Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/spG98JyAY1-AM7F2f6UFL_tw_wg.roa
File: spG98JyAY1-AM7F2f6UFL_tw_wg.roa (raw, json)
Hash identifier: AnKqoXRhiJvAxo1PVZSoVeZ4q+alQSlIXZ/NahxuSKs=
Subject key identifier: B2:91:BD:F0:9C:80:63:5F:80:33:B1:76:7F:A5:05:2F:FB:70:FF:08
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182EF1A6E7360D8339877416A5452A82FF7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/spG98JyAY1-AM7F2f6UFL_tw_wg.roa
Signing time: Tue 30 Aug 2022 14:14:23 +0000
ROA not before: Tue 30 Aug 2022 14:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.200.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:1a:6e:73:60:d8:33:98:77:41:6a:54:52:a8:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 30 14:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b291bdf09c80635f8033b1767fa5052ffb70ff08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:38:d1:c2:e7:4b:8d:1f:43:df:f3:8f:42:
07:cf:7b:3c:15:59:8f:ce:d6:df:9a:1d:90:66:f4:
76:44:2b:f0:ed:4a:4b:33:27:a1:c1:e2:34:80:34:
5a:c1:98:e0:cb:45:67:8e:a5:43:66:25:5d:cc:ca:
0c:04:4b:eb:7e:29:6a:c7:0b:b1:dc:7c:f8:30:ef:
4a:a4:ad:88:65:91:8b:a0:8f:56:cb:86:d1:15:d4:
57:f9:c9:ed:15:e1:60:6d:fb:7c:a7:20:11:02:0f:
33:72:b1:e4:85:17:49:1f:b5:af:d5:63:67:4e:90:
c5:0a:7a:6b:a6:5c:b1:0b:2d:23:c3:06:0d:bb:a0:
c6:88:58:31:69:f7:0e:d2:d4:7b:c8:70:c2:e5:b4:
e5:c6:18:05:64:94:19:74:65:0f:99:c9:18:3c:66:
ba:5a:5d:b5:03:e7:53:b8:39:a9:80:c9:fc:1a:73:
60:58:5f:bf:7f:9b:12:d8:2c:70:2e:65:db:97:da:
85:15:3f:61:3a:63:1a:84:3e:41:4e:fd:0f:ab:66:
03:a5:60:a3:18:f2:4e:d0:24:46:9b:4e:9f:44:d7:
bc:f5:74:4e:71:89:d9:a8:69:95:05:90:0a:bc:76:
59:ea:90:fd:7a:6a:7b:9b:aa:8e:f6:45:55:80:20:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:91:BD:F0:9C:80:63:5F:80:33:B1:76:7F:A5:05:2F:FB:70:FF:08
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/spG98JyAY1-AM7F2f6UFL_tw_wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
193.124.91.0/24
193.124.205.0/24
193.124.207.0/24
194.87.22.0/24
194.87.73.0/24
194.87.90.0/24
194.87.130.0/24
194.87.168.0/24
194.87.200.0/24
195.58.35.0/24
195.58.50.0/24
195.133.0.0/24
195.133.31.0/24
195.133.86.0/24
212.192.9.0/24
212.192.31.0/24
212.193.1.0/24
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
41:46:f5:4f:34:64:d3:4c:b3:55:72:94:f1:00:42:63:c5:02:
d3:82:a7:ed:e2:d8:3d:92:4a:5e:e9:d6:0d:31:00:a3:2b:22:
40:e8:1b:8c:b9:06:77:d7:6f:85:f1:5d:28:f3:28:65:fe:af:
5a:73:3e:db:62:00:90:14:c3:f0:68:eb:33:f3:c0:47:44:28:
ae:ee:1c:44:fc:db:ce:f3:e5:8b:86:de:79:88:f0:63:b4:35:
1e:af:de:6e:2d:94:8e:fb:5a:bc:ef:e5:99:51:06:6c:bb:13:
c6:81:8a:85:63:0c:9a:43:be:24:ba:cf:f7:c6:15:eb:5f:27:
b3:b5:15:91:61:e0:bb:43:2c:ad:94:27:d6:8c:b2:fb:86:7f:
87:94:34:4f:c5:d1:ee:7b:50:9f:4f:99:48:16:7e:5e:68:92:
71:b8:f4:9c:e3:b3:32:55:26:a3:d4:fe:1b:6d:55:64:4c:44:
6d:de:3c:d9:47:cb:bd:f0:68:dd:ef:14:f8:b6:3d:5c:4f:15:
9f:d7:80:5c:fe:95:82:24:92:c3:f0:c4:d5:0b:3c:68:0a:ad:
19:a8:0c:c1:fc:9a:34:ce:60:30:6e:59:44:98:84:9f:7d:cf:
92:94:ab:bb:66:e8:23:37:f2:6b:27:6f:39:65:c6:d0:35:59:
3a:6b:dd:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:12 2023 by rpki-client on console-fra.rpki-client.org