Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DoInXy-u0ZmT2_hhNnWZ7-H4Hws.roa
File: DoInXy-u0ZmT2_hhNnWZ7-H4Hws.roa (raw, json)
Hash identifier: kyLz/bhIzjWDnK5e3nO8Jybn8EupjVmOG1iwZKdOyVc=
Subject key identifier: 0E:82:27:5F:2F:AE:D1:99:93:DB:F8:61:36:75:99:EF:E1:F8:1F:0B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01843F868158AEA717B662389D3CE9C0DAD6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DoInXy-u0ZmT2_hhNnWZ7-H4Hws.roa
Signing time: Thu 03 Nov 2022 22:04:50 +0000
ROA not before: Thu 03 Nov 2022 22:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210352
IP address blocks: 194.87.218.0/24 maxlen: 24
194.87.216.0/24 maxlen: 24
194.87.31.0/24 maxlen: 24
194.87.45.0/24 maxlen: 24
212.192.14.0/24 maxlen: 24
194.87.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3f:86:81:58:ae:a7:17:b6:62:38:9d:3c:e9:c0:da:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 22:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e82275f2faed19993dbf861367599efe1f81f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:5d:c3:0c:15:4d:69:17:62:fa:40:24:b7:
37:e9:6f:50:01:fe:eb:2f:19:43:55:56:59:4d:4b:
54:ad:6b:1b:b2:03:3d:fb:8d:c2:e6:86:b8:09:a2:
8e:3b:66:e0:fe:c6:44:c2:f0:5f:52:9c:12:04:16:
76:8c:6b:30:7a:93:4c:5a:46:f3:82:48:d6:e7:00:
26:8e:3e:49:01:fa:41:9f:db:e1:60:9c:dc:7c:13:
e0:6c:74:01:1b:01:3a:70:47:88:ad:36:51:66:21:
fb:d5:f9:e7:d9:27:7f:64:83:37:99:d2:2d:35:6b:
3a:89:fa:99:de:ff:5d:fa:d0:85:c1:9d:57:89:98:
6d:9d:95:82:bc:cc:ac:3e:dd:84:30:c6:8c:14:6b:
a2:70:ee:28:7f:a9:76:4c:1b:76:7b:23:e4:24:ed:
46:d1:ad:5a:c2:88:94:96:80:e7:05:a2:d6:e1:d6:
3c:cf:bd:62:fb:df:17:cc:79:1b:71:5e:b4:a5:28:
67:85:5f:a7:10:21:ba:c6:3e:54:f1:5a:78:cb:98:
b2:80:b6:e1:e9:84:38:65:2c:0c:1a:58:e3:42:71:
38:17:b8:b0:44:7c:ee:dd:e1:dd:19:35:57:c9:19:
b2:b7:f5:da:55:f5:62:75:74:eb:8a:78:f7:3c:df:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:82:27:5F:2F:AE:D1:99:93:DB:F8:61:36:75:99:EF:E1:F8:1F:0B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DoInXy-u0ZmT2_hhNnWZ7-H4Hws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.31.0/24
194.87.45.0/24
194.87.71.0/24
194.87.216.0/24
194.87.218.0/24
212.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f6:7a:34:e1:2e:6d:e1:49:25:46:ff:48:45:ed:ef:3d:06:
32:89:2b:28:57:37:42:79:c5:c1:da:53:c6:48:8a:95:47:fe:
e9:a2:7b:6d:6a:d8:86:7f:52:c6:55:8c:31:fc:ac:e5:ac:3f:
fa:80:d7:42:bc:05:5a:96:41:fb:87:f3:f1:ba:77:dc:d5:4c:
06:ac:18:29:5e:cb:2d:21:38:a0:2d:37:79:ae:49:f0:b4:84:
ac:79:e0:b5:be:08:7e:49:e5:e6:d2:00:3e:81:9d:5a:8d:a9:
e3:51:b4:4b:c1:a5:23:82:5e:8f:e5:4a:27:50:fe:0e:82:c9:
01:6e:35:3e:c8:ef:d5:93:0b:46:39:81:38:60:7b:bf:c3:0c:
86:61:e7:44:34:48:76:bb:6d:ec:db:f0:7d:4b:c7:2a:09:17:
2d:af:52:50:e4:a4:b6:a5:35:9b:95:4c:fb:9d:d4:3e:e0:c3:
a0:65:af:de:1c:b1:cf:1d:0f:95:31:bc:73:85:9c:df:5f:82:
07:0a:ff:62:39:a4:2c:02:a3:1f:e3:f2:2c:35:4e:c2:91:34:
a3:1a:a1:b3:8e:55:51:c8:e2:51:55:77:07:78:6b:6d:d4:15:
bf:f3:c8:09:68:89:55:a4:db:b1:22:10:0f:69:0b:7e:c5:42:
0b:52:42:46
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYQ/hoFYrqcXtmI4nTzpwNrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTAzMjIwNDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTgyMjc1ZjJmYWVkMTk5OTNkYmY4NjEzNjc1OTllZmUxZjgxZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7pdwwwVTWkXYvpAJLc36W9QAf7r
LxlDVVZZTUtUrWsbsgM9+43C5oa4CaKOO2bg/sZEwvBfUpwSBBZ2jGswepNMWkbz
gkjW5wAmjj5JAfpBn9vhYJzcfBPgbHQBGwE6cEeIrTZRZiH71fnn2Sd/ZIM3mdIt
NWs6ifqZ3v9d+tCFwZ1XiZhtnZWCvMysPt2EMMaMFGuicO4of6l2TBt2eyPkJO1G
0a1awoiUloDnBaLW4dY8z71i+98XzHkbcV60pShnhV+nECG6xj5U8Vp4y5iygLbh
6YQ4ZSwMGljjQnE4F7iwRHzu3eHdGTVXyRmyt/XaVfVidXTrinj3PN/cSwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFA6CJ18vrtGZk9v4YTZ1me/h+B8LMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRG9Jblh5LXUwWm1UMl9oaE5uV1o3LUg0SHdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwlcfAwQA
wlctAwQAwldHAwQAwlfYAwQAwlfaAwQA1MAOMA0GCSqGSIb3DQEBCwUAA4IBAQBn
9no04S5t4UklRv9IRe3vPQYyiSsoVzdCecXB2lPGSIqVR/7ponttatiGf1LGVYwx
/KzlrD/6gNdCvAValkH7h/Pxunfc1UwGrBgpXsstITigLTd5rknwtISseeC1vgh+
SeXm0gA+gZ1ajanjUbRLwaUjgl6P5UonUP4OgskBbjU+yO/VkwtGOYE4YHu/wwyG
YedENEh2u23s2/B9S8cqCRctr1JQ5KS2pTWblUz7ndQ+4MOgZa/eHLHPHQ+VMbxz
hZzfX4IHCv9iOaQsAqMf4/IsNU7CkTSjGqGzjlVRyOJRVXcHeGtt1BW/88gJaIlV
pNuxIhAPaQt+xUILUkJG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org