Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ogslg-zYA-4ttXa5XN6COBZ8sa0.roa
File: ogslg-zYA-4ttXa5XN6COBZ8sa0.roa (raw, json)
Hash identifier: 7GQkr4gjLdH8t3aCQ4xxuzUF5Q/GsqeXJC9JaKWqy2k=
Subject key identifier: A2:0B:25:83:EC:D8:03:EE:2D:B5:76:B9:5C:DE:82:38:16:7C:B1:AD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018538A76152794FE9B49B94644B843CBB6B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ogslg-zYA-4ttXa5XN6COBZ8sa0.roa
Signing time: Thu 22 Dec 2022 07:06:11 +0000
ROA not before: Thu 22 Dec 2022 07:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:a7:61:52:79:4f:e9:b4:9b:94:64:4b:84:3c:bb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 22 07:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a20b2583ecd803ee2db576b95cde8238167cb1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6c:ab:df:4d:25:e2:b9:da:a9:95:bf:1d:bc:
00:17:8d:96:b1:a6:97:b3:5f:14:55:d8:97:c5:a5:
7c:46:4b:b6:7a:f7:6f:c2:96:b1:b7:74:6e:eb:e8:
a1:be:89:0b:29:b9:29:33:1d:35:bb:f3:08:07:63:
75:da:c6:5a:57:79:8c:fa:5f:81:09:13:00:b3:e4:
2a:92:44:b6:6f:15:b4:14:37:19:c1:ce:f0:1d:db:
17:f2:a6:b6:e2:09:96:34:77:0c:24:d4:ef:75:df:
c9:17:4b:c9:6c:5f:08:f4:11:8e:83:a4:39:40:ce:
0f:11:3e:00:29:fb:55:1a:08:d2:2e:46:60:f5:37:
dd:3d:09:39:64:97:2c:66:fa:0b:5f:4b:e5:15:11:
88:62:51:ce:3f:c3:64:8f:0a:e0:49:7f:72:5d:49:
ae:c9:57:93:de:db:42:9b:18:aa:fe:bd:64:69:0f:
c3:fd:db:c3:5d:08:b8:e3:2b:39:72:a2:a7:60:78:
1a:cc:ec:90:8e:37:f5:84:4d:18:cb:4c:f5:8a:3e:
38:d7:b6:b3:a6:47:0f:e8:e8:a0:c0:81:0b:de:1c:
84:9d:fe:3c:07:fd:cb:13:0b:f4:58:9f:5d:ec:50:
ba:1a:81:4b:bf:f8:2f:8b:28:33:3c:8e:63:2c:28:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0B:25:83:EC:D8:03:EE:2D:B5:76:B9:5C:DE:82:38:16:7C:B1:AD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ogslg-zYA-4ttXa5XN6COBZ8sa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.58.43.0/24
194.58.46.0/24
194.87.64.0/24
194.87.161.0/24
194.87.207.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a0:e5:e8:d4:21:ea:5f:8b:ae:a6:73:24:55:ef:b5:d1:bc:
45:67:46:fa:53:50:ca:9a:ff:52:e0:25:a9:1b:33:c6:84:de:
4c:47:98:1b:a4:19:a5:26:52:aa:49:ac:47:51:c9:1a:87:06:
08:a0:a4:7f:9e:67:ba:c0:2b:2e:08:c1:09:21:71:23:60:57:
67:8c:36:0e:05:04:e1:9e:32:93:10:21:0a:13:f7:99:c5:f7:
ca:69:dc:0d:54:f7:a9:a8:5a:bf:df:91:49:f6:f6:6b:22:ad:
c8:84:ef:a5:35:f8:9b:a8:44:88:2c:7f:a1:d4:47:ef:f5:ba:
d0:00:19:0d:da:b9:40:2d:b1:0e:ee:e0:fd:83:b8:d2:46:d8:
87:da:ee:d6:b1:8e:12:16:51:c8:31:f4:ed:32:bd:64:e9:80:
1a:6d:21:e7:e2:1b:33:28:5a:a5:29:b0:e1:4f:a3:0c:60:b1:
89:ef:3b:07:3f:83:f1:58:3e:7d:e5:e3:b3:16:eb:16:ae:45:
1f:62:fc:8a:62:b6:ba:60:dd:f7:ca:22:92:e5:6c:cb:ae:0f:
5d:15:34:01:16:05:84:17:2d:fe:a9:14:9b:f6:46:f3:19:63:
c4:2d:56:91:aa:61:fd:61:e6:0b:5e:b1:4a:6d:be:3f:91:d2:
e7:a9:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-ams.rpki-client.org