Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ixnmNzYFrB9Hf7s72TpQtbysI0.roa
File: 0ixnmNzYFrB9Hf7s72TpQtbysI0.roa (raw, json)
Hash identifier: qdZzkQ8VIXVxQKDomUHPkpBeuLYKNMGpOK9GSlG+6gs=
Subject key identifier: D2:2C:67:98:DC:D8:16:B0:7D:1D:FE:EC:EF:64:E9:42:D6:F2:B0:8D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01843F86C9FF0486BCCBA5959E4EC1738C17
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ixnmNzYFrB9Hf7s72TpQtbysI0.roa
Signing time: Thu 03 Nov 2022 22:05:08 +0000
ROA not before: Thu 03 Nov 2022 22:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 194.135.104.0/24 maxlen: 24
212.193.24.0/22 maxlen: 24
194.87.225.0/24 maxlen: 24
194.87.120.0/23 maxlen: 24
195.133.9.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.26.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3f:86:c9:ff:04:86:bc:cb:a5:95:9e:4e:c1:73:8c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 22:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d22c6798dcd816b07d1dfeecef64e942d6f2b08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:9c:1e:f6:02:47:91:e9:05:28:3a:03:38:
68:f5:97:e4:f1:d9:e5:81:50:ac:9f:79:40:23:77:
bf:d1:4d:24:d6:9a:c4:a7:e0:94:63:cf:4e:9d:4f:
22:aa:5c:16:f7:a5:75:c7:ec:db:72:1f:44:a4:62:
9f:a3:30:2b:3c:70:a2:ee:01:91:e6:11:30:36:47:
79:8d:82:8f:e2:6e:0c:17:09:56:dc:d4:46:25:ef:
fe:14:d2:30:0d:31:1a:c5:36:3b:5e:17:74:03:87:
3d:db:3f:09:94:56:4c:d0:40:e8:76:b5:5f:1e:d5:
14:74:2d:6e:86:97:29:f5:8f:a8:14:64:a4:e7:8d:
26:f6:4b:44:03:79:7c:b1:69:51:53:96:1f:12:5b:
9d:2b:df:c5:fc:03:ed:f0:7f:fc:19:08:7c:51:ab:
82:d5:40:7a:eb:00:c3:99:0f:8f:12:b5:bb:b0:de:
d8:dc:fb:6b:03:12:50:42:0e:cf:e5:14:20:56:2f:
6f:5d:6d:bb:dc:67:9f:a0:f8:03:03:c2:6f:d6:2b:
9d:49:42:45:61:f8:ef:71:29:8f:3e:04:80:68:7d:
d8:40:26:30:d6:d4:68:77:65:c2:32:29:4e:35:0e:
ca:e4:de:64:f6:a4:bf:f8:48:15:cd:05:b1:eb:f0:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:67:98:DC:D8:16:B0:7D:1D:FE:EC:EF:64:E9:42:D6:F2:B0:8D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ixnmNzYFrB9Hf7s72TpQtbysI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.120.0/23
194.87.225.0/24
194.135.32.0/24
194.135.38.0/24
194.135.104.0/24
195.133.9.0/24
195.133.21.0/24
195.133.25.0-195.133.27.255
195.133.59.0/24
212.193.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d9:68:20:2c:50:6c:c9:d9:23:f4:75:00:d9:5a:5f:fc:1a:
15:f9:0c:13:10:2b:f0:d0:39:0d:d2:2a:88:13:7f:0b:8b:a6:
1a:17:f2:ce:50:7e:16:98:e0:b6:b5:22:89:a5:94:3e:e1:9f:
7c:80:c5:e5:d2:b3:b4:35:4a:00:0e:82:9e:d9:a9:8b:e0:6b:
bb:63:f0:93:95:f5:45:fe:c7:21:7b:21:e4:12:9a:2b:36:80:
04:87:f6:0c:f5:c1:06:f0:66:be:94:3c:47:d9:44:60:18:3e:
dd:24:58:ad:c7:76:a5:fd:29:07:21:79:af:c7:f3:ca:44:06:
97:db:2b:6d:92:a2:bb:82:a5:45:b9:c4:7e:2f:31:8e:f9:b5:
6d:5b:aa:78:bf:20:15:8d:eb:39:bc:64:6f:ee:46:8d:2c:15:
ec:70:e9:91:5e:de:fc:35:3d:12:c4:09:26:6f:ef:fa:33:e6:
51:8e:31:e2:85:c6:9d:2d:02:5f:30:96:42:35:25:7b:fa:4c:
75:9b:0c:0a:c9:3f:2d:5d:08:c9:29:ea:3a:98:25:d9:6f:42:
f4:79:69:85:1c:6d:9d:9f:04:76:0e:9c:93:91:06:c1:1c:02:
94:aa:16:dd:c7:b2:66:b8:a2:3a:1c:ec:53:89:b0:6f:2d:7f:
90:83:92:42
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYQ/hsn/BIa8y6WVnk7Bc4wXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTAzMjIwNTA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjJjNjc5OGRjZDgxNmIwN2QxZGZlZWNlZjY0ZTk0MmQ2ZjJiMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeWcHvYCR5HpBSg6Azho9Zfk8dnl
gVCsn3lAI3e/0U0k1prEp+CUY89OnU8iqlwW96V1x+zbch9EpGKfozArPHCi7gGR
5hEwNkd5jYKP4m4MFwlW3NRGJe/+FNIwDTEaxTY7Xhd0A4c92z8JlFZM0EDodrVf
HtUUdC1uhpcp9Y+oFGSk540m9ktEA3l8sWlRU5YfEludK9/F/APt8H/8GQh8UauC
1UB66wDDmQ+PErW7sN7Y3PtrAxJQQg7P5RQgVi9vXW273GefoPgDA8Jv1iudSUJF
YfjvcSmPPgSAaH3YQCYw1tRod2XCMilONQ7K5N5k9qS/+EgVzQWx6/AWUQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFNIsZ5jc2BawfR3+7O9k6ULW8rCNMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMGl4bm1OellGckI5SGY3czcyVHBRdGJ5c0kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBwld4AwQA
wlfhAwQAwocgAwQAwocmAwQAwodoAwQAw4UJAwQAw4UVMAwDBADDhRkDBALDhRgD
BADDhTsDBALUwRgwDQYJKoZIhvcNAQELBQADggEBAEzZaCAsUGzJ2SP0dQDZWl/8
GhX5DBMQK/DQOQ3SKogTfwuLphoX8s5QfhaY4La1IomllD7hn3yAxeXSs7Q1SgAO
gp7ZqYvga7tj8JOV9UX+xyF7IeQSmis2gASH9gz1wQbwZr6UPEfZRGAYPt0kWK3H
dqX9KQchea/H88pEBpfbK22SoruCpUW5xH4vMY75tW1bqni/IBWN6zm8ZG/uRo0s
Fexw6ZFe3vw1PRLECSZv7/oz5lGOMeKFxp0tAl8wlkI1JXv6THWbDArJPy1dCMkp
6jqYJdlvQvR5aYUcbZ2fBHYOnJORBsEcApSqFt3Hsma4ojoc7FOJsG8tf5CDkkI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org