Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7q1VSGFthyVv-XhtmiuQ5GYzptg.roa
File: 7q1VSGFthyVv-XhtmiuQ5GYzptg.roa (raw, json)
Hash identifier: +hSldv+Xq2s9Hj68+7tfmHVpuNoMeL9TKxdKrzkdIDY=
Subject key identifier: EE:AD:55:48:61:6D:87:25:6F:F9:78:6D:9A:2B:90:E4:66:33:A6:D8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01845B7B15F17892B6B8EE1EA16D953C9E4D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7q1VSGFthyVv-XhtmiuQ5GYzptg.roa
Signing time: Wed 09 Nov 2022 08:21:43 +0000
ROA not before: Wed 09 Nov 2022 08:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.193.15.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
185.72.9.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:7b:15:f1:78:92:b6:b8:ee:1e:a1:6d:95:3c:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 9 08:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eead5548616d87256ff9786d9a2b90e46633a6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:bf:37:43:1a:ad:cf:96:00:7d:38:bb:7f:
b3:cf:7b:04:df:ed:01:bf:db:c8:00:a3:e2:5d:c6:
01:fd:f1:b0:0b:86:72:f7:74:8d:2f:d6:c9:17:99:
2a:41:78:ab:bd:76:58:84:bf:b8:4f:fd:47:8b:20:
d1:8b:1a:1f:bb:04:32:ad:33:29:cb:69:0f:27:44:
20:05:7c:6c:fb:a2:d8:0e:51:6e:b8:01:66:6b:7c:
35:6d:12:4b:34:c3:04:cc:d6:fc:92:fa:a2:58:46:
4d:70:41:e8:88:8c:eb:1e:04:ad:be:7d:03:15:3a:
12:73:73:d4:13:38:c9:e4:46:df:ba:de:1a:36:d0:
b2:d0:d8:e7:ad:a9:cf:47:0a:71:6c:fc:00:b4:b4:
67:b1:cf:f9:56:e0:91:c2:37:40:32:b3:68:04:e5:
3f:6d:68:5e:b9:d5:fc:62:c8:a8:15:0c:ad:62:63:
c8:db:3e:48:ad:01:25:66:97:75:bb:91:cd:c2:b3:
33:aa:7c:b6:7f:45:e0:0c:82:25:c1:68:09:34:15:
d9:f6:58:33:c2:ae:f8:30:54:74:0e:af:eb:4d:a4:
94:c8:58:de:6c:a2:79:47:e7:3e:53:38:0d:d4:78:
7c:15:df:c6:01:6e:f9:45:35:5d:d6:44:b0:66:1a:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AD:55:48:61:6D:87:25:6F:F9:78:6D:9A:2B:90:E4:66:33:A6:D8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7q1VSGFthyVv-XhtmiuQ5GYzptg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.9.0/24
194.87.73.0/24
194.87.90.0/24
194.87.181.0/24
194.87.198.0/24
195.133.82.0/24
212.193.0.0-212.193.2.255
212.193.12.0/23
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b1:8d:79:a8:22:e8:c5:e8:6a:2e:d4:d1:d6:56:37:24:4a:
e1:9a:e3:1f:e8:9f:b5:53:dc:4f:d5:f5:85:11:0a:45:d9:77:
e2:d1:89:d9:87:49:3a:e7:a8:35:d2:3f:17:b1:96:0c:8f:6e:
00:86:94:9b:f4:34:7e:b1:ca:8b:c7:01:d4:d3:d9:8d:a7:de:
94:dc:7d:13:ca:2d:2a:a3:e3:91:58:f1:cd:c9:ba:44:81:be:
95:2f:ca:3a:c1:f1:63:d2:cd:6d:a0:41:0c:9a:76:5e:1e:1f:
1b:ed:ba:46:bc:19:bf:a7:f3:07:1c:4b:fb:12:7c:02:10:03:
55:9e:56:7f:9e:d3:37:db:34:1f:65:3d:34:0a:e2:ce:0c:08:
c7:9b:3d:ab:f2:29:ef:f3:44:42:9a:98:ce:6a:8f:80:1b:1b:
c1:4a:35:c8:16:bf:fe:8c:82:c2:ff:aa:10:25:ff:41:e3:d9:
64:d2:12:e9:9b:cd:59:75:9e:0b:81:4b:36:c9:3e:e7:2c:41:
47:c8:1a:ed:02:cc:10:2f:19:ed:48:fd:f1:fa:12:0d:4d:b7:
32:ba:94:a2:c8:c6:74:3d:b4:01:57:ab:94:b4:5b:4f:98:9d:
af:7c:0d:ff:76:90:a9:df:2e:2a:af:bb:b1:a6:2b:76:84:e8:
54:d3:18:78
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAYRbexXxeJK2uO4eoW2VPJ5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTA5MDgyMTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWFkNTU0ODYxNmQ4NzI1NmZmOTc4NmQ5YTJiOTBlNDY2MzNhNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVa/N0Marc+WAH04u3+zz3sE3+0B
v9vIAKPiXcYB/fGwC4Zy93SNL9bJF5kqQXirvXZYhL+4T/1HiyDRixofuwQyrTMp
y2kPJ0QgBXxs+6LYDlFuuAFma3w1bRJLNMMEzNb8kvqiWEZNcEHoiIzrHgStvn0D
FToSc3PUEzjJ5Ebfut4aNtCy0NjnranPRwpxbPwAtLRnsc/5VuCRwjdAMrNoBOU/
bWheudX8YsioFQytYmPI2z5IrQElZpd1u5HNwrMzqny2f0XgDIIlwWgJNBXZ9lgz
wq74MFR0Dq/rTaSUyFjebKJ5R+c+UzgN1Hh8Fd/GAW75RTVd1kSwZhryPwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFO6tVUhhbYclb/l4bZorkORmM6bYMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvN3ExVlNHRnRoeVZ2LVhodG1pdVE1R1l6cHRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTBDBAIAATA9AwQAuUgJAwQA
wldJAwQAwldaAwQAwle1AwQAwlfGAwQAw4VSMAsDAwDUwQMEANTBAgMEAdTBDAME
ANTBDzANBgkqhkiG9w0BAQsFAAOCAQEAP7GNeagi6MXoai7U0dZWNyRK4ZrjH+if
tVPcT9X1hREKRdl34tGJ2YdJOueoNdI/F7GWDI9uAIaUm/Q0frHKi8cB1NPZjafe
lNx9E8otKqPjkVjxzcm6RIG+lS/KOsHxY9LNbaBBDJp2Xh4fG+26RrwZv6fzBxxL
+xJ8AhADVZ5Wf57TN9s0H2U9NArizgwIx5s9q/Ip7/NEQpqYzmqPgBsbwUo1yBa/
/oyCwv+qECX/QePZZNIS6ZvNWXWeC4FLNsk+5yxBR8ga7QLMEC8Z7Uj98foSDU23
MrqUosjGdD20AVerlLRbT5idr3wN/3aQqd8uKq+7saYrdoToVNMYeA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org