Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cKRLmQi6ZeSMXFpY5PSM56VVH_c.roa
File: cKRLmQi6ZeSMXFpY5PSM56VVH_c.roa (raw, json)
Hash identifier: KU9ddLUemCvidSeZdYCd2G3tMUrfgoL4OflDRsh4NQY=
Subject key identifier: 70:A4:4B:99:08:BA:65:E4:8C:5C:5A:58:E4:F4:8C:E7:A5:55:1F:F7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0181D83F30E1E7F0F7213B8A78FFAB59884B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cKRLmQi6ZeSMXFpY5PSM56VVH_c.roa
Signing time: Thu 07 Jul 2022 10:40:28 +0000
ROA not before: Thu 07 Jul 2022 10:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 195.133.73.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:3f:30:e1:e7:f0:f7:21:3b:8a:78:ff:ab:59:88:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 7 10:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70a44b9908ba65e48c5c5a58e4f48ce7a5551ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:12:9f:fc:d4:c8:46:28:c7:eb:30:8e:41:
32:a1:59:a0:25:75:aa:f8:e4:04:5f:71:db:3c:bb:
21:c5:6e:15:1c:06:e6:10:66:8f:ee:bb:f2:3a:ee:
e9:47:81:77:e1:55:54:fe:55:8d:f1:7a:83:90:88:
38:c6:2f:02:5b:02:93:77:f3:f7:42:76:00:1a:44:
45:9e:cd:9b:55:01:c6:ee:e2:34:1f:7e:55:0d:85:
8a:7f:4c:e3:4f:90:c6:cc:9f:35:f6:a0:9a:62:8c:
62:eb:42:c1:9d:ac:06:48:3c:6a:b5:b4:a9:d1:83:
01:eb:30:6f:dd:7b:14:37:83:75:2c:eb:cb:7f:0f:
59:be:c1:31:b5:23:81:54:26:86:f5:ba:83:c5:cd:
3f:60:1a:f7:a5:33:6c:b0:e1:65:ed:e9:99:a6:49:
86:b9:a7:61:50:7e:d4:f0:d4:f9:7e:67:13:1e:55:
70:c9:04:d3:91:97:3d:cf:79:40:4f:3c:63:d2:12:
89:f2:ae:59:c5:c1:d3:37:67:4b:ff:e3:d1:f7:46:
20:da:e3:ca:05:b1:a3:f2:e6:dd:89:b9:7a:47:79:
71:72:fe:40:19:6d:75:a7:de:a2:83:1e:33:1b:bf:
1e:26:02:b7:1d:b3:16:66:3a:05:60:41:5c:7b:25:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A4:4B:99:08:BA:65:E4:8C:5C:5A:58:E4:F4:8C:E7:A5:55:1F:F7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cKRLmQi6ZeSMXFpY5PSM56VVH_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.203.0/24
194.87.1.0/24
194.87.7.0/24
194.87.16.0/24
194.87.30.0/24
194.87.64.0/24
194.87.166.0/24
194.87.179.0/24
194.135.23.0/24
194.135.124.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fb:d0:7d:f9:ea:0a:b3:1f:1e:96:6e:a1:c8:0e:ce:a5:97:
da:5e:40:2c:26:4f:5c:f0:6b:f8:d6:9a:b3:e8:37:ec:be:64:
0b:40:e0:c6:a6:d5:7b:e6:2c:78:a5:37:5d:80:b6:eb:4e:b4:
e3:82:fd:10:8e:af:c5:ac:33:b0:4e:ff:e0:df:b1:5d:62:a2:
d8:0f:35:6a:e5:26:2b:9d:81:b6:0b:3e:1b:91:63:eb:72:3e:
be:8f:03:05:86:6f:fc:d2:59:98:5f:ff:21:f3:a8:87:56:ca:
02:a8:a8:1f:b0:25:9b:86:68:c2:4c:a6:12:dc:60:fe:a5:78:
57:49:b6:48:44:34:06:2b:6f:37:9a:83:64:87:23:f9:f4:15:
16:1d:30:97:59:da:b8:9e:64:40:0f:d7:86:8c:30:08:95:51:
59:b7:18:d8:c8:72:08:d2:2b:bc:cc:5b:4b:fb:29:54:d9:c7:
ec:2d:00:b7:8f:29:e4:c3:86:61:40:26:f3:47:18:44:3a:f5:
d6:ee:92:f6:54:6e:cd:d5:96:35:c3:72:46:8b:b1:c3:59:85:
62:35:d2:26:ea:05:6b:81:11:75:26:55:52:a7:d9:e3:ff:74:
2b:5c:a0:53:01:fa:4a:8f:db:e4:34:2c:1c:4b:74:29:a0:f7:
32:45:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org