Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oSLHniR3blRPYUPB4nPM1QUWnvw.roa
File: oSLHniR3blRPYUPB4nPM1QUWnvw.roa (raw, json)
Hash identifier: fhKMv5Ef88wFVxGT253excvYCjJdEwMDyr/L3cWoTiU=
Subject key identifier: A1:22:C7:9E:24:77:6E:54:4F:61:43:C1:E2:73:CC:D5:05:16:9E:FC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184993EBBEC7E4EEC5695A48A0AF71EE1B4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oSLHniR3blRPYUPB4nPM1QUWnvw.roa
Signing time: Mon 21 Nov 2022 08:12:16 +0000
ROA not before: Mon 21 Nov 2022 08:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210974
IP address blocks: 212.192.3.0/24 maxlen: 24
212.192.2.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:3e:bb:ec:7e:4e:ec:56:95:a4:8a:0a:f7:1e:e1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 21 08:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a122c79e24776e544f6143c1e273ccd505169efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:d1:be:19:53:4e:80:fc:0c:3c:67:78:90:
f7:ca:2c:0f:8d:f3:65:06:17:9e:34:52:f2:1e:02:
67:cf:a3:36:c4:88:58:84:94:9e:59:5c:45:44:20:
f7:15:b1:d9:a6:b0:b2:2b:af:84:19:67:3e:34:b4:
9b:bb:2a:84:76:18:cb:bb:5c:bc:be:91:bd:ab:29:
a7:7c:b1:5a:26:ba:70:23:69:96:64:51:56:28:1b:
a7:7a:eb:37:22:4c:a2:85:1e:f1:c4:28:a7:3d:db:
19:94:10:b0:c1:11:ac:98:59:db:ed:64:0a:d6:a2:
3d:f7:2a:95:fd:ba:a5:27:20:cd:1c:a4:59:e8:da:
b3:e9:52:ae:13:14:66:e7:a9:0f:d3:0b:dd:d7:1b:
68:6f:82:b1:8a:52:11:8c:be:ae:d7:1b:d8:f7:f7:
a8:45:32:bc:fe:c4:cc:de:a8:3a:86:af:e1:50:4a:
06:6b:fd:11:75:35:87:81:9f:6f:65:87:08:20:01:
f2:4b:c2:3d:d9:ae:f3:eb:6b:ef:53:22:f3:ea:19:
46:46:af:cc:93:fc:93:70:6f:2b:00:7f:a8:3e:0d:
fc:18:15:17:28:dd:b6:bf:e8:d4:cc:a4:c0:09:98:
15:38:8e:90:ed:5e:d7:26:9f:f4:4e:8f:11:d1:84:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:C7:9E:24:77:6E:54:4F:61:43:C1:E2:73:CC:D5:05:16:9E:FC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oSLHniR3blRPYUPB4nPM1QUWnvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.60.0/24
212.192.2.0/23
212.192.11.0/24
Signature Algorithm: sha256WithRSAEncryption
70:52:d3:77:56:fc:8f:8b:61:47:f8:b0:98:3e:ce:05:89:2b:
e9:b3:67:7d:77:10:4e:84:48:b1:47:75:be:61:01:c8:59:82:
eb:14:01:89:40:ba:70:64:fa:8f:3d:ed:04:67:5d:69:df:b5:
9c:3d:ae:f0:03:39:7a:9d:07:d7:ed:d7:9d:16:f0:1d:e3:8b:
0c:01:de:53:5b:ee:db:e0:7e:74:df:11:96:cf:28:7d:4c:59:
e2:cc:3e:45:2f:78:ed:49:f5:0c:a6:09:db:e5:64:e9:e0:2d:
6e:9b:e3:43:3e:cc:c7:3c:89:15:1e:b4:c0:a9:69:2e:33:5b:
2e:f2:91:96:b5:9a:a5:27:59:36:21:12:bd:d3:c2:5c:50:b9:
2a:f4:bb:c5:63:71:32:22:55:03:5a:de:ee:71:24:92:0b:c7:
87:b6:70:74:ee:1b:5c:8c:77:a0:39:4f:f8:4d:b5:4b:d2:a4:
de:19:ed:c3:32:76:fb:4d:96:d6:11:21:de:66:21:10:83:da:
db:e3:98:ec:3e:6b:cf:b1:fc:d5:5f:83:65:37:07:c5:22:3d:
97:de:9a:18:0b:4e:c1:9d:28:cb:71:38:03:b8:9d:a9:9f:f8:
24:94:80:b2:4f:0d:fd:19:e2:13:97:83:e6:7e:fc:2e:a4:84:
6a:07:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:11 2023 by rpki-client on console-fra.rpki-client.org