Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yNFi-TrghgOYnNadRZwv8xdhn3M.roa
File: yNFi-TrghgOYnNadRZwv8xdhn3M.roa (raw, json)
Hash identifier: 2Vmtnwfq1amtSFJ8Kc5SzwM2+2R9FM24JNLCEtNG5VY=
Subject key identifier: C8:D1:62:F9:3A:E0:86:03:98:9C:D6:9D:45:9C:2F:F3:17:61:9F:73
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01850C8F42ACF3BFB622E23D23D92A02C64E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yNFi-TrghgOYnNadRZwv8xdhn3M.roa
Signing time: Tue 13 Dec 2022 17:36:33 +0000
ROA not before: Tue 13 Dec 2022 17:36:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:8f:42:ac:f3:bf:b6:22:e2:3d:23:d9:2a:02:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 13 17:36:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8d162f93ae08603989cd69d459c2ff317619f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:cc:1b:2b:b9:34:c9:1d:00:bb:d4:8e:b1:
08:4d:54:cd:71:27:65:71:8a:54:c4:02:75:31:3c:
72:62:36:73:54:2f:73:7e:49:16:1e:45:f3:55:94:
49:d4:cd:3c:93:87:dd:ad:9a:57:cc:fc:70:d2:0c:
7e:f5:72:aa:80:ad:21:b2:02:80:fe:5e:81:22:d8:
d8:ff:bf:61:b7:ef:fa:21:6a:c8:6b:2f:ae:8f:5d:
1a:28:63:5f:8a:10:2c:60:77:59:34:2c:59:9a:ac:
9f:14:6f:0c:2f:c3:0b:c0:df:c3:c7:a8:04:a9:08:
dd:5e:a1:35:80:64:55:5f:e9:5d:cb:21:94:45:ef:
b0:e9:9e:07:41:a0:c2:b9:3a:62:4a:0c:7c:31:72:
ff:c4:10:ce:55:9f:89:77:c6:dd:b6:f2:5b:91:fb:
dc:44:0d:03:68:b8:b5:bf:19:9e:a1:f9:a1:85:52:
da:9b:3f:9f:da:02:05:73:fe:13:e3:8f:3e:d0:95:
4d:9f:75:f7:e7:73:df:58:b4:a4:ae:b1:f7:0f:af:
6e:0e:63:cd:5c:25:ab:f2:2c:d3:ae:4e:6d:fa:b0:
ea:86:71:b1:f0:2c:bb:17:23:49:55:2c:da:75:14:
63:3a:70:85:3d:7a:c6:49:5e:43:22:0a:59:b5:96:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D1:62:F9:3A:E0:86:03:98:9C:D6:9D:45:9C:2F:F3:17:61:9F:73
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yNFi-TrghgOYnNadRZwv8xdhn3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
194.87.1.0/24
194.87.38.0/24
194.87.73.0/24
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.178.0/23
194.87.187.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.133.0.0/24
195.133.35.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
33:10:d4:98:0f:ec:d6:f9:54:01:58:20:f5:4d:99:85:6d:2f:
84:2a:f6:69:99:47:42:7e:87:57:7d:79:08:bc:d2:a9:e2:3e:
7c:18:1c:f3:2f:20:ad:b0:28:fe:db:b3:0f:72:4b:c4:24:ab:
dc:24:be:d8:2f:e3:07:ef:ce:27:90:51:59:7e:60:29:da:cc:
af:8e:02:2b:6d:91:ec:87:6d:2c:89:95:ef:3d:fc:03:e9:23:
88:b0:01:9f:24:d5:bb:9f:9a:8b:96:7e:95:e5:cc:01:22:96:
eb:66:5e:03:16:88:6b:1f:25:3d:5c:a5:f7:0c:9e:9c:c2:cb:
9c:d5:1a:63:6d:ba:06:b9:87:85:73:86:1c:17:c6:3d:22:cd:
29:e5:d8:49:9f:e2:8e:48:bc:cc:fd:de:38:9e:99:eb:2c:e4:
34:4d:8c:3a:5e:a6:b6:1f:8d:06:e6:dd:0a:9c:ae:20:93:f5:
c9:1c:41:3f:38:96:e8:f8:7e:2a:b2:e7:1d:dd:72:20:70:84:
bb:c4:c3:fb:67:77:71:da:0e:5f:2b:4d:f2:8d:54:c5:12:b6:
4f:2f:f6:e5:25:35:83:5e:50:90:16:35:ca:4e:1b:24:77:98:
9f:cc:78:46:35:16:52:69:c5:4b:b8:98:af:f0:1c:2b:57:fc:
10:87:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:51 2024 by rpki-client on console-ams.rpki-client.org