Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4T9YWNOeEa7nPpbD0xaZjS59NiI.roa
File: 4T9YWNOeEa7nPpbD0xaZjS59NiI.roa (raw, json)
Hash identifier: G7qD6LgQJpCGK+r2yMagpuHaxQ6esduw+tgv/0DQoMQ=
Subject key identifier: E1:3F:58:58:D3:9E:11:AE:E7:3E:96:C3:D3:16:99:8D:2E:7D:36:22
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183B23A222E076E930A948BF2192DAF0009
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4T9YWNOeEa7nPpbD0xaZjS59NiI.roa
Signing time: Fri 07 Oct 2022 11:34:57 +0000
ROA not before: Fri 07 Oct 2022 11:34:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.87.118.0/23 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:3a:22:2e:07:6e:93:0a:94:8b:f2:19:2d:af:00:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 11:34:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e13f5858d39e11aee73e96c3d316998d2e7d3622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:b9:60:7b:44:d4:0f:f8:a7:e1:4c:d3:03:
e8:5a:5f:8a:ac:75:35:21:99:2b:c3:00:6a:e1:00:
3b:c2:54:e5:6a:5f:17:d9:14:f2:72:30:36:ee:1b:
ae:9f:66:f8:9c:c9:b5:f2:7f:4d:70:1a:53:af:82:
ed:38:8e:36:e3:ec:e4:f2:c9:76:04:d6:5d:d7:df:
c3:81:3b:c4:cb:36:d3:83:9c:1d:52:9c:8b:bb:90:
d8:fb:47:b8:47:df:e7:bf:87:ae:33:74:da:be:7b:
87:f7:3b:c7:de:9c:b1:51:d6:e5:44:30:d5:e8:24:
ad:c3:99:21:3b:a5:4c:60:e7:af:b6:f9:e0:3d:cd:
9c:e9:55:66:7f:f1:39:17:b2:09:55:bb:87:c4:69:
d3:4e:ca:65:71:ad:88:14:2c:fd:f5:0a:e4:29:03:
33:1d:a7:06:9e:44:c8:e1:5a:e3:99:b0:6f:08:4b:
29:93:6b:8c:78:79:14:2b:d8:93:0a:6f:e9:df:2c:
a5:51:85:0e:ac:f6:33:d5:4a:59:e1:32:09:c9:bb:
ae:59:ef:44:1a:da:2e:bc:c3:77:34:7c:7e:89:24:
22:55:e6:38:e6:b8:69:b3:a2:7a:ab:d2:ee:dd:2e:
b7:e6:ac:48:c5:78:86:22:65:28:80:59:ad:6d:1f:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:58:58:D3:9E:11:AE:E7:3E:96:C3:D3:16:99:8D:2E:7D:36:22
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4T9YWNOeEa7nPpbD0xaZjS59NiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.118.0/23
194.135.32.0/24
195.133.25.0-195.133.27.255
195.133.59.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6f:ad:fe:53:ab:ab:96:65:1b:65:a8:54:6e:1d:d3:2e:9e:
e3:70:20:6b:d2:57:c1:99:4b:a7:ee:3d:3a:6f:23:49:ed:f6:
94:9f:f6:d1:b0:f3:df:45:5a:aa:c6:20:f4:a3:7b:0e:e4:ec:
12:94:75:d8:98:41:9c:64:e9:96:cf:19:24:37:d3:f4:d0:97:
42:44:43:e5:a1:2e:5c:0d:c1:cb:cf:0f:56:41:b2:2c:04:06:
ec:5a:34:7e:48:a0:a7:03:4a:93:3c:16:c6:8d:af:4a:45:66:
e9:05:1e:11:1c:06:a8:f2:ff:a1:c5:d6:ac:9b:1f:f2:bc:f2:
04:7d:61:65:e5:c6:1d:79:43:c6:8c:70:43:26:76:52:2b:5a:
ac:9a:00:3e:60:8f:2e:86:83:e7:80:55:ce:94:5c:dd:53:bd:
19:df:a8:ce:db:a2:d6:91:0f:e1:bb:2a:b1:b6:46:3c:3a:d7:
8e:a0:7d:96:ea:bd:f6:95:11:e0:fe:eb:1b:13:b0:dc:01:d6:
b1:4d:eb:17:16:35:aa:c2:f4:a7:cb:ab:dc:ab:ae:3b:26:c6:
87:43:a5:15:30:41:15:5e:dc:c9:2d:29:cc:67:f0:82:fc:4c:
6e:94:5d:e9:c6:78:ca:d4:97:df:05:f6:16:20:ba:ee:50:d4:
df:54:06:b9
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYOyOiIuB26TCpSL8hktrwAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDA3MTEzNDU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTNmNTg1OGQzOWUxMWFlZTczZTk2YzNkMzE2OTk4ZDJlN2QzNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL25YHtE1A/4p+FM0wPoWl+KrHU1
IZkrwwBq4QA7wlTlal8X2RTycjA27huun2b4nMm18n9NcBpTr4LtOI424+zk8sl2
BNZd19/DgTvEyzbTg5wdUpyLu5DY+0e4R9/nv4euM3TavnuH9zvH3pyxUdblRDDV
6CStw5khO6VMYOevtvngPc2c6VVmf/E5F7IJVbuHxGnTTsplca2IFCz99QrkKQMz
HacGnkTI4VrjmbBvCEspk2uMeHkUK9iTCm/p3yylUYUOrPYz1UpZ4TIJybuuWe9E
GtouvMN3NHx+iSQiVeY45rhps6J6q9Lu3S635qxIxXiGImUogFmtbR/EQwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFOE/WFjTnhGu5z6Ww9MWmY0ufTYiMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNFQ5WVdOT2VFYTduUHBiRDB4YVpqUzU5TmlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBwld2AwQA
wocgMAwDBADDhRkDBALDhRgDBADDhTswDQYJKoZIhvcNAQELBQADggEBADlvrf5T
q6uWZRtlqFRuHdMunuNwIGvSV8GZS6fuPTpvI0nt9pSf9tGw899FWqrGIPSjew7k
7BKUddiYQZxk6ZbPGSQ30/TQl0JEQ+WhLlwNwcvPD1ZBsiwEBuxaNH5IoKcDSpM8
FsaNr0pFZukFHhEcBqjy/6HF1qybH/K88gR9YWXlxh15Q8aMcEMmdlIrWqyaAD5g
jy6Gg+eAVc6UXN1TvRnfqM7botaRD+G7KrG2Rjw6146gfZbqvfaVEeD+6xsTsNwB
1rFN6xcWNarC9KfLq9yrrjsmxodDpRUwQRVe3MktKcxn8IL8TG6UXenGeMrUl98F
9hYguu5Q1N9UBrk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:05 2024 by rpki-client on console-fra.rpki-client.org