Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xS9e2dUsagnahE8CuYIIZolf32E.roa
File: xS9e2dUsagnahE8CuYIIZolf32E.roa (raw, json)
Hash identifier: IAygYmMLoCJQDdATq0+yrIuoBsTK6+DXddlYgT7wzJM=
Subject key identifier: C5:2F:5E:D9:D5:2C:6A:09:DA:84:4F:02:B9:82:08:66:89:5F:DF:61
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018507253BF3B57D676F5F97AF1DC496DFFB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xS9e2dUsagnahE8CuYIIZolf32E.roa
Signing time: Mon 12 Dec 2022 16:22:38 +0000
ROA not before: Mon 12 Dec 2022 16:22:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:25:3b:f3:b5:7d:67:6f:5f:97:af:1d:c4:96:df:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 12 16:22:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c52f5ed9d52c6a09da844f02b9820866895fdf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:34:d5:b2:6c:a7:09:8d:3e:5a:e5:95:72:
d8:c6:37:77:e4:23:7f:8f:af:96:70:cf:b1:fe:d9:
99:e7:99:7e:b9:26:0e:cf:a5:f8:0f:b5:19:86:15:
bc:84:b2:ff:f9:a6:a2:fc:ed:cb:41:f9:02:01:a3:
45:40:89:d2:e8:e7:dd:e2:6a:cd:f0:a8:af:8a:87:
da:31:13:83:da:af:5b:a0:77:8b:99:ca:87:51:f1:
b7:70:f3:37:dc:7a:c0:0a:83:b3:35:8f:02:df:41:
f6:6c:2a:a3:c2:02:ed:da:fa:a8:82:0c:d4:08:e1:
fc:c6:71:19:4a:c9:ab:5a:f0:8a:da:d6:8c:f5:35:
79:d7:ac:56:74:98:60:73:1d:56:1f:f9:69:fe:b1:
97:f9:90:a5:00:38:37:7b:f6:8a:aa:ff:e1:89:c3:
46:c3:6f:d7:a3:83:b0:c1:1c:ca:43:08:40:72:f7:
c6:e7:fa:cd:20:ed:81:6e:17:84:2b:3c:6e:4c:17:
37:5a:b4:fc:a5:b6:7c:c2:ef:bd:ab:d6:6c:bc:3f:
37:10:2d:da:e3:f9:49:fa:1b:91:0c:55:7c:16:b8:
0a:02:a9:da:4c:94:f9:97:ff:f7:3e:c3:ba:f4:37:
bb:24:4f:e8:98:a0:0d:96:47:77:25:71:79:50:9e:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:5E:D9:D5:2C:6A:09:DA:84:4F:02:B9:82:08:66:89:5F:DF:61
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xS9e2dUsagnahE8CuYIIZolf32E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.87.64.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f0:e3:dd:1a:59:73:fa:f4:8c:ce:c5:46:2e:23:5e:41:a8:
c9:b2:05:62:5d:66:ab:35:b3:92:aa:ea:68:32:e1:37:5f:2f:
8b:f4:f3:62:86:f7:f1:76:79:5e:cd:a7:d3:5e:e3:e2:13:12:
0a:1d:88:c2:00:91:70:15:38:5d:0e:46:b2:3f:df:c4:32:65:
7e:71:a1:c1:a2:5e:25:6f:c5:e3:0f:50:b3:dd:a1:74:e1:49:
0b:14:4d:e0:98:05:39:70:bf:e8:8e:8d:af:3e:79:f9:3e:a9:
eb:aa:a3:ac:17:02:dd:9f:b0:86:75:d8:9e:62:a2:7b:47:4a:
26:73:31:5e:40:7d:28:0b:24:29:dd:76:08:16:0d:aa:a9:55:
e4:8f:aa:81:00:35:81:98:cf:87:77:50:bd:4c:3e:1b:ec:72:
37:88:0a:44:21:f7:54:13:2a:db:7a:0d:dc:99:53:9a:54:9c:
f2:1d:2b:2d:49:cd:e3:2e:46:f9:02:cf:98:aa:0c:43:8b:7a:
ad:5b:50:17:af:b6:0d:23:20:c8:88:2b:8e:d5:9c:26:e2:a8:
aa:c9:37:88:9a:57:54:d0:42:e9:9c:27:d6:4b:0f:37:41:16:
ba:4c:97:03:f5:8f:57:6b:41:5d:c9:07:35:6b:6b:6a:5f:1e:
83:57:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:14 2023 by rpki-client on console-fra.rpki-client.org