Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fgBJJtGaqk9saDebOOuTKS9EkEU.roa
File: fgBJJtGaqk9saDebOOuTKS9EkEU.roa (raw, json)
Hash identifier: ZesZ+CAV+Eu82+5rXpPNGzDJwc9L9Cff4X4DQVKdIh4=
Subject key identifier: 7E:00:49:26:D1:9A:AA:4F:6C:68:37:9B:38:EB:93:29:2F:44:90:45
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E2A2AD5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fgBJJtGaqk9saDebOOuTKS9EkEU.roa
Signing time: Sat 01 Jan 2022 01:58:28 +0000
ROA not before: Sat 01 Jan 2022 01:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237644501 (0xe2a2ad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e004926d19aaa4f6c68379b38eb93292f449045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:76:d6:f4:be:64:97:85:73:39:57:75:81:
28:43:49:6f:1a:bc:e8:75:5c:09:b6:c0:ee:62:11:
c7:7e:4e:79:fd:e8:d4:dd:ce:b7:4f:53:aa:4b:58:
a9:48:b3:08:d0:69:5d:c5:0e:71:c5:9a:1b:51:21:
8c:db:b4:ce:4f:aa:19:7a:b5:98:ae:96:48:99:6e:
68:6b:1e:8a:8b:74:fe:14:7d:3f:be:aa:12:83:c4:
f7:aa:d7:fd:b4:a1:54:6a:04:a8:c3:78:8b:dc:42:
db:02:5e:e5:37:f1:a8:7b:69:44:83:77:85:24:5b:
5d:dd:85:f8:c6:02:6d:3a:1f:25:68:e5:d5:a6:2f:
59:41:0e:2a:b2:63:05:b4:30:91:87:8e:d8:ee:ad:
a5:9e:8e:d4:d8:eb:d4:be:67:b4:d8:63:c2:96:f0:
2b:2f:d2:b8:ee:55:85:4d:74:52:f2:9a:73:c6:9d:
2d:a9:0d:d1:f2:7d:f9:2d:fd:5a:5c:e4:5f:e6:c0:
68:7d:3e:94:e3:6a:8d:25:5b:77:79:10:bc:51:7f:
9c:64:b7:ad:a3:69:8e:6b:c2:98:60:dd:49:8e:6a:
25:72:58:a4:cd:4e:17:b9:e9:c0:0f:0d:f9:c2:b5:
20:38:95:df:43:5c:a0:43:34:15:1a:53:76:48:f2:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:49:26:D1:9A:AA:4F:6C:68:37:9B:38:EB:93:29:2F:44:90:45
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fgBJJtGaqk9saDebOOuTKS9EkEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
195.133.15.0/24
195.133.39.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
06:aa:33:d9:0b:57:54:c8:3a:4b:5a:af:c0:45:a0:58:5b:fc:
e7:88:c4:91:b2:1d:de:f3:01:31:a8:22:7e:b2:a5:64:8d:8c:
f8:63:0b:ed:01:a6:d5:e5:e5:b5:b6:5d:01:87:6a:06:d7:7e:
25:69:f6:c1:0b:27:f6:03:f6:cb:c2:c6:3a:76:34:64:09:6b:
15:c2:6e:e9:c1:73:b6:16:eb:81:57:3c:d6:ca:37:e0:2a:58:
c4:e9:64:73:1c:40:24:d3:88:9d:53:58:74:51:bc:e9:f9:8d:
13:b9:20:be:ce:4d:4a:aa:8a:60:8a:08:7b:12:cf:eb:27:5d:
81:41:b6:90:f3:de:02:1f:5f:2a:e3:7e:6c:1f:54:dc:66:60:
81:48:b6:c4:a1:46:34:99:10:1b:cc:0d:0d:2a:88:79:b0:a0:
a5:82:11:17:4a:66:de:f1:13:d6:d5:f8:66:66:8f:3e:38:c4:
5c:0b:e3:f1:49:f2:63:ff:d5:cf:02:70:7f:45:37:3e:d8:7c:
d0:b9:8f:de:e0:52:39:e7:e8:5e:5d:be:5a:5c:93:76:b6:38:
6d:d8:62:c9:5e:c4:15:40:c5:74:49:50:92:8a:ab:83:a1:78:
2d:68:e0:02:a7:6e:40:2e:e9:63:1c:83:6f:88:7b:c4:9e:44:
d6:45:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org