Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oe9lmRDiEMLXxcOkytWOQUftPqg.roa
File: oe9lmRDiEMLXxcOkytWOQUftPqg.roa (raw, json)
Hash identifier: QvKZKiNkbN0SOZHyv78GOzThAOLGkiwewXwf0442QfU=
Subject key identifier: A1:EF:65:99:10:E2:10:C2:D7:C5:C3:A4:CA:D5:8E:41:47:ED:3E:A8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184C274C0C84EDF5E5C6FBF3C8D2DCB8569
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oe9lmRDiEMLXxcOkytWOQUftPqg.roa
Signing time: Tue 29 Nov 2022 08:15:42 +0000
ROA not before: Tue 29 Nov 2022 08:15:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.29.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:74:c0:c8:4e:df:5e:5c:6f:bf:3c:8d:2d:cb:85:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 29 08:15:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1ef659910e210c2d7c5c3a4cad58e4147ed3ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:84:15:50:2b:9d:29:5f:e9:b4:59:cd:93:
72:d6:1b:d7:94:86:25:90:b2:65:41:90:5f:06:ca:
b9:6f:33:27:83:2f:97:e3:89:43:3c:73:27:51:dc:
cf:43:b5:83:11:5d:ce:47:a3:1e:13:da:c2:64:22:
90:bc:16:19:5d:fb:09:81:2d:17:4f:f2:f4:7a:7f:
2e:08:47:e7:75:be:27:e0:c8:a1:30:51:d2:87:f3:
82:63:5a:51:4f:19:47:14:10:a4:ff:a2:f4:4a:d4:
c6:07:ec:aa:06:01:a2:a3:ff:73:d5:7a:68:21:4c:
01:d2:de:4f:a0:00:56:fe:16:9b:39:fd:9b:59:36:
fe:d1:d8:72:c1:46:88:37:b1:21:7c:8c:58:cd:8f:
59:87:bb:9b:c8:d7:96:9c:05:12:e5:b9:c0:eb:5f:
66:07:56:c0:d7:72:de:7d:30:5e:0e:da:8a:f2:b3:
2d:45:d1:f2:5a:c8:35:f9:be:6d:e9:ae:7e:d6:b2:
f8:4a:ea:74:69:1c:56:e7:57:f2:bd:88:93:c6:31:
b9:70:ce:df:d2:93:a0:d0:58:95:11:5d:0a:bb:15:
7a:52:bd:61:38:3e:11:a7:19:bd:a4:f2:3b:19:59:
29:5f:60:2d:db:76:2d:cf:a9:fa:f0:65:1d:da:91:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EF:65:99:10:E2:10:C2:D7:C5:C3:A4:CA:D5:8E:41:47:ED:3E:A8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oe9lmRDiEMLXxcOkytWOQUftPqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
192.124.188.0/24
193.124.41.0/24
193.124.91.0/24
193.124.93.0/24
193.124.95.0/24
193.124.227.0/24
194.58.39.0/24
194.58.58.0/24
194.58.60.0/24
194.85.249.0/24
194.85.251.0/24
194.87.187.0/24
194.87.190.0/24
195.58.59.0/24
195.58.62.0/24
195.133.13.0-195.133.14.255
195.133.29.0/24
195.133.31.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
195.133.75.0/24
212.192.4.0/24
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
39:53:1b:11:a5:50:25:c7:76:8f:60:d6:4d:7a:8e:9b:ae:72:
8d:6d:47:32:30:a3:e5:83:7c:8f:52:05:68:3a:76:b5:dd:7a:
d1:11:51:75:72:9d:9e:a5:3d:18:d9:8e:ce:f7:e8:87:c0:78:
02:0a:24:88:b6:b1:cf:61:97:74:a4:50:d7:41:e4:ee:06:05:
5b:87:30:3e:f0:9a:a7:1b:f7:c7:49:00:97:fd:dc:f6:f3:e0:
eb:fa:2b:2d:e6:7e:e6:c4:bf:56:ab:c2:7c:f9:f9:87:25:d9:
94:e4:43:74:79:d6:1f:3a:b6:04:88:ae:6a:ed:81:7a:a7:f1:
8e:9b:16:b7:92:99:3e:69:a5:37:a1:ba:9a:06:98:38:b3:8d:
d0:ce:21:95:fb:1d:a8:2c:3c:25:9b:0a:56:02:6b:08:35:ef:
90:69:74:1f:ca:28:41:4a:99:6d:a3:ab:62:9d:27:40:42:76:
89:48:36:c1:8f:23:63:ce:7c:3f:bb:5c:a4:5c:75:68:37:84:
e7:2c:71:04:76:71:70:03:46:c5:90:45:c3:98:2b:da:c8:f5:
7a:46:56:bd:99:59:fa:42:7f:94:8e:d7:f3:05:0e:81:3a:1b:
74:84:fc:c0:ca:20:f5:e2:c2:8e:f5:16:21:53:85:f9:37:b1:
54:0c:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:11 2023 by rpki-client on console-fra.rpki-client.org