Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/exC2AcyBVLCjq27rclfXs3DhBBs.roa
File: exC2AcyBVLCjq27rclfXs3DhBBs.roa (raw, json)
Hash identifier: h2dndWDX9cFnl8Inv4aBVztrMWz6Y0inczDnHzA0ND0=
Subject key identifier: 7B:10:B6:01:CC:81:54:B0:A3:AB:6E:EB:72:57:D7:B3:70:E1:04:1B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01825EF446C2CEC506D4D4A41C86A53BC76C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/exC2AcyBVLCjq27rclfXs3DhBBs.roa
Signing time: Tue 02 Aug 2022 14:27:23 +0000
ROA not before: Tue 02 Aug 2022 14:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.32.0/22 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.87.116.0/22 maxlen: 24
194.87.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:f4:46:c2:ce:c5:06:d4:d4:a4:1c:86:a5:3b:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 2 14:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b10b601cc8154b0a3ab6eeb7257d7b370e1041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:bf:6c:56:a4:16:05:d0:47:09:c0:d3:c6:
00:ff:6b:51:b6:64:01:4e:87:41:6c:8d:18:f1:dc:
9f:77:74:a9:76:2b:80:9a:6d:8c:5f:28:a0:5a:4d:
ac:4f:3a:64:60:d3:e5:d9:c4:2c:4d:4f:b6:46:26:
72:ab:6f:d9:a6:12:ed:4e:5e:6a:b1:f1:79:19:72:
aa:e5:f3:f6:07:c9:4a:08:4e:1a:ac:1f:62:fd:eb:
20:d4:d8:97:ef:13:60:11:1b:c2:7a:94:96:23:39:
ba:a6:33:86:7d:f5:fe:d5:88:56:20:e9:a3:47:1e:
4c:6e:fa:63:aa:69:eb:f5:01:63:93:fc:bf:dc:c0:
55:a5:10:e8:24:82:40:ac:a7:ac:64:d1:f4:67:d6:
3c:31:8d:b2:28:28:8c:87:f9:b8:4d:77:a3:4f:c8:
81:f7:a8:7c:b7:df:03:b4:3b:02:28:d9:49:cd:42:
1b:97:f2:20:db:01:f6:52:45:db:e7:31:9c:e5:a5:
f0:20:d8:0f:90:c4:9a:8b:fe:12:a8:62:98:f1:b6:
ae:ce:39:08:f6:ee:57:c5:2f:66:e2:d6:65:2d:ce:
b0:ef:a3:a3:31:ab:4b:25:30:ed:c7:aa:45:7b:5a:
d9:aa:f7:d2:57:85:37:c7:d2:e8:fe:11:b9:b6:06:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:B6:01:CC:81:54:B0:A3:AB:6E:EB:72:57:D7:B3:70:E1:04:1B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/exC2AcyBVLCjq27rclfXs3DhBBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.203.0/24
194.87.1.0/24
194.87.24.0/22
194.87.32.0/22
194.87.64.0/24
194.87.116.0/22
194.87.179.0/24
194.87.187.0/24
194.87.219.0/24
194.87.222.0/23
194.135.23.0/24
195.133.77.0/24
195.133.80.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ca:e4:d4:00:c6:60:3e:ab:4a:3d:1c:b5:da:20:b4:5e:4c:
24:54:08:b5:7c:68:7c:89:6f:6a:1f:95:83:1a:e3:7b:f9:c4:
b8:1b:73:fa:12:01:04:93:29:81:56:71:ab:28:1e:48:42:12:
8f:f8:3f:57:7c:fe:db:b0:c1:36:26:db:03:10:2e:f3:9a:75:
5e:0f:62:c2:2e:db:6e:59:cf:56:3a:83:74:9e:9e:42:7f:88:
b8:cd:05:95:70:f9:c3:41:f2:99:15:7d:7c:1f:02:b9:f2:0d:
4d:75:fb:ac:08:90:6d:b7:cb:6d:9c:20:89:97:d2:d1:f4:45:
f7:26:37:2e:00:ca:05:7c:ab:1f:0e:b8:9e:79:69:18:13:c9:
3d:de:ed:ba:03:a4:96:c9:9c:d6:f0:d2:a1:43:e8:fc:11:8e:
c5:99:7d:f2:91:e8:f9:70:42:b0:d2:c3:a6:48:20:ad:f7:b7:
fe:99:ca:34:42:67:3d:cf:ee:1e:d2:bf:55:6a:af:1a:f5:60:
b3:d9:e3:61:a6:07:f8:63:79:ae:a4:b2:80:3d:4c:9e:b8:27:
b6:91:3d:5f:19:03:46:fe:37:65:65:4b:a4:15:2d:11:5c:13:
c2:24:16:76:a5:6e:a7:9f:8d:15:36:2b:d4:19:fb:7c:ea:28:
c7:6f:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org