Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xPJPPLfILqW1t1tz-QTJyMsIZqA.roa
File: xPJPPLfILqW1t1tz-QTJyMsIZqA.roa (raw, json)
Hash identifier: 3EFlHxG2x7WZf1Sp5rqxoPXVrkfgcoQlVFOPwOphw+o=
Subject key identifier: C4:F2:4F:3C:B7:C8:2E:A5:B5:B7:5B:73:F9:04:C9:C8:CB:08:66:A0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01827A08A5B8C2316F34F030F24DE6B39547
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xPJPPLfILqW1t1tz-QTJyMsIZqA.roa
Signing time: Sun 07 Aug 2022 20:39:23 +0000
ROA not before: Sun 07 Aug 2022 20:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.32.0/22 maxlen: 24
195.133.12.0/22 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.87.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7a:08:a5:b8:c2:31:6f:34:f0:30:f2:4d:e6:b3:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 7 20:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4f24f3cb7c82ea5b5b75b73f904c9c8cb0866a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:ca:0e:27:93:1c:ae:71:85:99:a0:9b:b8:
74:b7:46:57:4f:c2:23:0a:a3:85:ad:a7:ba:26:cd:
18:64:72:b8:83:2a:64:c8:2f:64:59:aa:ac:44:fc:
db:43:69:55:d6:5d:d6:a9:2e:1d:42:9a:2c:17:1f:
f5:ef:99:5c:b4:cc:1f:54:3d:08:51:1b:7b:63:3f:
17:e1:cd:44:73:fa:90:9c:34:18:34:d1:69:52:50:
30:6a:93:c8:f2:37:15:85:2b:77:b0:da:46:dc:eb:
97:e9:f7:23:d9:2d:2a:e5:ab:c3:26:15:28:bb:cb:
0f:de:9d:57:d7:33:0f:1d:ab:ad:ff:a1:a5:d5:58:
9b:f6:08:93:bc:27:e9:42:48:43:bc:3f:b3:8d:b1:
cf:5a:24:41:57:13:fe:27:ce:ae:da:dd:63:f3:c7:
ea:51:16:af:2e:1a:d2:09:ed:65:f4:89:57:67:96:
80:b8:d4:5d:b2:ed:fa:95:f2:b3:a5:96:9f:e8:36:
8c:ba:f0:1b:e8:e0:49:f9:b3:e2:6b:ae:60:b2:30:
b3:2d:22:f4:1e:3c:45:93:b3:98:ba:b3:55:ec:32:
7b:f2:42:88:3e:90:09:37:d3:c7:ba:5b:bd:26:da:
50:e5:0c:cb:fd:85:e2:91:2c:3c:2b:bf:1a:2c:7d:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F2:4F:3C:B7:C8:2E:A5:B5:B7:5B:73:F9:04:C9:C8:CB:08:66:A0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xPJPPLfILqW1t1tz-QTJyMsIZqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.203.0/24
194.87.1.0/24
194.87.24.0/22
194.87.32.0/22
194.87.116.0/22
194.87.179.0/24
194.87.187.0/24
194.87.219.0/24
194.87.222.0/23
194.135.23.0/24
195.133.12.0/22
195.133.77.0/24
195.133.80.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:88:5b:6f:75:ae:e5:5e:3a:5f:dd:96:52:13:cf:c3:84:24:
5c:36:d7:f8:d1:08:d2:93:e6:ce:1e:94:ff:d4:5e:0f:05:eb:
34:60:47:cc:ea:bb:30:62:98:d5:77:2a:bb:36:63:76:41:ab:
0a:16:08:ff:21:5d:c1:56:4d:18:68:34:00:11:6c:fb:71:c5:
e8:5c:74:34:cb:bc:bf:ea:08:07:54:3a:8d:af:e2:7e:a7:ee:
e2:98:66:e6:28:1e:be:4b:92:88:37:f5:f8:7f:2d:6d:61:da:
1a:46:dc:ad:ff:e4:5d:3e:6c:5f:95:7a:c1:54:46:f6:4f:be:
04:33:c1:0d:9f:90:d7:ea:ec:25:1d:a3:e6:73:26:f0:3e:a2:
b6:d4:3c:2f:c7:3f:7d:db:5a:ef:6f:ba:ba:47:54:89:37:6f:
78:47:eb:c0:4f:78:27:13:86:0e:ae:cf:64:d6:54:61:b9:7f:
0c:ee:65:eb:bf:2c:b0:9c:a7:fb:73:c0:22:d6:2a:db:be:4c:
25:07:27:ec:88:53:68:c2:7f:c1:02:2f:58:31:74:b8:2f:22:
df:b0:f1:db:22:2a:26:49:26:68:c9:e3:3b:41:a0:7d:bf:c8:
bb:d3:2d:44:fd:59:2f:0c:60:7d:c1:5a:e8:ae:af:6e:a1:99:
ec:90:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org