Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iCLrk9OC-cNKwGfIXsmSmTIgSdc.roa
File: iCLrk9OC-cNKwGfIXsmSmTIgSdc.roa (raw, json)
Hash identifier: iQpSGFrVO2Pmmwk6nqcVfzG9Qo2XOrl1Y7D75KML1og=
Subject key identifier: 88:22:EB:93:D3:82:F9:C3:4A:C0:67:C8:5E:C9:92:99:32:20:49:D7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F9C0D23
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iCLrk9OC-cNKwGfIXsmSmTIgSdc.roa
Signing time: Mon 02 May 2022 16:11:41 +0000
ROA not before: Mon 02 May 2022 16:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 212.193.30.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261885219 (0xf9c0d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 2 16:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8822eb93d382f9c34ac067c85ec99299322049d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:56:cf:5f:a9:1d:7b:4c:9e:7e:bc:02:d8:
1c:86:40:d6:b3:53:71:a7:d2:ed:d8:6e:b1:81:21:
ce:e8:42:39:29:89:80:89:f2:b1:5c:86:19:fa:d8:
3b:ba:82:68:af:39:3a:71:4d:4f:49:8e:62:e2:c7:
96:24:46:4c:6a:f6:f1:17:1c:50:50:35:46:8d:ec:
2e:5c:46:bf:dd:97:bd:70:66:14:2d:4b:fb:42:d4:
53:3d:8d:b5:b4:6d:c1:10:9c:1e:d6:89:e0:97:56:
8a:ca:33:3d:4c:7c:03:8f:19:f5:ea:38:46:de:86:
d6:c3:33:c7:8f:2d:95:2a:ba:c0:7b:c1:46:aa:80:
7d:bf:ed:4e:65:13:b3:de:1f:f2:b1:05:36:73:13:
fe:58:17:4f:83:e5:51:fc:59:93:97:ad:5f:21:cc:
eb:16:1a:e7:da:bb:e4:17:09:bd:94:d3:fa:71:a4:
72:69:c3:bf:39:57:62:9c:54:29:18:70:fd:56:e4:
1e:60:e6:c7:f1:6e:0a:4d:f2:85:b7:b1:2b:a3:83:
39:f5:38:e4:80:5e:a2:d5:0c:df:d6:99:b2:3e:f4:
eb:65:fd:92:78:07:ed:be:51:29:30:d7:15:71:33:
a2:2d:9a:92:06:b9:4d:65:57:90:3c:3f:e3:a4:1f:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:22:EB:93:D3:82:F9:C3:4A:C0:67:C8:5E:C9:92:99:32:20:49:D7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iCLrk9OC-cNKwGfIXsmSmTIgSdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.75.0/24
194.87.84.0/22
195.133.18.0/24
195.133.35.0/24
195.133.38.0/24
195.133.40.0/24
212.192.8.0/24
212.192.241.0/24
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ca:5d:81:ed:28:9c:13:fe:4c:ca:a7:cf:24:ae:e9:a6:6a:
5f:90:99:7a:65:0a:31:d7:92:cd:78:8f:ca:6d:2e:5f:ba:b1:
a5:bd:48:4d:27:42:2e:67:15:66:03:09:5b:6e:cb:59:f4:76:
c2:d1:4e:bd:0b:33:25:8d:e0:40:c3:8c:32:44:28:9b:3e:02:
51:4a:aa:ea:28:62:aa:d3:48:7f:66:b5:67:1e:36:82:79:03:
71:d5:21:85:c7:79:c6:54:f6:6b:ef:b4:39:8d:49:ea:8b:ee:
cb:96:02:7a:1e:ec:f0:e2:24:33:f9:ec:41:0a:81:44:fd:b3:
a9:ee:0b:28:81:d3:05:e5:bf:42:27:dd:dd:3d:32:cc:a6:d3:
c2:82:e3:39:cf:36:35:99:c4:0f:34:60:5f:5b:12:72:9e:51:
a6:eb:93:c3:88:dc:b6:7c:91:d8:4e:b0:1d:08:cc:1e:34:1d:
b1:76:34:c2:0e:1f:44:e8:ef:ce:97:e6:d5:4a:25:ef:9c:ab:
21:ff:15:4e:b6:67:7f:7b:91:19:b5:d3:0e:ed:57:88:99:89:
e0:b9:af:2e:7b:53:e5:68:eb:29:19:3b:1d:37:7b:d0:d5:3e:
b6:82:3d:aa:72:82:fc:db:67:0a:2f:40:8c:d5:e3:b8:3e:c1:
6b:92:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org