Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6aazjXaYtAu0YicUivXTzXo-Myc.roa
File: 6aazjXaYtAu0YicUivXTzXo-Myc.roa (raw, json)
Hash identifier: 6SXnbnthGChZTfJwz99XgOpcCxgJ9RGvqhH51jz6mJM=
Subject key identifier: E9:A6:B3:8D:76:98:B4:0B:B4:62:27:14:8A:F5:D3:CD:7A:3E:33:27
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01843F83C27E34900519B66B305ADB8D453F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6aazjXaYtAu0YicUivXTzXo-Myc.roa
Signing time: Thu 03 Nov 2022 22:01:50 +0000
ROA not before: Thu 03 Nov 2022 22:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 212.193.24.0/22 maxlen: 24
194.87.225.0/24 maxlen: 24
194.87.31.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.14.0/24 maxlen: 24
195.133.26.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
194.135.104.0/24 maxlen: 24
194.87.120.0/23 maxlen: 24
195.133.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3f:83:c2:7e:34:90:05:19:b6:6b:30:5a:db:8d:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 22:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9a6b38d7698b40bb46227148af5d3cd7a3e3327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:71:4e:ce:2a:35:57:5a:a4:aa:e0:a2:4a:
06:99:dc:5f:b0:3d:fd:66:1a:45:2d:1e:b5:a1:e0:
40:b1:bf:fb:ca:7a:ec:f8:20:48:d8:43:17:3f:5c:
8c:6b:5a:d5:69:18:ce:66:61:d2:d8:87:95:8c:e8:
63:8d:c5:c6:eb:b2:a6:7e:96:17:85:1d:00:34:64:
e4:26:17:a7:3d:cb:3d:b5:ea:78:7a:9c:ed:38:d3:
e6:37:c7:60:65:0e:26:a2:c9:67:59:f8:a6:a5:83:
de:a3:ff:66:c6:af:ef:1b:e0:50:72:ff:bc:ac:f9:
f3:5e:60:66:0c:86:40:72:f1:53:3f:87:bf:cb:b4:
18:7c:11:60:56:d2:69:83:26:a3:dd:64:5a:48:a3:
6a:9a:96:a9:ee:4d:78:7d:90:81:0b:10:0c:b9:15:
d4:a4:1f:6a:e0:7f:ab:fc:93:af:b3:74:f4:b3:24:
4c:64:06:68:e0:b2:54:cc:dc:e1:5b:31:f9:2e:3e:
c1:1b:cb:40:57:0e:87:ec:28:aa:bc:e1:0b:b0:92:
1d:ee:e9:8c:71:fe:7e:89:74:79:be:58:64:e1:ce:
f4:51:90:0f:d9:e3:1c:5c:aa:38:77:94:5a:e4:ae:
e5:10:83:2e:ed:52:f3:26:c8:ac:7a:1e:cd:05:3f:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:B3:8D:76:98:B4:0B:B4:62:27:14:8A:F5:D3:CD:7A:3E:33:27
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6aazjXaYtAu0YicUivXTzXo-Myc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.31.0/24
194.87.120.0/23
194.87.225.0/24
194.135.32.0/24
194.135.38.0/24
194.135.104.0/24
195.133.9.0/24
195.133.21.0/24
195.133.25.0-195.133.27.255
195.133.59.0/24
212.192.14.0/24
212.193.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:ed:c4:af:88:74:fa:36:a0:c5:35:b2:36:0f:15:98:86:57:
a7:9a:b3:7b:e6:22:e8:c4:02:b6:31:c1:89:7b:b4:25:4f:4e:
0d:89:74:b0:16:60:7e:a5:76:d6:6c:9b:ac:e4:81:c1:e3:c5:
e2:c1:f5:81:bb:2f:f6:c0:df:0e:80:24:af:60:cb:ba:9c:c8:
67:13:9c:e5:db:66:e0:92:44:08:f0:7c:e6:a0:d0:21:62:29:
1f:39:3a:b1:5a:a6:c4:03:8c:c1:1c:9e:4f:b7:b4:11:a6:58:
52:81:c1:8c:43:ad:89:69:4c:b2:23:dd:dd:55:fe:de:86:7e:
00:17:55:8c:fa:d6:b5:b5:51:c1:f0:ff:92:6c:bd:84:ae:0e:
83:38:8a:81:73:7e:54:8d:92:97:4d:f1:d4:5b:4b:1f:ec:9a:
a0:18:35:25:99:e7:d8:d5:2c:ee:0e:71:90:35:f5:10:7e:e9:
86:26:3c:59:56:4d:b5:68:77:5f:a4:2e:d8:9b:3f:72:70:44:
43:70:b6:19:0f:e2:d1:79:92:a4:87:2c:2e:77:70:59:b4:87:
18:dc:7e:1e:85:33:e9:b7:3e:ec:50:3d:b8:d8:d6:a0:d1:e8:
d7:79:81:84:e5:6c:aa:21:b0:2c:95:63:23:a8:a6:1a:b6:7a:
43:cb:c3:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYQ/g8J+NJAFGbZrMFrbjUU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTAzMjIwMTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWE2YjM4ZDc2OThiNDBiYjQ2MjI3MTQ4YWY1ZDNjZDdhM2UzMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0FxTs4qNVdapKrgokoGmdxfsD39
ZhpFLR61oeBAsb/7ynrs+CBI2EMXP1yMa1rVaRjOZmHS2IeVjOhjjcXG67KmfpYX
hR0ANGTkJhenPcs9tep4epztONPmN8dgZQ4moslnWfimpYPeo/9mxq/vG+BQcv+8
rPnzXmBmDIZAcvFTP4e/y7QYfBFgVtJpgyaj3WRaSKNqmpap7k14fZCBCxAMuRXU
pB9q4H+r/JOvs3T0syRMZAZo4LJUzNzhWzH5Lj7BG8tAVw6H7CiqvOELsJId7umM
cf5+iXR5vlhk4c70UZAP2eMcXKo4d5Ra5K7lEIMu7VLzJsiseh7NBT/m9QIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFOmms412mLQLtGInFIr10816PjMnMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNmFhempYYVl0QXUwWWljVWl2WFR6WG8tTXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAwlcfAwQB
wld4AwQAwlfhAwQAwocgAwQAwocmAwQAwodoAwQAw4UJAwQAw4UVMAwDBADDhRkD
BALDhRgDBADDhTsDBADUwA4DBALUwRgwDQYJKoZIhvcNAQELBQADggEBAA3txK+I
dPo2oMU1sjYPFZiGV6eas3vmIujEArYxwYl7tCVPTg2JdLAWYH6ldtZsm6zkgcHj
xeLB9YG7L/bA3w6AJK9gy7qcyGcTnOXbZuCSRAjwfOag0CFiKR85OrFapsQDjMEc
nk+3tBGmWFKBwYxDrYlpTLIj3d1V/t6GfgAXVYz61rW1UcHw/5JsvYSuDoM4ioFz
flSNkpdN8dRbSx/smqAYNSWZ59jVLO4OcZA19RB+6YYmPFlWTbVod1+kLtibP3Jw
RENwthkP4tF5kqSHLC53cFm0hxjcfh6FM+m3PuxQPbjY1qDR6Nd5gYTlbKohsCyV
YyOophq2ekPLw2w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org