Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJxNP6sYzIafBm_8e38at3_7Wco.roa
File: uJxNP6sYzIafBm_8e38at3_7Wco.roa (raw, json)
Hash identifier: ehvZRqVPQEd2xsO4Y92ZBNTR0IrkOFotlEktCGgONx8=
Subject key identifier: B8:9C:4D:3F:AB:18:CC:86:9F:06:6F:FC:7B:7F:1A:B7:7F:FB:59:CA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018460E18A6E9ED69F94262C5D8BD98DB7F4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJxNP6sYzIafBm_8e38at3_7Wco.roa
Signing time: Thu 10 Nov 2022 09:31:44 +0000
ROA not before: Thu 10 Nov 2022 09:31:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:e1:8a:6e:9e:d6:9f:94:26:2c:5d:8b:d9:8d:b7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 10 09:31:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b89c4d3fab18cc869f066ffc7b7f1ab77ffb59ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:df:59:c0:c8:e1:45:dd:5a:c1:d9:50:cc:
ad:5d:3c:fa:db:76:be:7d:94:23:8d:64:aa:08:28:
fc:8e:80:b6:c8:51:aa:1b:02:ba:ed:dd:be:cd:59:
a4:19:94:a2:cd:8a:43:3e:0f:d5:7d:56:0a:36:21:
3d:cf:46:f4:7c:49:54:01:8a:53:7a:b2:4e:ba:d8:
85:eb:44:33:70:71:f5:f5:ed:6c:05:cf:ce:ee:58:
36:13:e1:c7:d1:35:7b:51:3f:dc:ba:b5:f6:df:c5:
47:bb:45:44:21:b6:39:dc:af:38:93:95:2a:ed:8e:
b3:4b:0f:91:4c:bc:e9:bf:12:92:9f:a7:a3:92:bf:
49:37:1f:26:59:1a:ef:0d:73:75:37:78:27:74:82:
3b:02:d2:6d:c1:d2:8b:51:7f:b4:b1:12:d2:92:d9:
7c:4a:5e:2f:44:d8:58:ad:e8:3d:52:97:4d:91:d1:
84:a7:fe:31:8d:a1:a7:44:b7:70:22:4a:b5:bf:89:
ba:77:52:b6:7e:2e:52:db:48:cc:2a:4f:fd:e8:2e:
4d:02:f6:43:f6:be:f1:f9:7e:8c:80:e1:1e:ca:71:
62:27:3c:8c:56:33:be:0c:67:34:2b:eb:de:2d:da:
42:01:0b:d6:89:cd:7b:11:a7:50:9d:63:f9:30:d2:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:4D:3F:AB:18:CC:86:9F:06:6F:FC:7B:7F:1A:B7:7F:FB:59:CA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJxNP6sYzIafBm_8e38at3_7Wco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.190.0/24
194.58.47.0/24
194.87.37.0/24
194.87.83.0/24
195.58.58.0/24
195.133.86.0/24
195.133.194.0/24
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a0:ae:43:7a:3c:31:3e:11:73:98:97:ad:7c:28:7a:13:4d:
e7:fb:0a:46:09:9a:d4:7e:01:9a:f1:dc:39:37:cd:05:0b:21:
0a:d5:5b:9a:96:1d:e3:48:ff:da:d1:ec:18:1d:02:13:c6:70:
6b:ff:7b:17:df:32:7d:49:9f:df:09:dc:af:a7:d3:af:0d:92:
2c:19:67:07:84:c4:00:b6:68:69:3d:63:6f:20:5d:ec:c4:08:
42:45:d5:cf:59:3d:86:ee:73:0c:27:3f:01:9b:25:b1:dd:c3:
2d:9a:36:93:19:e2:0f:32:d5:73:66:cb:d9:6d:73:fc:10:d6:
86:d6:09:ec:25:9f:f5:8c:5f:bb:da:77:ae:08:f1:39:d2:65:
0a:af:f0:45:c7:8f:aa:5a:b4:e8:79:f3:21:d0:0a:6c:e5:e1:
c9:88:d0:e3:69:b5:d1:09:5e:d4:63:e9:41:97:c1:4a:2a:db:
ac:8f:8c:1f:5e:29:ad:81:ac:fb:51:eb:ec:b4:a3:4f:0f:66:
5e:3a:b9:65:1b:04:c5:31:c4:36:0c:ef:2a:07:57:93:66:fb:
d9:1e:60:0c:4a:ee:14:78:1b:cf:b5:06:48:ac:0b:3c:ac:7d:
7a:0f:b7:13:b0:b7:58:50:99:9a:8d:a0:a5:c2:81:17:f0:f2:
b7:27:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org