Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4jRbppfdjNmW8Fdl8NbJqCZ5opQ.roa
File: 4jRbppfdjNmW8Fdl8NbJqCZ5opQ.roa (raw, json)
Hash identifier: h+gS2cIrqcSKQPR39pW5MV4rBJrgZ0oSkeROyS6vtUg=
Subject key identifier: E2:34:5B:A6:97:DD:8C:D9:96:F0:57:65:F0:D6:C9:A8:26:79:A2:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182A522C42AB62F65C624D659DBDE3A3254
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4jRbppfdjNmW8Fdl8NbJqCZ5opQ.roa
Signing time: Tue 16 Aug 2022 05:31:35 +0000
ROA not before: Tue 16 Aug 2022 05:31:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
195.133.12.0/22 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:22:c4:2a:b6:2f:65:c6:24:d6:59:db:de:3a:32:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 16 05:31:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2345ba697dd8cd996f05765f0d6c9a82679a294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:cf:c2:2d:03:c9:30:02:2c:bc:1f:a5:cd:
c0:9c:8e:d5:94:78:fe:9e:86:2d:d2:7d:07:45:e3:
0c:6b:66:c1:da:9c:c2:37:e0:6a:75:5c:28:fe:6b:
1e:16:d0:e3:6a:21:1d:2e:2a:9d:09:aa:43:9d:f9:
3a:09:d1:1a:8f:85:f2:2b:00:38:43:13:5d:97:06:
29:65:07:4d:e2:8f:93:c0:c9:ab:d5:26:f6:f7:3d:
2f:a4:84:f7:0a:12:36:34:44:5e:b9:ec:79:dc:34:
58:d6:31:52:5c:32:75:11:b5:b2:82:4b:f4:b4:ee:
de:af:7b:c3:e0:01:5b:64:cf:87:04:f0:6e:00:42:
28:40:2c:d1:73:27:22:d9:fd:51:cc:a2:3d:7f:d6:
71:2e:c2:29:12:df:c4:33:e7:25:30:55:e4:3c:5c:
f8:a2:6b:07:7b:d2:2e:c3:16:87:cd:36:3a:4a:60:
d7:59:22:4b:b4:ea:d8:e9:14:78:91:24:9b:5c:f5:
04:65:82:4b:33:4f:c7:52:1a:9c:35:6e:8a:28:9f:
d5:26:67:69:3f:d7:77:5f:d9:02:5f:6c:b2:07:0b:
e2:9f:0c:d8:bb:81:6a:f2:74:64:8b:5d:83:0c:22:
03:86:68:69:7b:e3:25:70:8b:11:1a:44:fc:c0:2b:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:5B:A6:97:DD:8C:D9:96:F0:57:65:F0:D6:C9:A8:26:79:A2:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4jRbppfdjNmW8Fdl8NbJqCZ5opQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.203.0/24
194.87.1.0/24
194.87.24.0/22
194.87.179.0/24
194.87.219.0/24
194.87.222.0/23
194.135.23.0/24
195.133.12.0/22
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
33:87:77:5c:10:d6:d8:43:a1:93:44:9a:51:2e:6c:ce:b8:2e:
f8:4b:59:8b:53:0d:4c:ac:76:81:60:5f:a0:11:7a:04:3f:9c:
db:03:32:ee:4b:89:88:30:6e:9d:ee:df:32:f6:ab:99:f5:49:
ff:a6:d9:2e:6c:02:50:45:17:53:26:51:58:92:14:e8:b7:e1:
0b:a1:09:a6:0b:7c:c3:9e:35:ec:f2:50:b9:de:77:24:8b:db:
2c:c2:ff:93:4f:dc:89:2f:7a:fe:75:13:0e:31:7a:09:cd:12:
fb:d6:4b:1d:be:e8:80:c3:24:9c:55:7f:16:2d:4f:6a:0d:c9:
7d:11:e6:ba:24:4d:a7:9e:a3:a4:b2:04:49:01:9d:9f:2c:43:
f9:cd:41:14:c8:98:f3:d0:a2:76:b9:f9:1f:8f:78:4b:31:e4:
d2:85:f8:74:3d:9d:c6:8c:b6:e4:a3:86:82:a0:f5:48:0a:e2:
33:d5:b7:2b:a9:63:98:b7:ee:b1:e1:3b:92:4a:51:29:3d:e8:
b3:d7:8a:0d:32:f4:54:56:ba:13:c5:14:ea:2d:da:e0:48:02:
cc:38:76:43:ce:25:e9:74:38:ca:0f:70:0e:73:30:e2:eb:6d:
bf:b8:96:80:18:63:ad:63:c0:06:b5:df:e6:c3:51:9d:a7:f8:
93:8f:ff:13
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYKlIsQqti9lxiTWWdveOjJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwODE2MDUzMTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjM0NWJhNjk3ZGQ4Y2Q5OTZmMDU3NjVmMGQ2YzlhODI2NzlhMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOLPwi0DyTACLLwfpc3AnI7VlHj+
noYt0n0HReMMa2bB2pzCN+BqdVwo/mseFtDjaiEdLiqdCapDnfk6CdEaj4XyKwA4
QxNdlwYpZQdN4o+TwMmr1Sb29z0vpIT3ChI2NEReuex53DRY1jFSXDJ1EbWygkv0
tO7er3vD4AFbZM+HBPBuAEIoQCzRcyci2f1RzKI9f9ZxLsIpEt/EM+clMFXkPFz4
omsHe9IuwxaHzTY6SmDXWSJLtOrY6RR4kSSbXPUEZYJLM0/HUhqcNW6KKJ/VJmdp
P9d3X9kCX2yyBwvinwzYu4Fq8nRki12DDCIDhmhpe+MlcIsRGkT8wCvYGwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFOI0W6aX3YzZlvBXZfDWyagmeaKUMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNGpSYnBwZmRqTm1XOEZkbDhOYkpxQ1o1b3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAwHytAwQA
wHyyAwQCwHy0AwQCwHy8AwQAwHzRAwQAwXwDAwQAwXzLAwQAwlcBAwQCwlcYAwQA
wlezAwQAwlfbAwQBwlfeAwQAwocXAwQCw4UMAwQAw4VQMA0GCSqGSIb3DQEBCwUA
A4IBAQAzh3dcENbYQ6GTRJpRLmzOuC74S1mLUw1MrHaBYF+gEXoEP5zbAzLuS4mI
MG6d7t8y9quZ9Un/ptkubAJQRRdTJlFYkhTot+ELoQmmC3zDnjXs8lC53ncki9ss
wv+TT9yJL3r+dRMOMXoJzRL71ksdvuiAwyScVX8WLU9qDcl9Eea6JE2nnqOksgRJ
AZ2fLEP5zUEUyJjz0KJ2ufkfj3hLMeTShfh0PZ3GjLbko4aCoPVICuIz1bcrqWOY
t+6x4TuSSlEpPeiz14oNMvRUVroTxRTqLdrgSALMOHZDziXpdDjKD3AOczDi622/
uJaAGGOtY8AGtd/mw1Gdp/iTj/8T
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org