Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zaBUE3u2Npg8XHrA8bTQw2xwNoM.roa
File: zaBUE3u2Npg8XHrA8bTQw2xwNoM.roa (raw, json)
Hash identifier: GQkPj+rJgbX2ZgiDAK3B2d1ONvQN/N12zDmS6sBofes=
Subject key identifier: CD:A0:54:13:7B:B6:36:98:3C:5C:7A:C0:F1:B4:D0:C3:6C:70:36:83
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01830E149E5A201CDEC3E4474DB67FB8E6DE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zaBUE3u2Npg8XHrA8bTQw2xwNoM.roa
Signing time: Mon 05 Sep 2022 14:36:15 +0000
ROA not before: Mon 05 Sep 2022 14:36:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.45.0/24 maxlen: 24
195.133.12.0/22 maxlen: 24
194.87.164.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:14:9e:5a:20:1c:de:c3:e4:47:4d:b6:7f:b8:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 5 14:36:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cda054137bb636983c5c7ac0f1b4d0c36c703683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:b9:ed:c9:49:bf:a1:d6:3f:cc:b7:d5:b9:
c1:ee:d0:5e:52:8f:18:69:38:99:9e:6a:60:7e:75:
b0:d9:e7:94:36:4c:01:cf:92:4b:4e:70:fd:70:d1:
6a:88:c7:6d:8c:fe:e0:cd:ca:44:23:f4:6a:ae:06:
a3:55:aa:c7:44:30:30:b1:09:17:7e:fc:a0:61:0a:
11:b7:24:a8:07:a1:3d:1c:08:92:99:fa:b1:2e:38:
fb:49:9c:6a:f3:04:03:cf:2b:a9:a3:53:f9:5c:86:
b4:43:c1:5a:66:7e:9e:0c:55:24:e1:43:e4:2d:28:
98:e5:8b:fd:a0:c0:db:d9:1d:de:f0:ab:43:3c:7c:
55:7a:2a:11:06:08:41:8a:66:cf:49:10:36:6e:cc:
6c:8b:d0:51:01:32:30:8b:ba:1a:c2:8b:4d:b0:05:
25:c1:23:08:02:4e:32:8d:b2:7b:d2:90:82:fe:00:
13:ca:76:e1:07:84:6c:87:3f:f0:8d:52:7e:ee:71:
27:c3:7f:f6:09:10:eb:c4:07:c7:4a:60:a8:9a:08:
09:f3:e4:de:5c:d0:ce:f0:d5:fd:ff:69:25:57:b1:
99:85:ab:3a:f5:4d:af:32:9c:b7:e0:da:c9:e2:e3:
a2:f2:17:0c:69:3b:0a:3a:e1:86:24:b4:aa:48:83:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:54:13:7B:B6:36:98:3C:5C:7A:C0:F1:B4:D0:C3:6C:70:36:83
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zaBUE3u2Npg8XHrA8bTQw2xwNoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.45.0/24
193.124.90.0/24
193.124.203.0/24
194.58.45.0/24
194.87.1.0/24
194.87.24.0/22
194.87.164.0/24
194.87.179.0/24
194.87.198.0/24
194.87.219.0/24
194.87.222.0/23
194.135.23.0/24
195.133.12.0/22
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:48:78:de:52:0e:9c:43:9a:e4:19:c8:46:4f:da:72:5e:f7:
f8:b1:cf:5d:56:1f:fc:fc:d2:1e:63:a1:ca:e2:75:e1:b1:0b:
92:a3:96:da:10:70:bf:85:e1:15:e7:80:69:a4:79:ec:32:cc:
42:6e:03:06:f8:6f:dc:68:1c:78:36:b2:bb:e8:dc:04:23:88:
0f:6b:9a:4e:f8:02:31:a2:bd:a9:48:14:8b:8f:0a:84:58:b9:
b2:31:42:16:36:34:73:05:06:79:27:b4:1a:43:08:b4:58:85:
c5:ea:e7:74:90:6b:f4:67:74:fe:ba:c5:b7:0c:01:95:76:86:
8c:f8:08:68:82:dc:8c:89:38:7d:8d:e7:53:c1:ea:f1:00:04:
17:b6:07:1a:cc:87:dc:f7:f6:a1:c7:4d:53:c0:55:53:bb:7c:
fe:9a:df:6f:9d:ce:cb:6d:f1:58:23:46:0e:6e:4a:01:c6:f4:
23:7a:68:0b:0f:22:9d:45:da:1e:fb:4d:5f:d4:28:00:39:db:
ce:21:02:79:82:50:86:ee:d3:57:0a:48:a3:ba:e0:34:d2:f8:
ce:11:ca:59:cc:5e:9d:59:31:39:19:d4:1d:e3:7b:aa:52:32:
0a:0b:87:09:bc:70:17:c6:e7:9a:80:11:4b:b9:d7:db:0e:16:
83:b9:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:15 2023 by rpki-client on console-fra.rpki-client.org