Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eT0E7FTCNx80bm2mxagTGRrsoK8.roa
File: eT0E7FTCNx80bm2mxagTGRrsoK8.roa (raw, json)
Hash identifier: kToMCx3iXPF6lKJuR2Gvb6bn93q/R8/0RvhzQF2ItK8=
Subject key identifier: 79:3D:04:EC:54:C2:37:1F:34:6E:6D:A6:C5:A8:13:19:1A:EC:A0:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184C282A9DB3EC9B062EFF40F5EC156C9D1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eT0E7FTCNx80bm2mxagTGRrsoK8.roa
Signing time: Tue 29 Nov 2022 08:30:53 +0000
ROA not before: Tue 29 Nov 2022 08:30:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 193.124.16.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:82:a9:db:3e:c9:b0:62:ef:f4:0f:5e:c1:56:c9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 29 08:30:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=793d04ec54c2371f346e6da6c5a813191aeca0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:97:bc:51:b9:a1:cc:bc:9e:ad:11:c4:04:
75:2a:dc:b0:a2:90:9c:52:ee:4f:f5:98:35:fe:67:
34:83:7e:09:87:47:70:43:9d:ad:4b:1f:06:aa:b4:
28:3a:64:1e:f3:c4:dd:e9:6e:7d:b8:b9:71:4f:b3:
bc:ed:5a:31:cd:a4:a3:6f:db:ac:8f:91:15:0c:fb:
c6:37:c9:03:a8:3a:98:5a:9f:d1:7d:15:b9:32:64:
5e:e2:45:cd:2a:84:0c:10:43:3d:09:e5:00:4c:7b:
3b:8b:57:8f:58:08:69:dc:d3:ba:ac:98:15:fd:39:
67:45:3e:16:f0:72:15:51:57:21:73:a9:dc:e7:a8:
de:e7:1a:8c:4d:1c:3b:ce:de:d4:4e:6e:d8:e7:ec:
22:81:7d:a1:aa:3e:d3:bb:6e:eb:7d:07:e8:6c:0a:
f6:d3:69:44:6a:98:07:31:df:71:d0:95:e5:58:1f:
e0:ee:14:a3:be:5b:d4:6a:5f:b2:c8:93:b6:e6:bc:
ff:23:e3:ce:e5:93:b0:3e:fa:44:86:6e:cb:40:5a:
22:3c:0b:8f:a9:67:61:89:19:b6:46:64:8d:b6:cf:
87:06:93:8e:18:16:73:b4:44:ba:7e:17:e7:fa:54:
d5:08:16:51:59:da:20:cd:b9:76:c0:39:db:82:2b:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3D:04:EC:54:C2:37:1F:34:6E:6D:A6:C5:A8:13:19:1A:EC:A0:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eT0E7FTCNx80bm2mxagTGRrsoK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.190.0/24
193.124.16.0/24
193.124.202.0/24
194.58.47.0/24
194.87.3.0/24
194.87.16.0/24
194.87.22.0/24
194.87.37.0/24
194.87.83.0/24
194.87.177.0/24
195.58.58.0/24
195.133.86.0/24
195.133.194.0/24
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4b:ad:a1:db:a6:48:e8:5e:7c:8c:22:68:bf:1a:ae:f8:94:
88:82:c3:c3:22:6f:b2:df:dc:44:61:e9:bc:ba:8f:e4:66:78:
f1:83:1a:c4:bf:6c:bd:30:f7:a0:41:78:63:b2:2b:ee:a5:b3:
b4:30:4b:d0:af:3a:eb:c5:86:fe:28:05:07:da:8e:61:06:ad:
b5:76:86:43:7e:f0:9e:9f:e4:45:9a:ef:31:4e:50:9d:06:a5:
05:d6:1b:d2:2f:63:87:ef:88:59:3c:03:ac:5e:44:00:b1:a4:
5f:eb:8d:28:e6:0d:8e:2d:0a:67:a6:42:fc:28:9b:af:46:a5:
29:c8:e6:37:74:8f:b2:02:39:b0:07:04:1c:01:d5:57:b2:b9:
04:8e:52:b2:4c:a7:42:eb:14:5b:84:bc:dd:0a:d7:06:cb:c4:
16:36:b9:9b:5a:c7:1e:f5:ea:0a:76:4c:2f:80:5b:c4:36:e0:
cd:9d:77:50:47:09:f3:55:c5:d4:76:48:de:f7:30:76:51:b0:
b1:96:5a:b3:42:60:2b:16:51:e0:e5:47:12:a6:41:4a:0f:d6:
68:ff:ef:5f:16:ac:0e:d1:47:ff:9d:86:a1:ea:f3:01:87:89:
3f:ca:29:4e:d6:d1:94:a3:8c:a6:63:b8:f7:c1:9c:d6:c3:95:
c6:ee:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org