Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wXoQh6EzQiqbi-JlRLtthV8dNxc.roa
File: wXoQh6EzQiqbi-JlRLtthV8dNxc.roa (raw, json)
Hash identifier: iC8JgY5sOl77JJLVerbkdUEm7B41VTSMsii1cgb+9BQ=
Subject key identifier: C1:7A:10:87:A1:33:42:2A:9B:8B:E2:65:44:BB:6D:85:5F:1D:37:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182EA8CBCB0B819C8BADB72A416DEBD4C10
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wXoQh6EzQiqbi-JlRLtthV8dNxc.roa
Signing time: Mon 29 Aug 2022 17:01:08 +0000
ROA not before: Mon 29 Aug 2022 17:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 194.87.216.0/24 maxlen: 24
194.87.218.0/24 maxlen: 24
194.87.225.0/24 maxlen: 24
194.87.31.0/24 maxlen: 24
194.87.36.0/22 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.14.0/24 maxlen: 24
195.133.26.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
194.135.104.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:8c:bc:b0:b8:19:c8:ba:db:72:a4:16:de:bd:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 29 17:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c17a1087a133422a9b8be26544bb6d855f1d3717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:f8:77:e1:2e:da:6d:54:29:47:ac:ff:b8:
3a:29:cd:d0:8f:bb:e5:c2:eb:ce:f6:71:e0:88:39:
c4:d5:07:bc:df:c9:d5:06:6d:c0:a1:b1:36:6e:aa:
28:4b:ad:35:8a:78:69:20:4d:8e:64:e3:b6:d0:13:
4b:37:7d:b5:19:fe:48:3e:5f:d9:10:1c:9b:16:a1:
f3:fc:fd:ef:d7:05:c1:78:b2:1e:40:36:cc:14:16:
35:64:a9:30:e9:0f:20:00:f7:8b:32:f0:f3:3c:fc:
f1:be:4d:ef:5b:21:38:eb:10:45:dc:10:a4:cc:3f:
1d:98:88:bd:9b:f0:88:9f:32:c9:48:7e:24:e7:5d:
aa:fa:58:fc:3a:1a:cb:16:d9:ec:b3:b8:d6:54:10:
ca:19:45:12:20:18:c5:1f:71:69:3f:80:79:05:bd:
47:c1:42:35:09:65:7d:9f:55:61:fc:1c:cb:03:80:
3c:b0:5d:8e:df:c5:12:1c:2c:60:cd:f2:a5:ff:ce:
c5:1e:14:6c:90:ae:5c:85:6e:a4:1d:ac:dd:2e:3d:
ce:0a:fd:ce:8b:54:22:de:bf:61:c2:0a:2c:21:ce:
d4:6f:71:be:0b:a9:a6:33:a7:83:70:dd:51:66:51:
6a:3b:7a:34:67:bc:2e:c7:5b:42:e1:87:87:5c:0a:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:10:87:A1:33:42:2A:9B:8B:E2:65:44:BB:6D:85:5F:1D:37:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wXoQh6EzQiqbi-JlRLtthV8dNxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.31.0/24
194.87.36.0/22
194.87.216.0/24
194.87.218.0/24
194.87.225.0/24
194.135.32.0/24
194.135.38.0/24
194.135.104.0/24
195.133.9.0/24
195.133.21.0/24
195.133.25.0-195.133.27.255
195.133.59.0/24
212.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
91:23:b8:cb:d3:86:99:97:af:84:76:a4:be:4a:d4:41:e9:d3:
3c:38:f4:ef:1d:c9:37:6e:a3:ae:63:7f:95:89:44:fc:59:78:
b9:c9:07:67:72:7a:ef:28:73:c9:63:4b:cd:a9:8d:5e:d7:3f:
af:7b:72:f7:88:11:9a:2f:c4:ca:92:c7:b2:0a:8c:e8:19:b6:
4a:85:0a:6d:20:ad:13:69:fd:70:5d:c7:54:01:f0:a8:b6:84:
03:a4:61:dd:05:57:fa:ef:da:90:4d:81:d8:fd:c6:02:74:b9:
ad:b9:53:9f:ed:d4:11:8a:b2:ee:f9:f3:fc:91:7f:30:b4:75:
51:73:b7:f2:86:1c:e8:8c:f1:21:ea:22:48:60:70:e7:92:38:
cf:34:1f:2a:09:17:b8:ab:0f:da:b2:de:20:4d:b6:89:92:17:
a8:ca:9e:32:ed:e2:7f:c0:a1:20:3c:46:cd:8f:94:7d:00:61:
f1:75:cd:1b:ac:92:b9:e6:fe:69:40:c4:04:df:48:c2:45:96:
51:8e:de:15:93:50:69:3a:98:07:a3:5b:44:86:df:a5:76:11:
93:11:b7:e0:99:77:f6:f4:2c:37:d0:e4:7d:67:5c:94:ef:6d:
44:96:b0:33:44:af:e4:61:87:8f:d5:c1:19:11:b8:12:57:b5:
53:a3:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-ams.rpki-client.org