Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ixJT9gmRNGiRni35b0oVYBgzsLc.roa
File: ixJT9gmRNGiRni35b0oVYBgzsLc.roa (raw, json)
Hash identifier: lsbwDdlliZkSAi3ZP7sdOAH2HXidCw/JPQnkNufhfIY=
Subject key identifier: 8B:12:53:F6:09:91:34:68:91:9E:2D:F9:6F:4A:15:60:18:33:B0:B7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01827CED830805D658794A1621ECE01EBBEA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ixJT9gmRNGiRni35b0oVYBgzsLc.roa
Signing time: Mon 08 Aug 2022 10:08:36 +0000
ROA not before: Mon 08 Aug 2022 10:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.193.24.0/22 maxlen: 24
193.124.224.0/23 maxlen: 23
193.124.226.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
212.192.16.0/21 maxlen: 24
195.58.56.0/21 maxlen: 24
194.87.192.0/22 maxlen: 22
212.193.4.0/22 maxlen: 24
212.193.8.0/22 maxlen: 24
194.87.124.0/22 maxlen: 24
194.87.120.0/22 maxlen: 24
212.192.208.0/22 maxlen: 24
194.87.41.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:ed:83:08:05:d6:58:79:4a:16:21:ec:e0:1e:bb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 8 10:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b1253f609913468919e2df96f4a15601833b0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:ee:50:76:53:f6:0e:cb:93:3b:24:01:98:
be:db:d1:44:78:5d:d4:6e:1c:e8:f9:0d:29:ce:b2:
31:0f:63:7e:c7:07:57:5a:1e:ed:2c:bd:f2:35:09:
fd:0d:6f:a0:d7:ef:49:25:2f:3d:5c:a5:9e:07:e9:
64:1e:4b:37:35:14:a1:0a:fd:70:b5:61:87:f9:fa:
55:68:9d:09:6c:1b:5b:2c:66:0d:60:24:6f:9f:53:
b0:6f:c0:6a:b4:71:83:9e:4f:3f:0b:cd:e9:ff:0a:
fb:fc:f5:ed:7c:28:0c:82:7a:e3:46:36:f5:02:34:
2b:5d:89:e0:b6:d9:69:8b:a3:37:09:99:9a:d5:b3:
ea:64:83:b2:da:f9:ea:a8:83:f2:89:f8:1d:15:bc:
88:77:e5:d5:a0:45:41:b8:c2:25:88:9b:35:dd:0e:
74:e5:ce:06:35:99:29:62:f1:cc:d2:d1:08:0a:c5:
3e:b8:27:a8:2d:17:b4:c7:56:dd:03:71:28:c9:2e:
58:0c:dc:13:39:7e:b3:bc:c2:3b:63:a6:50:f3:3f:
3d:70:55:5b:7c:0d:e7:2a:e5:4f:d3:6e:d1:59:27:
59:59:1d:e3:cc:01:e3:08:10:42:a0:7c:9b:86:7c:
d0:c8:26:25:98:68:9c:4c:34:85:1d:5e:e3:f7:50:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:12:53:F6:09:91:34:68:91:9E:2D:F9:6F:4A:15:60:18:33:B0:B7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ixJT9gmRNGiRni35b0oVYBgzsLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.49.0/24
193.124.224.0-193.124.226.255
194.87.41.0/24
194.87.61.0/24
194.87.120.0/21
194.87.192.0/22
194.135.46.0/24
195.58.56.0/21
195.133.22.0/24
212.192.16.0/21
212.192.208.0/22
212.193.4.0-212.193.11.255
212.193.24.0/22
Signature Algorithm: sha256WithRSAEncryption
72:db:e9:fa:a8:02:ec:94:2f:26:bf:85:93:24:b0:f6:33:bd:
db:cb:98:31:03:63:a3:e5:2f:4f:4e:08:4d:37:9f:b2:14:d8:
d0:bc:ce:16:79:15:7a:85:48:9b:c0:6d:89:9f:b8:2a:51:b5:
1e:c5:cc:9a:04:5c:62:5c:c0:9b:7f:52:a7:6b:b0:e7:ef:53:
16:37:74:e9:e1:49:8a:61:cb:5e:ab:1a:6b:30:b4:2d:cb:df:
50:16:2f:84:e6:6d:b3:4f:31:aa:72:00:d4:4e:9a:34:ce:5c:
20:83:d4:0f:35:8e:65:f8:fe:5b:b2:d7:ab:4a:3a:38:6e:2d:
19:0c:44:e3:d8:ff:2d:10:eb:dc:43:d7:91:37:f6:ec:d7:06:
4c:3f:48:42:d7:14:d8:19:fe:61:59:83:3a:30:2c:13:cd:dc:
32:f2:17:bc:de:4c:e9:1b:a2:8a:5f:15:c3:20:02:bc:80:56:
75:f8:14:85:1b:1a:c9:9c:e9:a4:04:5f:38:a1:1c:e9:69:d8:
24:00:41:f7:c4:17:b5:72:6a:a1:f1:ec:44:2c:0e:b2:e9:19:
19:31:ed:95:23:72:16:82:54:58:a3:0f:d6:c7:75:c8:5f:bc:
bb:f0:1f:76:53:0f:62:28:f3:d3:a4:e3:8c:36:22:9d:94:f6:
ee:8a:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:09 2023 by rpki-client on console-fra.rpki-client.org