Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6HjXMIsRhTswZ66QLyKxsfLDKQE.roa
File: 6HjXMIsRhTswZ66QLyKxsfLDKQE.roa (raw, json)
Hash identifier: tiFvMwGwlEGpvmiC7G34iVE1awxkykUOR+bv8lBjwgc=
Subject key identifier: E8:78:D7:30:8B:11:85:3B:30:67:AE:90:2F:22:B1:B1:F2:C3:29:01
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0FC93B46
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6HjXMIsRhTswZ66QLyKxsfLDKQE.roa
Signing time: Fri 13 May 2022 07:50:05 +0000
ROA not before: Fri 13 May 2022 07:50:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 193.124.8.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264846150 (0xfc93b46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 13 07:50:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e878d7308b11853b3067ae902f22b1b1f2c32901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:3d:57:ff:af:cd:09:97:c1:78:06:aa:9a:
21:fd:c8:f9:b7:77:b3:1d:01:41:1e:aa:a1:6c:10:
10:fd:14:78:1d:ea:fa:73:36:bf:be:ea:54:fe:bd:
7d:37:f3:7d:9f:aa:41:4d:75:11:ff:0b:79:95:a5:
bc:25:83:cb:9c:2d:06:98:4d:7a:f4:8d:de:65:46:
e1:64:21:2e:50:b3:1d:b8:88:65:37:65:2d:89:92:
01:39:7a:69:de:fd:5f:09:9b:53:6d:53:55:02:c6:
b8:f5:5e:c9:8e:0b:f0:73:99:4a:ab:9e:ed:83:13:
67:47:97:37:30:53:da:56:59:4c:cb:53:03:56:1d:
12:b8:ca:d3:cd:94:eb:36:db:e0:94:52:0d:65:1c:
70:d1:a2:96:fe:b7:26:dd:d6:33:ea:e0:9d:16:23:
b0:b4:25:9d:08:10:e6:ec:50:83:ed:10:6b:a8:fc:
d3:3a:f8:69:4f:e1:92:10:1b:1b:27:70:ec:e4:84:
c7:b7:4b:af:9c:cb:2a:01:a1:78:8b:8a:4e:1f:e3:
f1:29:39:a1:c9:87:b7:4a:ea:da:3b:0b:8b:b0:7c:
93:ec:6c:c4:43:ed:b3:e9:b6:69:59:21:e5:ee:8f:
3f:38:74:04:b4:39:d5:2d:ea:b7:7c:a8:22:b0:4c:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:78:D7:30:8B:11:85:3B:30:67:AE:90:2F:22:B1:B1:F2:C3:29:01
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6HjXMIsRhTswZ66QLyKxsfLDKQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.8.0/24
194.87.182.0/24
194.87.252.0/24
195.133.193.0/24
Signature Algorithm: sha256WithRSAEncryption
80:71:df:9b:3f:01:ea:bd:a0:05:ae:b9:db:68:63:de:c9:18:
8d:8d:5a:4a:15:44:47:bf:20:b8:e9:d8:87:2f:08:91:e5:c0:
4c:7d:cd:19:d8:74:16:ef:12:00:8c:33:34:c8:ee:84:51:44:
e2:db:60:6f:cf:4e:3b:76:1d:ba:81:15:cc:ed:fc:f6:04:bd:
01:0c:a1:3e:88:7d:4b:0b:86:4a:fe:f3:a4:11:49:fb:e0:99:
e6:c3:9f:48:a4:99:35:f8:12:77:37:4f:d9:1a:fc:c4:cc:d8:
a7:db:89:60:0e:0f:86:68:82:60:2e:d8:4a:ec:91:01:ae:df:
9b:e8:b9:ad:d5:b2:c1:33:40:33:fd:1c:55:fd:f7:36:b1:83:
c5:f8:a0:45:25:5b:46:65:e9:5e:49:e4:f8:35:3c:31:d1:e4:
e5:35:28:74:f8:f6:da:79:2f:b8:02:f7:98:ef:76:b4:35:6c:
d1:77:d4:b3:b3:2a:7b:bd:be:9d:56:0a:17:91:48:70:e0:51:
07:8a:1e:65:e7:2f:f5:5b:ce:44:34:a1:39:03:80:fe:97:d8:
3b:26:e1:e8:e9:d4:41:0c:a9:c7:62:1c:c8:b4:cc:9f:6f:09:
4d:cc:11:2e:ed:ee:d6:25:40:0b:80:d2:be:7f:f5:48:20:f7:
aa:d8:bd:91
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIED8k7RjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDUx
MzA3NTAwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTg3OGQ3MzA4YjEx
ODUzYjMwNjdhZTkwMmYyMmIxYjFmMmMzMjkwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAObLPVf/r80Jl8F4BqqaIf3I+bd3sx0BQR6qoWwQEP0UeB3q
+nM2v77qVP69fTfzfZ+qQU11Ef8LeZWlvCWDy5wtBphNevSN3mVG4WQhLlCzHbiI
ZTdlLYmSATl6ad79XwmbU21TVQLGuPVeyY4L8HOZSque7YMTZ0eXNzBT2lZZTMtT
A1YdErjK082U6zbb4JRSDWUccNGilv63Jt3WM+rgnRYjsLQlnQgQ5uxQg+0Qa6j8
0zr4aU/hkhAbGydw7OSEx7dLr5zLKgGheIuKTh/j8Sk5ocmHt0rq2jsLi7B8k+xs
xEPts+m2aVkh5e6PPzh0BLQ51S3qt3yoIrBM1E8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBToeNcwixGFOzBnrpAvIrGx8sMpATAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
LzZIalhNSXNSaFRzd1o2NlFMeUt4c2ZMREtRRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAMF8CAMEAMJXtgMEAMJX/AMEAMOF
wTANBgkqhkiG9w0BAQsFAAOCAQEAgHHfmz8B6r2gBa6522hj3skYjY1aShVER78g
uOnYhy8IkeXATH3NGdh0Fu8SAIwzNMjuhFFE4ttgb89OO3YduoEVzO389gS9AQyh
Poh9SwuGSv7zpBFJ++CZ5sOfSKSZNfgSdzdP2Rr8xMzYp9uJYA4PhmiCYC7YSuyR
Aa7fm+i5rdWywTNAM/0cVf33NrGDxfigRSVbRmXpXknk+DU8MdHk5TUodPj22nkv
uAL3mO92tDVs0XfUs7Mqe72+nVYKF5FIcOBRB4oeZecv9VvORDShOQOA/pfYOybh
6OnUQQypx2IcyLTMn28JTcwRLu3u1iVAC4DSvn/1SCD3qti9kQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org