Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jbkULLg9O2D0o_btkPGNIYYIheo.roa
File: jbkULLg9O2D0o_btkPGNIYYIheo.roa (raw, json)
Hash identifier: blrPPRMQ+kbHBjDOI9L2+1yj8dQovg4EiGhqTxVu8Ds=
Subject key identifier: 8D:B9:14:2C:B8:3D:3B:60:F4:A3:F6:ED:90:F1:8D:21:86:08:85:EA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01849ACA3F38529BD9A9AF71DF5C99A0CEAF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jbkULLg9O2D0o_btkPGNIYYIheo.roa
Signing time: Mon 21 Nov 2022 15:24:16 +0000
ROA not before: Mon 21 Nov 2022 15:24:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
212.193.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:ca:3f:38:52:9b:d9:a9:af:71:df:5c:99:a0:ce:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 21 15:24:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8db9142cb83d3b60f4a3f6ed90f18d21860885ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:ef:1e:59:8c:56:27:9f:97:bd:d1:3e:25:
f8:f4:13:9f:27:01:00:47:b7:7e:b9:77:ba:56:87:
c7:a5:2c:f1:1f:5c:cc:be:8f:94:79:c1:a7:da:08:
b7:e2:de:88:f8:43:99:82:c4:86:b9:db:a9:ab:fc:
3a:ea:70:c6:16:04:d7:f2:ae:b1:18:14:cc:c2:01:
ea:12:0c:ad:58:10:93:f1:c2:32:43:15:75:d3:1a:
2a:68:4d:74:73:28:82:65:84:c6:e9:1c:c6:7f:f9:
52:3b:8a:7a:86:03:8f:f0:fe:f3:b9:06:73:bd:ad:
65:14:d7:fd:26:44:84:47:71:be:ec:d7:41:0e:d0:
6a:7d:39:22:fd:5b:0b:5d:08:08:43:44:f2:b5:9b:
dd:a8:5a:61:71:ea:1b:ad:2c:65:71:54:61:b5:57:
96:4e:c3:08:4e:3d:dd:aa:a6:bf:3f:f7:dd:f5:c2:
7b:76:11:48:fd:65:62:73:5e:a2:2a:9e:d5:ce:78:
83:94:99:72:53:2b:89:c8:9c:da:bc:ab:88:2c:6f:
a4:7e:3c:a3:db:21:e6:87:90:a0:04:47:49:31:d5:
e6:96:df:cd:13:37:54:8b:ee:24:84:30:6b:c7:f0:
b0:9d:25:8b:ba:94:88:d6:a6:b7:32:63:6f:e9:df:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:14:2C:B8:3D:3B:60:F4:A3:F6:ED:90:F1:8D:21:86:08:85:EA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jbkULLg9O2D0o_btkPGNIYYIheo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
194.87.35.0/24
194.87.149.0/24
194.87.161.0/24
194.87.227.0/24
195.133.39.0/24
212.192.216.0/22
212.192.244.0/22
212.193.8.0/23
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:55:38:16:0b:a9:b6:72:86:d9:4b:a3:a9:29:f0:30:af:5b:
bc:a6:0a:76:3e:eb:3f:25:50:9b:a9:2b:0d:1c:7c:6c:9a:03:
37:1c:84:6d:67:ce:19:1a:d7:51:1c:03:36:b3:4d:0a:8d:df:
92:f9:06:10:96:38:0b:0b:cf:a4:4c:18:fc:7a:ca:5d:39:be:
f4:5b:cd:24:e7:13:77:53:38:1d:86:f1:85:41:9e:b9:19:43:
b4:e2:e7:1a:da:6b:13:0b:ad:88:95:34:e2:82:8b:c5:84:07:
be:07:3a:99:b5:4f:ea:cf:98:5f:79:0d:a6:a9:11:f7:20:35:
21:ed:1a:d2:98:41:b8:1b:78:25:17:18:82:1a:a5:48:29:fe:
49:cf:c5:fc:f3:2e:aa:f5:62:75:dc:85:10:c7:c7:08:e4:b1:
45:50:1c:dd:d5:0d:e2:27:17:04:17:27:9d:13:b3:7f:a8:d9:
af:24:b9:97:a2:4d:35:89:cc:43:47:b3:55:b6:a6:94:ac:0b:
f9:84:ae:f0:81:6e:dd:ae:b1:37:57:a5:94:70:30:b3:bc:fc:
69:ef:6f:4b:b0:7a:05:4b:41:be:d1:6e:01:79:7d:17:7e:8d:
31:de:29:9d:3c:0a:4a:6a:6f:ef:4e:3b:03:70:88:0e:d3:17:
9c:e2:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org