Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yOZBkzfWwDcvEpQTBAFdpQfMDXI.roa
File: yOZBkzfWwDcvEpQTBAFdpQfMDXI.roa (raw, json)
Hash identifier: cmFXxRItExkn1lb4o+YfYWhmIJohQav8/x4AxHg1/L8=
Subject key identifier: C8:E6:41:93:37:D6:C0:37:2F:12:94:13:04:01:5D:A5:07:CC:0D:72
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01850FD065172917F8BF35F256BC46E6D063
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yOZBkzfWwDcvEpQTBAFdpQfMDXI.roa
Signing time: Wed 14 Dec 2022 08:46:33 +0000
ROA not before: Wed 14 Dec 2022 08:46:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.193.15.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
185.72.9.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:d0:65:17:29:17:f8:bf:35:f2:56:bc:46:e6:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 14 08:46:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8e6419337d6c0372f12941304015da507cc0d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:d0:f4:04:4f:4f:38:cb:f9:6c:7b:cb:a1:
3a:8d:a1:57:7a:10:0e:81:1b:b8:71:f6:4c:ba:c6:
37:09:d5:20:1c:c8:ee:9b:31:7a:fa:a0:dd:75:9f:
d7:6d:b5:ed:e9:9c:df:cf:b2:06:b0:97:6f:d9:ae:
0b:21:f9:27:63:d4:24:ba:84:19:a3:76:3d:84:59:
d1:c9:f6:4a:34:67:b7:8f:64:0b:17:69:46:e2:56:
1b:87:90:71:76:57:6d:f8:96:b8:67:3a:82:57:8a:
5b:53:c7:42:fa:b0:bd:c6:b0:c0:1d:74:81:3f:3f:
e9:cf:7e:fa:c7:71:8e:98:ba:4e:92:95:fb:41:eb:
dd:22:29:84:4d:69:83:e9:7f:79:c0:39:f4:95:ec:
15:58:e2:1d:92:84:94:9e:a5:2f:7c:34:19:5f:a4:
01:c7:f3:8e:3d:15:32:05:de:f2:bb:7f:dc:58:24:
e2:cd:ee:cc:ca:b2:a2:40:ef:4f:9b:31:d9:c6:2f:
b1:b3:61:5f:d0:7f:42:b4:d1:9f:4f:9d:58:12:1f:
4c:51:2c:95:79:15:1e:3b:20:f0:f3:c4:ab:8a:01:
18:35:a7:b3:d3:15:5a:8f:5d:d5:85:8c:9b:be:ee:
93:97:d6:5d:b4:64:5a:e3:aa:5b:49:99:e0:a1:1d:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:41:93:37:D6:C0:37:2F:12:94:13:04:01:5D:A5:07:CC:0D:72
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yOZBkzfWwDcvEpQTBAFdpQfMDXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.9.0/24
194.87.73.0/24
194.87.90.0/24
194.87.181.0/24
194.87.198.0/24
195.133.82.0/24
212.193.0.0-212.193.2.255
212.193.6.0/24
212.193.12.0/22
Signature Algorithm: sha256WithRSAEncryption
20:1f:ea:58:ac:3e:0f:2c:52:5a:12:ff:7c:7a:a7:26:4e:e9:
f3:d5:da:c2:d6:80:0e:b9:c4:70:4c:74:24:f5:d6:c6:ea:88:
e8:14:d5:a3:6a:a2:97:6c:32:48:36:cf:4b:35:a2:a7:0f:bc:
1b:96:ee:1e:da:00:98:03:84:0d:71:bf:82:99:7f:cd:31:a6:
82:a6:04:4c:66:e8:7b:8c:14:7b:b9:f4:2a:fa:5c:75:21:25:
1e:8d:b8:02:13:b5:bf:57:d0:79:36:78:07:bd:58:99:4d:c6:
cf:92:ba:36:53:78:fb:19:46:36:18:a6:27:44:ff:b0:2f:e8:
0c:6f:0b:2c:dd:d1:c9:0b:99:3f:a2:58:92:91:9e:c4:de:c4:
3c:88:6c:9d:82:d8:39:55:13:f0:49:03:52:24:21:2c:21:fc:
4d:b2:80:49:2a:a6:8b:f9:dc:db:b4:9a:1c:73:70:34:72:f6:
56:29:e9:e2:81:80:20:e4:17:ca:e6:34:73:18:87:d2:da:dd:
fc:94:8b:59:6b:39:03:eb:52:7f:7c:0f:26:b5:0d:30:97:f2:
14:80:57:ab:c7:a1:f1:1f:46:e3:97:b1:fb:6c:74:43:a4:86:
c5:e1:f6:2c:75:fe:14:4e:8b:0a:5b:66:b6:76:62:16:62:68:
50:89:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:15 2023 by rpki-client on console-ams.rpki-client.org