Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EtHK_ydcjRN1_VgERxmqzcVdeDI.roa
File: EtHK_ydcjRN1_VgERxmqzcVdeDI.roa (raw, json)
Hash identifier: yeUWIqKm7HxpnCmLI5RGpAFzgEiYDmNzNhMNH1InJwY=
Subject key identifier: 12:D1:CA:FF:27:5C:8D:13:75:FD:58:04:47:19:AA:CD:C5:5D:78:32
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 10A33558
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EtHK_ydcjRN1_VgERxmqzcVdeDI.roa
Signing time: Sat 02 Jul 2022 09:50:26 +0000
ROA not before: Sat 02 Jul 2022 09:50:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
195.133.16.0/22 maxlen: 24
195.133.37.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279131480 (0x10a33558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 2 09:50:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d1caff275c8d1375fd58044719aacdc55d7832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:6b:67:fc:58:54:c9:51:40:41:5c:9d:ef:
48:20:f7:d8:12:77:d8:a9:b5:4d:1c:90:13:fa:36:
06:32:c1:6b:61:15:ed:7f:b1:a8:a9:54:45:64:76:
46:86:4a:08:0d:a5:ce:7c:ee:b8:c0:31:72:7d:64:
c8:f0:ab:b8:3f:0c:d4:0c:7f:00:46:1f:f9:dc:7b:
d6:f7:b9:65:a1:6d:92:20:c0:2f:7f:ae:8e:be:94:
a6:2f:97:f1:a0:b6:41:e6:f5:9b:93:d2:76:8c:83:
84:55:98:23:ea:e7:1a:3a:ee:4d:a8:b2:78:7c:e1:
31:33:77:ea:27:c3:3c:dd:f5:7c:77:87:d5:8d:4f:
01:a5:32:e2:5c:43:db:fb:ad:77:5d:37:34:60:55:
94:de:72:44:b3:a7:45:c2:a3:eb:6e:57:7a:5a:52:
c9:6e:fb:14:36:e2:2e:39:01:45:4f:1c:fc:ce:ff:
d5:54:99:d2:d9:22:b3:74:98:1c:96:b8:a3:5d:4e:
89:3d:a4:37:55:bc:0b:d2:2d:67:cd:86:65:c6:0a:
bd:17:a9:a0:6c:b7:2e:ab:d7:50:1d:bf:3f:5c:f6:
00:fe:f8:a6:0f:e0:d0:2e:8f:30:ad:df:bf:45:03:
be:7c:93:e0:67:2c:05:74:0f:f7:08:02:60:e0:e6:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:CA:FF:27:5C:8D:13:75:FD:58:04:47:19:AA:CD:C5:5D:78:32
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EtHK_ydcjRN1_VgERxmqzcVdeDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.227.0/24
194.85.249.0/24
194.85.251.0/24
195.133.16.0/22
195.133.37.0/24
195.133.39.0-195.133.43.255
212.192.240.0/24
212.192.242.0/23
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:33:ca:b8:cc:be:98:23:34:e1:1c:be:d4:07:f9:9f:aa:54:
8d:30:56:5f:31:71:a3:45:98:d1:ff:52:78:eb:b0:cc:f1:57:
69:0b:34:6e:86:7f:dc:55:b5:39:e5:82:53:6d:2b:e0:f1:cf:
2e:85:72:01:66:1c:66:c0:52:ec:4b:67:78:b5:f8:37:62:f6:
1e:c8:59:3f:21:92:ee:ad:41:9b:04:96:2e:54:9b:da:fe:21:
d0:6e:33:30:0d:c8:19:27:58:3d:8f:73:56:5c:d3:07:23:3b:
50:de:62:9c:2e:ba:25:85:5c:cb:75:c9:50:4f:ca:b4:1a:fe:
4d:2c:e7:2f:22:a5:8b:3a:96:5f:54:a8:6f:82:72:2b:82:41:
78:c9:cd:e7:eb:7b:80:04:ba:84:f9:9b:4d:d4:ce:9c:18:45:
41:41:ea:9c:1d:20:13:e3:45:a7:0b:4d:87:cd:b8:da:81:ef:
e7:68:b3:18:f8:07:7a:d1:f7:4a:45:b8:88:6f:da:e4:87:b0:
db:18:d9:e1:82:16:93:11:21:98:7c:a2:85:e7:a4:25:ed:1a:
42:6b:37:5b:83:dd:70:5f:10:95:bb:b2:8a:7f:0a:b8:95:78:
6b:64:3a:5b:cb:63:28:5c:f9:4c:b8:1d:8c:28:08:1b:04:e9:
33:a7:d4:7d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIEEKM1WDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDcw
MjA5NTAyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJkMWNhZmYyNzVj
OGQxMzc1ZmQ1ODA0NDcxOWFhY2RjNTVkNzgzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQna2f8WFTJUUBBXJ3vSCD32BJ32Km1TRyQE/o2BjLBa2EV
7X+xqKlURWR2RoZKCA2lznzuuMAxcn1kyPCruD8M1Ax/AEYf+dx71ve5ZaFtkiDA
L3+ujr6Upi+X8aC2Qeb1m5PSdoyDhFWYI+rnGjruTaiyeHzhMTN36ifDPN31fHeH
1Y1PAaUy4lxD2/utd103NGBVlN5yRLOnRcKj625XelpSyW77FDbiLjkBRU8c/M7/
1VSZ0tkis3SYHJa4o11OiT2kN1W8C9ItZ82GZcYKvRepoGy3LqvXUB2/P1z2AP74
pg/g0C6PMK3fv0UDvnyT4GcsBXQP9wgCYODmNhcCAwEAAaOCAkcwggJDMB0GA1Ud
DgQWBBQS0cr/J1yNE3X9WARHGarNxV14MjAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L0V0SEtfeWRjalJOMV9WZ0VSeG1xemNWZGVESS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBd
BggrBgEFBQcBBwEB/wROMEwwSgQCAAEwRAMEAMF84wMEAMJV+QMEAMJV+wMEAsOF
EAMEAMOFJTAMAwQAw4UnAwQCw4UoAwQA1MDwAwQB1MDyAwQA1MEcAwQA1MEfMA0G
CSqGSIb3DQEBCwUAA4IBAQBaM8q4zL6YIzThHL7UB/mfqlSNMFZfMXGjRZjR/1J4
67DM8VdpCzRuhn/cVbU55YJTbSvg8c8uhXIBZhxmwFLsS2d4tfg3YvYeyFk/IZLu
rUGbBJYuVJva/iHQbjMwDcgZJ1g9j3NWXNMHIztQ3mKcLrolhVzLdclQT8q0Gv5N
LOcvIqWLOpZfVKhvgnIrgkF4yc3n63uABLqE+ZtN1M6cGEVBQeqcHSAT40WnC02H
zbjage/naLMY+Ad60fdKRbiIb9rkh7DbGNnhghaTESGYfKKF56Ql7RpCazdbg91w
XxCVu7KKfwq4lXhrZDpby2MoXPlMuB2MKAgbBOkzp9R9
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org