Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sImJFLdT44_QSy1tB8BYapLjg08.roa
File: sImJFLdT44_QSy1tB8BYapLjg08.roa (raw, json)
Hash identifier: gIHWe6GtY57OT0h4y6RSu4tfnP2fTppc6v2Uc1M+tP4=
Subject key identifier: B0:89:89:14:B7:53:E3:8F:D0:4B:2D:6D:07:C0:58:6A:92:E3:83:4F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 1048F6C1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sImJFLdT44_QSy1tB8BYapLjg08.roa
Signing time: Wed 08 Jun 2022 07:29:22 +0000
ROA not before: Wed 08 Jun 2022 07:29:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 193.108.112.0/24 maxlen: 24
194.87.118.0/23 maxlen: 24
194.87.36.0/22 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273217217 (0x1048f6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 8 07:29:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0898914b753e38fd04b2d6d07c0586a92e3834f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:f1:86:0e:8c:e9:e1:f4:44:cd:c4:cf:a3:
f1:8a:a9:ee:d7:6b:e7:4a:52:cb:fe:1c:9b:cc:d6:
83:11:f3:2d:7e:47:ea:d5:92:e9:b1:0c:11:86:91:
e2:20:f7:5e:dd:26:15:a6:50:3d:e9:49:28:d2:f8:
b1:bd:bd:50:48:46:63:5c:ab:3f:df:c0:ef:33:bf:
21:fa:7b:2e:c0:0f:02:a2:41:4e:34:c0:7a:8e:0f:
96:56:a4:a8:2b:1e:a8:dd:65:aa:f6:d8:4d:ac:f6:
1b:03:6d:f2:de:a5:77:d5:8a:25:90:ed:f8:c1:86:
a1:49:fa:e8:36:7a:ba:a9:34:e9:a7:e7:95:f7:0a:
2d:48:36:96:5a:1c:47:ab:f7:c2:91:cd:fa:b1:7d:
1f:bc:ab:d8:f7:f5:8e:a1:2e:0d:54:ca:29:18:5c:
b4:dc:a8:cc:9e:89:ed:4e:0c:7f:4f:58:e6:3b:04:
20:18:0c:ef:cb:6c:c0:28:03:e1:de:12:11:27:0c:
31:38:eb:d7:ae:f4:74:5b:cd:e6:d0:50:b0:f9:2d:
fb:29:0d:2d:14:66:e7:23:d8:c7:1a:11:6b:72:5a:
19:dd:56:ba:ca:e3:2a:10:c3:ae:fe:69:58:34:42:
be:a0:27:a8:ed:67:e8:14:08:70:3f:8b:26:e3:23:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:89:14:B7:53:E3:8F:D0:4B:2D:6D:07:C0:58:6A:92:E3:83:4F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sImJFLdT44_QSy1tB8BYapLjg08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.112.0/24
194.87.36.0/22
194.87.118.0/23
194.135.32.0/24
195.133.25.0-195.133.27.255
195.133.55.0/24
195.133.59.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fe:04:c4:a8:b2:6e:be:d8:5a:e5:46:4d:31:87:33:27:81:
06:6b:1b:81:df:79:27:c4:77:48:7b:41:cd:cf:9a:76:da:de:
13:5c:15:d1:90:f6:2d:ce:56:5d:20:0a:f8:38:8c:99:a1:c6:
4e:e8:03:d9:58:2b:1f:51:fa:f4:f9:12:a1:52:ba:ec:c1:aa:
00:4e:b7:a1:f2:29:2c:d1:31:74:b4:76:76:be:a6:21:69:6c:
09:34:c6:41:99:9f:1a:f6:55:96:d2:39:0a:11:42:ad:b6:6a:
a3:ee:28:88:9a:e3:e4:f5:5a:ac:de:ee:53:d0:a3:40:06:7d:
49:e8:ae:47:a0:03:8a:c6:89:ef:67:c9:34:04:50:4d:dd:08:
38:5f:ed:20:0c:b3:f0:6b:6a:36:63:38:7f:6f:3c:eb:b3:61:
1b:31:a3:31:ad:6a:80:d6:77:76:7a:39:7a:f6:90:d1:74:d8:
62:a4:60:56:af:34:0d:26:9f:4c:1d:c9:67:1e:14:71:08:ac:
b7:2a:3c:64:68:b3:78:4b:bb:8f:95:47:fe:9d:5e:72:07:ce:
53:cc:09:92:d4:79:8a:79:55:20:4c:67:85:95:cb:57:30:8b:
4a:0b:df:db:c4:97:6d:44:bd:92:6f:81:ff:37:6f:bc:0d:4d:
0c:a8:24:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:12 2023 by rpki-client on console-fra.rpki-client.org