Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q7iA6UTd1SZrazx_b9L7kGC4oJI.roa
File: q7iA6UTd1SZrazx_b9L7kGC4oJI.roa (raw, json)
Hash identifier: i9Cq9t3mKEt005fTvE+SRk3u2b0SYcG+7XEgjCiT0v0=
Subject key identifier: AB:B8:80:E9:44:DD:D5:26:6B:6B:3C:7F:6F:D2:FB:90:60:B8:A0:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184C8E59AE66D7FCD84ADED0D4F18CD37FD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q7iA6UTd1SZrazx_b9L7kGC4oJI.roa
Signing time: Wed 30 Nov 2022 14:16:41 +0000
ROA not before: Wed 30 Nov 2022 14:16:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:e5:9a:e6:6d:7f:cd:84:ad:ed:0d:4f:18:cd:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 30 14:16:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abb880e944ddd5266b6b3c7f6fd2fb9060b8a092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:78:38:ae:f5:ca:b5:fe:dd:de:92:a4:ff:
ff:83:41:ea:62:86:9e:fd:2d:d2:db:ee:47:ff:d2:
46:7a:b7:8b:8e:7b:59:5b:8f:4c:e0:77:66:93:65:
2f:35:81:15:d4:6f:ce:02:9b:5f:1c:76:94:8a:9c:
4c:31:b8:5e:26:2c:9b:fa:71:dc:57:87:db:20:96:
dd:5a:69:8f:d1:de:4d:f0:c6:30:d2:8f:56:ea:df:
77:56:a7:34:56:b9:95:fc:93:fc:e4:bd:eb:1a:99:
e3:20:0b:67:dc:5b:ce:db:32:77:0f:2a:21:f6:6e:
f9:7a:00:89:01:f5:01:d5:9e:f8:ce:92:f3:4a:b2:
37:db:f4:ab:33:98:b6:2d:08:75:e3:bf:5c:0a:80:
44:d0:35:46:80:03:71:c1:cc:08:fd:04:8a:d0:26:
ca:08:91:9f:87:d5:c3:e6:bb:68:c2:df:7c:20:87:
a1:ca:60:9b:f8:93:ae:4b:86:da:87:68:f9:23:bc:
31:58:47:ab:10:3f:04:21:6b:0b:b3:b1:71:cb:25:
c2:d9:09:06:53:ab:83:81:0c:ad:88:2f:73:87:82:
b1:05:d6:6d:4c:64:c8:73:ef:90:b8:ba:ec:3f:42:
60:56:64:74:8b:eb:6a:5b:9e:c5:ec:12:c5:6d:6d:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:80:E9:44:DD:D5:26:6B:6B:3C:7F:6F:D2:FB:90:60:B8:A0:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q7iA6UTd1SZrazx_b9L7kGC4oJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
194.87.1.0/24
194.87.38.0/24
194.87.73.0/24
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.178.0/23
194.135.18.0/24
194.135.23.0/24
195.58.35.0/24
195.133.0.0/24
195.133.35.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
46:08:26:39:22:29:5b:93:07:25:e5:79:c9:8d:cd:ed:d5:00:
ef:a8:c5:6f:56:6b:7b:ec:35:60:c1:48:b3:62:db:68:be:a2:
9a:4c:22:d6:8d:ec:f1:07:cd:3e:ba:30:a3:75:31:e5:cb:97:
cf:f8:0e:15:e9:93:f2:b6:27:35:6f:9d:db:cd:9d:99:70:d5:
30:4d:eb:7b:ae:a1:df:9c:76:59:7a:6a:73:21:6c:c8:6c:85:
18:b6:0e:6c:a4:4d:5f:29:ae:5a:a2:9d:4e:e1:ef:15:ac:7f:
8e:18:12:33:1f:56:9d:21:1e:82:d8:b4:db:d6:75:d8:89:6c:
81:e4:61:93:20:c7:eb:50:12:70:f9:9d:b5:4d:7e:28:b8:46:
ae:0e:42:a6:bc:60:63:8d:56:85:2a:54:d1:ca:f8:9e:63:e0:
16:9b:16:33:bc:74:0e:b3:c6:39:45:52:55:af:ff:d3:08:a7:
e8:04:6f:80:26:7c:12:f6:e9:20:e9:a2:e1:ed:8a:f4:4f:c7:
2d:f3:7d:7d:33:e2:19:25:02:fb:b6:2d:a5:ac:8c:26:a6:b3:
2b:dd:0e:24:74:57:78:a4:df:d7:40:e0:3a:42:3e:19:d9:d3:
f7:96:2e:9a:70:0c:29:53:4f:32:2b:32:f9:81:31:c4:b0:45:
07:78:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:12 2023 by rpki-client on console-fra.rpki-client.org