf4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:c8:41:ef:e5:1d:fb:be:b8:5b:6c:6d:6f:
c1:ba:bf:81:f4:38:86:fd:c8:f3:9f:a4:2d:f1:a0:
52:e2:a5:c8:f8:c2:28:16:fd:b0:a1:28:aa:39:00:
39:cb:75:4c:a9:a1:92:7b:7f:cb:42:16:bb:e0:0e:
68:0b:ae:80:76:a5:22:1a:da:70:bb:76:d8:bd:17:
97:6b:a3:da:93:80:88:8f:6b:6d:e6:99:69:1f:a9:
5f:4a:b3:73:f2:95:13:e7:c0:4a:a6:ce:e5:c8:50:
71:8f:26:5c:18:a1:21:2c:64:90:4a:a5:94:2f:07:
16:77:67:53:87:68:bd:f3:1f:d3:05:97:38:d1:90:
89:cb:b7:e4:96:7f:6d:85:bd:6e:a2:c0:c9:84:fb:
4f:01:39:b9:23:82:ab:c7:ef:3e:a7:f4:fb:60:a9:
99:cf:a2:8f:c2:f9:88:c4:52:30:68:4c:09:ae:da:
a9:af:ed:af:8b:ef:dc:2c:45:e9:b1:10:e2:2b:0e:
97:0b:e2:f3:86:81:c2:50:fc:46:df:50:86:21:e7:
c9:17:ac:93:ce:5c:3c:b0:b0:f2:5e:37:e5:9e:0d:
3e:60:2d:3c:3f:12:a1:84:05:fa:68:b5:4e:11:fd:
95:3b:81:50:66:cb:74:d8:ac:6a:ed:04:72:c5:0a:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E5:09:BB:B7:4A:67:03:51:E9:95:CC:B6:A9:9D:69:94:9C:F4:D4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c-UJu7dKZwNR6ZXMtqmdaZSc9NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
185.72.8.0/24
193.124.22.0/24
194.58.34.0/24
194.87.47.0/24
212.192.12.0/24
212.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
13:61:99:eb:3b:28:7a:61:1f:71:4b:33:7d:a9:7d:9d:19:ef:
07:d0:2c:d0:c4:90:11:00:68:cc:3e:82:95:c2:e2:b1:63:f2:
80:16:c2:e9:6b:ba:36:21:db:66:d4:65:ec:bb:28:e5:90:f6:
d4:d9:c1:18:62:52:64:10:f7:9f:29:60:a3:52:04:b6:2c:00:
da:79:5a:de:16:b0:24:22:56:b1:df:13:c0:7a:0a:bf:00:dc:
20:b8:4b:14:22:a1:6a:c8:a6:da:c1:ed:24:f1:d2:3a:85:69:
78:9f:95:bb:8a:55:ba:e6:84:ce:17:ff:4b:5c:e6:90:c4:16:
54:14:57:cd:79:40:1b:5e:06:7e:00:99:0f:c7:e9:66:da:42:
f8:3a:6f:05:a9:74:a6:c8:0d:ff:8c:fb:7c:df:a0:2b:ba:a4:
18:c5:d7:52:4a:ad:3f:e7:cc:aa:75:b3:99:10:35:dd:0c:df:
2b:72:3d:65:bc:5e:75:ca:d5:fb:b8:02:3c:3e:6e:62:13:88:
bd:30:cf:78:b1:b9:0c:21:7e:17:9b:32:ab:ce:7b:02:06:06:
62:67:4d:e9:03:ab:6a:36:f0:40:2d:a4:ba:f9:72:63:e5:a0:
b5:42:91:3d:b5:f8:7e:e5:4c:5d:76:86:f5:ef:5f:61:52:05:
93:c2:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org