Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/U3DwNoBdrauERqo395_5py-aJG4.roa
File: U3DwNoBdrauERqo395_5py-aJG4.roa (raw, json)
Hash identifier: Z3WqsBGM6R7MPVkD6MDWoMyMwtpK9/gO71KpedfoYlg=
Subject key identifier: 53:70:F0:36:80:5D:AD:AB:84:46:AA:37:F7:9F:F9:A7:2F:9A:24:6E
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 07D33BF7
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/U3DwNoBdrauERqo395_5py-aJG4.roa
Signing time: Sat 01 Jan 2022 06:04:18 +0000
ROA not before: Sat 01 Jan 2022 06:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209979
IP address blocks: 194.35.103.0/24 maxlen: 24
194.35.100.0/22 maxlen: 22
194.35.100.0/24 maxlen: 24
194.35.101.0/24 maxlen: 24
194.35.102.0/24 maxlen: 24
2a09:c580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131283959 (0x7d33bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Jan 1 06:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5370f036805dadab8446aa37f79ff9a72f9a246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:e5:48:04:cb:e1:06:06:0e:72:2c:99:64:
f2:c3:d4:e1:a3:f0:1d:6f:ec:fc:65:bd:2f:85:0e:
59:64:1d:cc:2e:dc:06:80:51:4a:04:ae:9c:7c:f6:
ec:c3:7e:51:62:bb:80:5d:ba:03:b5:f1:4d:ba:a8:
04:ae:3d:e7:c7:47:83:90:6a:1e:4d:aa:5f:10:07:
03:93:d2:27:7a:1c:8f:65:be:70:ae:da:25:db:19:
92:eb:84:26:f1:d9:66:63:e0:8c:8d:0a:45:82:5e:
2f:5e:1a:ce:f0:63:29:c9:38:75:05:c7:da:76:3f:
4a:48:1b:92:4d:c8:be:07:ca:6c:98:f9:9a:c6:ce:
d0:cc:b3:ce:8e:e2:91:42:81:0f:d9:5f:b9:fe:c0:
41:e9:5e:ac:cb:91:55:8d:76:83:b6:78:98:ee:4b:
e3:7a:8b:7a:8d:17:81:35:4a:31:bc:68:9e:a6:7a:
2b:05:9d:20:b9:50:a7:8a:88:92:6d:82:94:62:44:
28:54:1e:a2:3a:5e:f9:c5:4d:1e:67:b5:a8:55:6a:
76:b1:e8:51:d5:cc:e5:86:20:30:26:88:98:6c:bd:
98:6c:b8:aa:70:17:e6:cf:c5:15:23:3d:37:11:cf:
e3:b8:71:e0:9c:24:f4:b9:b0:69:15:ab:b1:fa:98:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:70:F0:36:80:5D:AD:AB:84:46:AA:37:F7:9F:F9:A7:2F:9A:24:6E
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/U3DwNoBdrauERqo395_5py-aJG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.100.0/22
IPv6:
2a09:c580::/32
Signature Algorithm: sha256WithRSAEncryption
0c:5b:12:24:9d:45:c7:ce:2c:5d:a8:65:8e:62:b6:99:2b:87:
a8:a9:8c:a7:10:1f:16:e1:34:fe:b3:f1:c2:42:84:76:61:d9:
48:a6:a5:a3:c0:96:f0:c9:de:8b:80:01:91:5f:08:18:e9:cb:
43:57:df:36:d7:e9:41:c9:bd:2b:af:b2:5b:3c:83:01:8e:2a:
d9:82:c5:c3:34:85:f3:25:e3:19:b6:55:aa:1d:ab:af:c5:9e:
3f:c1:c4:31:96:dc:b6:53:9d:f1:0a:f5:e5:8c:a0:ce:26:17:
e9:c2:a7:55:d2:8d:84:98:43:ae:0a:f1:0f:b1:a7:78:b9:36:
11:cc:fe:54:c7:65:b1:4e:5c:ee:d5:de:2c:d3:57:fb:5c:eb:
25:7f:6b:f0:8a:42:56:53:b8:84:46:b7:c0:e3:57:a2:0c:2a:
67:29:1b:2f:51:04:14:03:e2:28:73:2d:3c:2c:f9:bf:08:8c:
c7:93:0f:2f:bb:bb:b9:07:5a:67:3e:0d:41:b1:ef:c1:d6:0e:
ce:49:32:99:db:6c:16:3b:90:a5:35:70:c4:17:db:2a:57:f8:
23:94:cb:19:70:a3:7e:6f:fc:bb:3a:2d:b0:30:5b:ea:10:8d:
4a:55:b7:35:6e:b1:5e:3d:4a:e7:5b:3d:85:3c:03:e5:03:1a:
39:bf:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-fra.rpki-client.org