Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/obna0AReuf1jwN9Vx-BkVKPEMTM.roa
File: obna0AReuf1jwN9Vx-BkVKPEMTM.roa (raw, json)
Hash identifier: BWuMPSSXt7UlfD+VOwx7NnaIDC7lWh7P9bFH2Piun8o=
Subject key identifier: A1:B9:DA:D0:04:5E:B9:FD:63:C0:DF:55:C7:E0:64:54:A3:C4:31:33
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018506133CE38EC197F993896C8F5A2F189D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/obna0AReuf1jwN9Vx-BkVKPEMTM.roa
Signing time: Mon 12 Dec 2022 11:23:22 +0000
ROA not before: Mon 12 Dec 2022 11:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:13:3c:e3:8e:c1:97:f9:93:89:6c:8f:5a:2f:18:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 12 11:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1b9dad0045eb9fd63c0df55c7e06454a3c43133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:d3:f7:cf:48:a1:dc:4b:cb:2d:ab:bc:00:
c9:9a:6c:52:01:cc:0a:01:2e:76:2b:bf:49:0c:07:
42:4a:30:0f:bc:b1:dd:4f:c5:e0:8a:03:35:83:34:
d4:42:f5:09:03:6b:59:9d:16:2e:d2:20:76:eb:db:
1c:ed:58:7a:ed:39:2c:9a:0b:93:28:5f:14:c1:ae:
ff:30:bd:78:91:ae:19:80:f0:30:94:9c:06:06:2d:
c1:33:ad:87:1c:72:91:e0:62:a2:b9:2d:35:17:54:
20:31:99:9d:4a:1b:a9:85:a0:cd:c0:8c:06:21:c1:
95:25:d6:38:34:7b:24:a2:84:cf:80:00:46:58:f9:
a2:1d:9c:72:7f:06:cb:59:c3:c3:4e:e8:c3:af:97:
fa:44:ac:d2:5f:fe:ee:92:d5:41:1d:49:92:cf:2d:
06:99:6d:fb:4c:0e:03:9a:81:54:7c:11:a0:36:d3:
6b:77:75:fa:f7:4a:43:e6:3e:fa:86:7e:2b:c8:c2:
cb:f4:df:9f:3d:ff:7e:0e:cc:7f:92:e4:98:46:a2:
8d:f4:3d:8c:ad:dd:2e:71:5f:c1:a1:39:e1:41:f7:
ad:ad:e2:0e:99:32:48:d6:02:5c:d6:93:4d:6c:f5:
a1:dd:c2:dd:56:83:88:f3:16:55:27:9d:c3:e8:e6:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:DA:D0:04:5E:B9:FD:63:C0:DF:55:C7:E0:64:54:A3:C4:31:33
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/obna0AReuf1jwN9Vx-BkVKPEMTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
193.124.47.0/24
193.124.125.0/24
194.87.37.0/24
194.87.162.0/24
194.87.207.0/24
195.58.63.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b0:09:1e:ca:39:f1:1c:df:26:35:5d:d2:af:95:0f:a7:06:
57:95:c4:16:09:f5:da:8f:ff:af:32:8b:0e:b8:a7:d9:e7:3d:
9a:35:0c:f7:ee:be:cd:e5:da:00:80:6e:1e:d1:c4:47:43:48:
0a:96:ee:c2:81:3b:24:3e:ee:36:79:8c:4f:82:29:af:51:57:
a2:cd:4d:69:98:bc:68:61:51:4e:90:3c:5e:13:e6:a3:3b:88:
55:97:db:df:4f:f3:ba:af:9c:e9:43:95:e6:01:ca:ef:04:cd:
81:1f:15:92:06:17:2c:ff:46:45:88:0b:4e:73:59:7f:71:2e:
82:de:67:3f:e7:14:e8:93:53:9a:3f:1d:24:9f:e8:e4:47:72:
0d:cd:0b:5e:5a:3f:b8:4c:f2:c1:5c:f7:1d:40:cc:9b:4e:ee:
ea:a1:6f:0a:33:92:97:8f:56:05:5a:99:9a:75:80:47:e5:52:
5f:85:70:fe:1d:af:72:10:1d:69:e5:cc:63:e6:7c:5a:2c:02:
cc:a2:5f:ee:26:99:d0:a6:5e:31:34:9b:7b:a3:1c:0c:8c:5a:
d4:35:71:46:32:db:13:22:16:bc:90:2f:1e:d5:f4:2d:9c:01:
0b:5f:61:2e:95:7a:8e:5b:e2:43:b7:f4:25:4d:82:bb:11:52:
f4:11:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:11 2023 by rpki-client on console-fra.rpki-client.org