Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/D_FcnrRM8LApSRGpzX-TNwzicFg.roa
File: D_FcnrRM8LApSRGpzX-TNwzicFg.roa (raw, json)
Hash identifier: /6M/ppGj+HbdcVet1vxXKKYFZpmKzVqSVItYGoeixbY=
Subject key identifier: 0F:F1:5C:9E:B4:4C:F0:B0:29:49:11:A9:CD:7F:93:37:0C:E2:70:58
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183B23A22C84C40CE5AD8C6ED4C0EC41C92
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/D_FcnrRM8LApSRGpzX-TNwzicFg.roa
Signing time: Fri 07 Oct 2022 11:34:57 +0000
ROA not before: Fri 07 Oct 2022 11:34:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 212.193.24.0/22 maxlen: 24
194.87.216.0/24 maxlen: 24
194.87.218.0/24 maxlen: 24
194.87.225.0/24 maxlen: 24
194.87.31.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.14.0/24 maxlen: 24
195.133.26.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
194.135.104.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:3a:22:c8:4c:40:ce:5a:d8:c6:ed:4c:0e:c4:1c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 11:34:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ff15c9eb44cf0b0294911a9cd7f93370ce27058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:38:d6:48:ac:24:2c:80:75:44:9c:ca:76:
fb:cd:5a:ae:fd:f9:ca:c7:6f:4f:24:dc:a7:80:98:
56:86:82:4a:92:d2:b0:9b:e6:17:f8:18:74:4f:38:
8b:b0:38:03:bb:50:6b:28:39:11:98:36:5b:48:5b:
4d:6e:af:42:86:04:05:d9:21:49:be:e4:22:cb:df:
89:0d:63:6e:9c:20:a4:0a:26:28:84:d8:b0:db:53:
d5:a1:3f:de:39:13:67:10:d3:37:56:a8:69:84:e9:
96:5b:90:85:a3:2a:12:68:b8:bb:df:a1:75:f5:af:
6e:2e:39:42:52:31:ea:ec:54:22:07:38:2b:28:23:
2b:5d:39:a2:d0:c6:e1:85:48:ae:f1:7e:1d:86:4e:
70:9a:c5:5b:cc:9b:3f:25:6e:b3:6e:39:c1:de:39:
34:9d:7d:2a:73:90:45:da:00:5d:f8:58:e8:fa:e0:
48:bd:1e:37:f0:3c:48:90:e1:1b:b3:f9:78:48:27:
1f:22:de:8e:d7:ff:95:79:8e:91:8a:0b:2a:8f:40:
30:03:f4:e8:a2:75:f2:e7:07:cf:4c:59:bd:ac:fe:
3b:f9:45:e3:86:3f:1a:b1:34:aa:40:94:c4:eb:df:
63:1b:ac:cb:9d:12:6e:d7:40:97:c3:e8:6b:05:08:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:5C:9E:B4:4C:F0:B0:29:49:11:A9:CD:7F:93:37:0C:E2:70:58
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/D_FcnrRM8LApSRGpzX-TNwzicFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.31.0/24
194.87.216.0/24
194.87.218.0/24
194.87.225.0/24
194.135.32.0/24
194.135.38.0/24
194.135.104.0/24
195.133.9.0/24
195.133.21.0/24
195.133.25.0-195.133.27.255
195.133.59.0/24
212.192.14.0/24
212.193.24.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ad:e7:3d:2c:37:8c:2f:78:50:9f:3e:28:95:fe:3d:1d:02:
4a:9a:94:31:2e:64:47:e7:8d:6b:80:5d:6a:d2:6e:a1:69:fe:
ea:c0:43:46:47:e7:92:ae:f9:d5:fa:17:aa:46:e6:8c:46:8f:
4d:8a:fe:70:9e:10:df:be:be:96:c8:ea:8a:40:5f:7c:ad:12:
13:5e:68:87:bb:46:8e:a0:58:af:af:12:b7:c4:be:d6:92:2d:
c9:ec:97:82:97:dc:d1:52:68:ed:37:6f:cd:cf:fe:d5:2c:7d:
87:b3:81:63:22:1e:7c:5f:10:99:e2:da:b3:94:87:d5:36:93:
c6:a3:ef:e7:88:5a:16:7c:a6:af:c3:f0:7e:83:2c:13:38:22:
89:49:6b:0b:c9:6f:39:ec:76:2a:fd:a9:9e:79:eb:4b:c9:93:
78:96:ee:52:02:b5:92:b5:8c:20:89:e7:90:b8:3b:65:d2:fb:
28:2e:ba:76:e5:74:e6:9e:69:f9:e9:98:cc:32:5c:69:6a:f7:
70:8e:16:bd:5e:af:53:6c:a2:75:27:46:18:5e:20:f0:96:19:
f6:85:7b:14:ff:df:26:a8:0f:cd:76:7d:3e:82:d8:be:e1:21:
20:ba:b1:44:a7:37:97:34:a1:a4:0b:31:b8:da:69:8c:70:a2:
e6:0f:d9:0b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYOyOiLITEDOWtjG7UwOxBySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDA3MTEzNDU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmYxNWM5ZWI0NGNmMGIwMjk0OTExYTljZDdmOTMzNzBjZTI3MDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQs41kisJCyAdUScynb7zVqu/fnK
x29PJNyngJhWhoJKktKwm+YX+Bh0TziLsDgDu1BrKDkRmDZbSFtNbq9ChgQF2SFJ
vuQiy9+JDWNunCCkCiYohNiw21PVoT/eORNnENM3VqhphOmWW5CFoyoSaLi736F1
9a9uLjlCUjHq7FQiBzgrKCMrXTmi0MbhhUiu8X4dhk5wmsVbzJs/JW6zbjnB3jk0
nX0qc5BF2gBd+Fjo+uBIvR438DxIkOEbs/l4SCcfIt6O1/+VeY6Rigsqj0AwA/To
onXy5wfPTFm9rP47+UXjhj8asTSqQJTE699jG6zLnRJu10CXw+hrBQjmOQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFA/xXJ60TPCwKUkRqc1/kzcM4nBYMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRF9GY25yUk04TEFwU1JHcHpYLVROd3ppY0ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAwlcfAwQA
wlfYAwQAwlfaAwQAwlfhAwQAwocgAwQAwocmAwQAwodoAwQAw4UJAwQAw4UVMAwD
BADDhRkDBALDhRgDBADDhTsDBADUwA4DBALUwRgwDQYJKoZIhvcNAQELBQADggEB
AGKt5z0sN4wveFCfPiiV/j0dAkqalDEuZEfnjWuAXWrSbqFp/urAQ0ZH55Ku+dX6
F6pG5oxGj02K/nCeEN++vpbI6opAX3ytEhNeaIe7Ro6gWK+vErfEvtaSLcnsl4KX
3NFSaO03b83P/tUsfYezgWMiHnxfEJni2rOUh9U2k8aj7+eIWhZ8pq/D8H6DLBM4
IolJawvJbznsdir9qZ5560vJk3iW7lICtZK1jCCJ55C4O2XS+yguunbldOaeafnp
mMwyXGlq93COFr1er1NsonUnRhheIPCWGfaFexT/3yaoD812fT6C2L7hISC6sUSn
N5c0oaQLMbjaaYxwouYP2Qs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org