Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJphj3VR04FSvOiZQWDcg8-_6zE.roa
File: yJphj3VR04FSvOiZQWDcg8-_6zE.roa (raw, json)
Hash identifier: +NNZe19Ln0j4T/rdpU1quBshJU4rKsZrFA2IIUX/Zh0=
Subject key identifier: C8:9A:61:8F:75:51:D3:81:52:BC:E8:99:41:60:DC:83:CF:BF:EB:31
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018378FA3B4B859A1968B16A59194DD717C8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJphj3VR04FSvOiZQWDcg8-_6zE.roa
Signing time: Mon 26 Sep 2022 08:46:48 +0000
ROA not before: Mon 26 Sep 2022 08:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.219.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
195.133.12.0/22 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:78:fa:3b:4b:85:9a:19:68:b1:6a:59:19:4d:d7:17:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 26 08:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c89a618f7551d38152bce8994160dc83cfbfeb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:a9:4b:2e:c4:35:cb:39:7f:7b:8a:66:4e:
4a:37:ea:37:75:34:12:16:36:68:fe:54:30:b4:e0:
bd:c6:ec:db:53:c0:3f:3e:eb:b0:05:3e:b4:44:5f:
dc:39:62:3a:2d:99:77:7e:69:78:93:50:ea:62:e6:
d5:ce:74:36:2a:90:6a:b3:05:43:d0:7a:54:ae:ca:
58:7e:6b:7a:d0:bb:7d:03:e2:09:85:00:a7:de:2c:
5b:45:51:bc:8d:85:b1:fd:15:c0:ad:87:1c:45:7f:
49:40:3d:7a:0f:42:22:f4:0c:19:e6:fc:3c:e5:7e:
35:b7:26:4a:7c:87:6c:7a:76:f2:f5:b8:6e:f9:4a:
b8:02:72:24:7b:48:58:c0:cb:cf:87:23:6f:9c:b5:
bd:d5:98:b3:64:07:48:0a:38:71:6c:59:f3:1c:e7:
95:0a:bf:d5:0d:95:6c:b4:7e:91:92:e2:02:3f:29:
52:32:90:6e:71:36:aa:8e:82:58:ec:fa:7d:1c:88:
8b:8e:53:48:ef:c6:7d:fb:8c:09:a3:af:b9:87:e0:
cc:b7:fe:8f:bd:8d:2d:4e:6a:36:ef:8c:57:3b:f2:
f8:b6:74:9d:3a:14:c3:a7:6f:74:fc:8b:8b:e3:98:
03:18:69:d4:61:72:93:e6:bc:34:e4:a0:b2:c6:77:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:61:8F:75:51:D3:81:52:BC:E8:99:41:60:DC:83:CF:BF:EB:31
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJphj3VR04FSvOiZQWDcg8-_6zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.45.0/24
193.124.90.0/24
193.124.203.0/24
194.58.45.0/24
194.87.1.0/24
194.87.24.0/22
194.87.64.0/24
194.87.165.0/24
194.87.179.0/24
194.87.198.0/24
194.87.208.0/23
194.87.219.0/24
194.87.222.0/23
194.135.23.0/24
195.133.12.0/22
195.133.80.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
55:5c:e0:06:db:ff:78:bb:69:e7:02:26:40:8b:79:93:1a:7b:
06:3b:76:2d:4d:de:06:54:e8:b6:d9:f4:7c:a3:30:2b:35:b8:
4f:08:fa:3a:64:ac:58:53:71:e5:27:3d:c6:1d:4a:9e:da:e1:
c2:94:ce:7f:98:da:ae:ec:ec:fb:f6:47:db:c8:e4:de:0c:50:
6a:b4:48:96:b0:5b:c9:6c:23:62:75:3c:42:23:9e:ec:3a:ed:
d4:c9:4b:4b:a7:a6:85:fe:7b:33:4e:bb:76:90:87:10:6c:2d:
13:3f:f6:1d:52:d2:3d:80:a3:de:18:9c:48:14:e4:a5:1b:b7:
26:dc:45:38:df:81:a2:53:0b:e0:63:fc:39:e6:8b:a2:81:53:
c5:f9:91:f9:45:43:fe:9c:46:54:7c:dd:82:82:cf:84:4b:ae:
71:e3:dc:5b:8a:67:e9:1a:d1:99:c1:c7:8e:a9:bc:cb:dd:6d:
8a:86:2d:20:bc:a7:5c:20:2f:b0:b7:da:3e:8a:69:40:3d:67:
64:33:c4:48:96:be:b4:ef:a2:39:99:b2:a9:5b:85:e2:48:03:
98:4c:02:3f:26:07:48:b4:26:e7:32:aa:ca:58:d9:f5:41:76:
da:57:83:e9:03:d5:63:b5:f1:73:8c:40:a0:80:42:9a:ac:3d:
f9:64:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:14 2023 by rpki-client on console-fra.rpki-client.org