Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qRVJxrERGAH45ts4AGssjlryass.roa
File: qRVJxrERGAH45ts4AGssjlryass.roa (raw, json)
Hash identifier: /f0RIYctdgb9v0H7tYZBThGb9AwOr9vKvTJIrhMi9WM=
Subject key identifier: A9:15:49:C6:B1:11:18:01:F8:E6:DB:38:00:6B:2C:8E:5A:F2:6A:CB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F921E23
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qRVJxrERGAH45ts4AGssjlryass.roa
Signing time: Wed 27 Apr 2022 21:56:03 +0000
ROA not before: Wed 27 Apr 2022 21:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.193.24.0/22 maxlen: 24
193.124.224.0/23 maxlen: 23
193.124.226.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.87.32.0/22 maxlen: 24
195.133.22.0/24 maxlen: 24
212.192.16.0/21 maxlen: 24
195.58.56.0/21 maxlen: 24
194.87.192.0/22 maxlen: 22
212.193.4.0/22 maxlen: 24
212.193.8.0/22 maxlen: 24
194.87.116.0/22 maxlen: 24
194.87.124.0/22 maxlen: 24
194.87.120.0/22 maxlen: 24
193.124.133.0/24 maxlen: 24
212.192.208.0/22 maxlen: 24
194.87.41.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261234211 (0xf921e23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 27 21:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a91549c6b1111801f8e6db38006b2c8e5af26acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:7e:90:75:07:20:d5:eb:f0:df:5a:78:a7:
f9:1f:44:c7:1e:1c:51:6a:1b:e1:33:47:b0:b6:f9:
86:73:19:32:7e:14:d2:03:ff:7e:c1:0a:68:61:24:
bb:72:d7:06:b9:18:ce:e9:76:15:20:d3:43:48:88:
5b:4f:cb:8f:f1:1e:b2:ef:d8:d8:9f:19:8c:79:0d:
6a:ab:31:a6:eb:14:bb:b9:e1:bc:72:1b:c7:c4:a4:
6e:8b:5e:cf:7a:97:ac:66:e2:7f:09:eb:3e:10:2b:
ac:d6:b4:76:44:f3:1d:27:b5:6d:47:38:2c:b3:27:
dc:9e:04:f7:d0:19:49:71:df:2a:ae:76:6a:d4:72:
b6:04:70:bc:b1:85:2d:17:dd:98:dc:1c:ee:d6:ca:
a3:77:2a:10:bb:c4:15:d5:e4:05:bb:cf:a2:90:00:
74:9f:60:a3:fc:5a:35:7a:ba:0c:35:b1:d3:fa:0c:
7b:7b:48:cd:80:9e:ad:aa:f9:7e:09:0a:f0:0c:8e:
d6:08:d8:87:f7:db:8b:5f:c6:f1:d4:44:c6:19:1e:
cd:11:88:99:c3:62:c3:c2:7e:06:f8:13:42:ed:ad:
93:b9:4d:9f:c8:22:77:bf:55:d8:a5:db:d2:4c:7b:
83:15:62:ef:8a:6c:a5:1d:4b:2a:ec:26:27:2b:d6:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:49:C6:B1:11:18:01:F8:E6:DB:38:00:6B:2C:8E:5A:F2:6A:CB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qRVJxrERGAH45ts4AGssjlryass.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.49.0/24
193.124.133.0/24
193.124.224.0-193.124.226.255
194.87.32.0/22
194.87.41.0/24
194.87.61.0/24
194.87.116.0-194.87.127.255
194.87.192.0/22
194.135.46.0/24
195.58.56.0/21
195.133.22.0/24
212.192.16.0/21
212.192.208.0/22
212.193.4.0-212.193.11.255
212.193.24.0/22
Signature Algorithm: sha256WithRSAEncryption
51:b0:85:55:2e:58:9f:6d:6a:5f:15:8a:0e:2c:ac:06:55:ce:
a0:3c:ce:86:59:46:08:db:f0:e4:50:a1:57:ad:be:a5:66:7a:
21:03:53:b6:e0:d9:b7:c7:04:5d:5e:73:cc:1b:c8:a5:b7:33:
f6:88:1b:d8:52:38:0d:e8:92:03:98:a8:3e:51:d2:5b:2f:c8:
33:7e:f2:98:0e:00:1d:0b:46:a1:3c:0c:fb:09:df:63:12:c8:
f9:48:23:cd:ff:e7:0d:b1:cf:9b:ad:7e:04:07:c0:ac:cc:69:
f5:d0:30:b2:31:84:13:3a:f1:13:9d:c2:f0:54:d5:39:86:51:
f0:80:8c:90:b7:de:c6:81:9f:b0:ce:66:af:ee:9f:db:32:31:
3d:29:97:e9:a3:a4:41:31:3c:34:57:78:76:14:89:5d:d8:7d:
38:ad:43:2d:94:5a:6a:b4:6f:4a:67:b0:44:1f:33:e0:87:a1:
44:e6:96:8d:9a:aa:54:48:7b:fd:0f:fd:69:77:eb:fc:93:6f:
b6:97:58:76:d1:9e:26:f1:fb:7f:ac:ae:f3:fe:7b:89:69:66:
4c:24:b0:6f:6f:f0:4a:0d:cb:c9:18:df:55:31:b0:4c:7d:b9:
a9:4a:c3:1a:a4:d1:d0:c2:95:fb:41:23:03:d5:00:a9:7e:c9:
7b:46:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:27 2024 by rpki-client on console-fra.rpki-client.org