Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/KoewTOFPM5eV7NOys_bjw1qiG9k.roa
File: KoewTOFPM5eV7NOys_bjw1qiG9k.roa (raw, json)
Hash identifier: SufUlDfAJXlNpF44ioYkmiquuzFmKUQsAHvMtWI+kvw=
Subject key identifier: 2A:87:B0:4C:E1:4F:33:97:95:EC:D3:B2:B3:F6:E3:C3:5A:A2:1B:D9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 05D85E1E
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/KoewTOFPM5eV7NOys_bjw1qiG9k.roa
Signing time: Wed 30 Mar 2022 11:15:42 +0000
ROA not before: Wed 30 Mar 2022 11:15:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213176
IP address blocks: 212.59.64.0/24 maxlen: 24
212.59.67.0/24 maxlen: 24
212.59.70.0/24 maxlen: 24
212.59.66.0/24 maxlen: 24
212.59.69.0/24 maxlen: 24
212.59.65.0/24 maxlen: 24
212.59.68.0/24 maxlen: 24
209.35.224.0/24 maxlen: 24
209.35.226.0/24 maxlen: 24
209.35.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98065950 (0x5d85e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Mar 30 11:15:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a87b04ce14f339795ecd3b2b3f6e3c35aa21bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:a2:81:64:cf:55:bd:81:c5:c3:45:b7:73:
c1:41:86:45:4f:7d:46:c3:03:5e:c2:6d:c3:4a:d3:
1c:63:8f:4a:15:59:01:d9:78:0b:54:3a:2a:02:f6:
57:d9:e2:48:5c:fc:ce:bc:6b:74:22:10:0a:d2:05:
dd:f0:2e:69:e4:1b:17:fd:12:12:c0:b3:5c:e2:b1:
87:7d:8b:15:19:79:b1:84:85:e6:95:fb:c2:fe:50:
51:b5:e4:03:5c:f3:40:52:14:db:37:43:88:08:b2:
69:7f:a0:45:cd:e7:0c:af:b3:ea:29:99:00:46:fa:
49:96:87:d7:af:1a:2c:f8:dc:e2:98:b1:f3:8d:f8:
1c:a1:65:f1:a7:83:83:f9:a9:cb:da:92:3a:8c:09:
f9:fe:6a:fa:30:d7:57:31:a6:be:3b:d5:0a:e0:49:
0a:15:79:a1:6a:bd:57:ea:39:9e:76:c5:6d:2b:f4:
8a:04:a5:f8:ee:41:df:40:9a:c7:fd:14:e7:87:92:
c2:35:c2:83:09:12:de:b6:1d:36:1a:cc:3b:48:98:
48:36:60:74:15:78:8f:99:63:35:a9:5c:f7:ca:96:
bb:7e:49:bc:cc:a7:83:cd:41:2e:7c:72:08:4f:f5:
c5:87:76:81:4c:60:2a:79:6d:0a:aa:64:32:f8:b4:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:B0:4C:E1:4F:33:97:95:EC:D3:B2:B3:F6:E3:C3:5A:A2:1B:D9
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/KoewTOFPM5eV7NOys_bjw1qiG9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.35.224.0-209.35.226.255
212.59.64.0-212.59.70.255
Signature Algorithm: sha256WithRSAEncryption
8c:64:0c:5a:15:ca:4f:61:a2:4a:0c:e5:6a:56:bd:f6:5b:7e:
f6:5d:b5:37:c2:45:db:19:1b:1c:26:d8:06:5b:22:62:62:01:
e1:1a:a7:ea:16:9f:a6:03:3a:5d:f1:92:d2:da:26:5b:65:ac:
2e:c9:46:b8:c7:c6:71:3c:4e:17:de:4f:fd:1a:7b:aa:04:c1:
e2:0c:83:aa:61:07:be:f3:fe:6f:03:dc:5a:fd:0f:3e:1e:f0:
72:8b:cd:94:b6:82:d3:54:a5:96:3a:52:e7:74:a8:3f:4b:b8:
f9:e7:7e:4c:aa:51:c8:56:bb:b7:11:3f:b3:3b:49:f5:93:4f:
b6:00:7a:2a:9e:6b:25:f7:e0:45:cd:67:05:af:e9:ed:15:53:
ac:16:1d:28:eb:29:7f:ee:16:07:7d:16:5c:63:58:2b:80:fd:
6e:7d:a5:9d:fe:17:62:fd:43:bf:c2:92:1a:45:12:e2:bc:c7:
0b:24:2b:de:11:a6:61:e8:fc:8a:e8:f4:13:04:74:c7:b4:65:
0e:4b:26:84:91:cb:eb:6b:aa:d1:df:07:64:fa:c6:bc:c4:ac:
bf:a5:4a:c9:67:fd:86:31:26:e7:ec:2f:18:8b:a9:64:64:98:
56:88:81:2a:76:bf:ae:f1:fb:53:7e:11:59:22:e3:d6:01:7c:
1d:ea:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:15 2023 by rpki-client on console-ams.rpki-client.org