Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h9JlXE_qKO5Fnpp5LDaLVLo-Srg.roa
File: h9JlXE_qKO5Fnpp5LDaLVLo-Srg.roa (raw, json)
Hash identifier: uhtvy4kVF5FtspAOWG9i6D8cLb8c57HXoQZhN/WfQxQ=
Subject key identifier: 87:D2:65:5C:4F:EA:28:EE:45:9E:9A:79:2C:36:8B:54:BA:3E:4A:B8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F35152C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h9JlXE_qKO5Fnpp5LDaLVLo-Srg.roa
Signing time: Wed 23 Mar 2022 11:09:34 +0000
ROA not before: Wed 23 Mar 2022 11:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 194.87.204.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255137068 (0xf35152c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 23 11:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87d2655c4fea28ee459e9a792c368b54ba3e4ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:db:ce:bb:15:b6:10:48:41:a5:1e:44:94:
40:7e:dc:26:8e:6a:78:9b:fd:e4:61:dc:1e:35:46:
22:84:84:01:80:6b:b5:17:22:ee:e5:e1:65:f6:d1:
7c:fb:07:0b:b4:d8:08:97:bf:d0:62:7a:47:6b:ec:
59:65:80:cc:22:3f:97:1a:e0:00:25:f7:87:33:70:
6b:fb:11:87:53:9a:02:ed:7a:5d:b9:77:09:c0:bc:
47:50:dd:d8:3c:bc:a6:f6:5c:78:36:b0:93:f8:c5:
14:d1:61:32:26:f1:60:83:a9:17:cd:01:60:27:81:
fb:d8:d2:2d:83:05:2c:a1:e5:c7:8a:0b:08:8b:90:
60:9f:b5:1e:66:f3:10:df:1e:d7:44:56:21:06:8c:
89:70:35:c1:d9:10:16:3b:6b:99:75:47:ba:84:af:
34:36:21:f1:49:3f:c2:b6:81:37:5d:dd:47:cb:1d:
f6:4b:50:9b:37:d0:57:5f:70:8b:df:16:ea:3b:36:
33:8e:36:32:22:b3:51:44:4c:78:91:72:26:1d:3f:
15:c6:48:f7:d6:fa:11:02:fb:5a:17:fe:80:3d:08:
bc:fc:a2:88:99:5e:01:76:1d:b8:3f:30:35:36:b7:
dd:84:43:93:03:52:9d:a6:48:73:a9:5d:93:b9:0c:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D2:65:5C:4F:EA:28:EE:45:9E:9A:79:2C:36:8B:54:BA:3E:4A:B8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h9JlXE_qKO5Fnpp5LDaLVLo-Srg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.8.0/24
194.87.63.0/24
194.87.182.0/24
194.87.199.0/24
194.87.204.0/24
194.87.252.0/24
194.135.23.0/24
195.133.193.0/24
Signature Algorithm: sha256WithRSAEncryption
38:14:1a:c1:7a:c9:c9:18:93:ba:cb:83:1c:19:d5:a9:8b:8f:
b8:56:61:1d:de:f8:39:1d:f0:3f:ea:5b:29:1c:92:9b:99:a1:
cd:c8:f5:25:3e:00:e7:43:46:29:28:40:b8:bb:80:64:5c:4b:
69:9f:71:36:71:bf:d2:40:7b:2f:17:4b:d1:f8:7f:a3:cf:cc:
02:18:0e:d0:80:14:9c:ba:23:18:58:a9:be:b2:db:b0:e0:e0:
b4:7e:8d:23:88:d4:2c:6b:31:2c:7c:16:b0:25:c3:d1:d0:19:
1c:48:44:a4:3c:1f:97:6a:0b:9a:46:4b:62:76:f4:e7:fb:73:
f4:3f:4b:f5:bf:2d:38:7e:e8:c9:0b:62:91:f7:b1:89:ef:68:
9a:bc:54:32:72:f0:41:31:c6:9d:3d:16:da:1c:3d:75:43:77:
66:db:76:da:f7:c2:79:0a:22:99:b7:2f:42:ae:12:ad:4e:b3:
d9:98:b2:4c:77:92:de:8b:9c:54:ab:f4:33:fb:19:a2:bf:93:
af:f7:f3:09:87:62:21:4f:f5:1e:ce:75:6d:28:68:f4:18:86:
01:f9:c0:06:3e:cf:b6:48:78:ca:3d:97:db:ad:2a:13:8e:41:
7a:17:2b:84:7c:e3:7a:8c:b0:5f:d7:8b:bd:da:12:ca:71:f2:
2d:1a:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:09 2023 by rpki-client on console-fra.rpki-client.org