Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HY0AXjcxQ9UW9uXRu2aB1rLYtQA.roa
File: HY0AXjcxQ9UW9uXRu2aB1rLYtQA.roa (raw, json)
Hash identifier: vN6cd+mzHtTPvvpw8zzUGNCbMRBHGHnt6fWhGgsQZA4=
Subject key identifier: 1D:8D:00:5E:37:31:43:D5:16:F6:E5:D1:BB:66:81:D6:B2:D8:B5:00
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 100B0266
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HY0AXjcxQ9UW9uXRu2aB1rLYtQA.roa
Signing time: Tue 24 May 2022 08:56:13 +0000
ROA not before: Tue 24 May 2022 08:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/23 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269156966 (0x100b0266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 24 08:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d8d005e373143d516f6e5d1bb6681d6b2d8b500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:36:62:73:34:2c:09:89:43:e4:d5:98:18:c1:
71:73:3d:de:ee:7f:cc:ca:fe:da:18:ff:41:3d:a4:
fd:68:b7:fd:1d:48:16:d9:b9:78:65:26:cc:70:cd:
9e:4e:49:42:d3:bd:5f:8d:c7:fc:ed:f9:9e:fb:90:
12:6c:5d:a2:b1:08:3e:0e:6b:3a:07:a3:b6:7c:b7:
d6:45:ea:f8:e2:b2:c1:52:83:fb:a9:05:e7:d0:7e:
2a:f1:9c:7a:de:4e:1e:b1:c7:2e:a0:99:d3:a9:9a:
97:28:51:37:2f:3d:f2:1e:a6:ad:62:7b:0e:ff:7e:
61:58:e9:9c:58:58:1b:6c:92:76:6f:2b:28:47:0f:
30:23:6d:b5:9b:1e:f8:d4:7d:ca:46:16:d2:89:f3:
69:bf:e7:05:8a:38:a6:9e:c1:22:80:15:fd:24:bd:
b8:c9:41:89:47:34:44:99:1a:0c:1b:54:e2:00:3a:
06:3c:3d:55:c5:fb:80:c7:d6:67:93:46:9d:65:92:
be:3d:39:22:f9:38:19:09:de:18:cb:5e:e9:ae:24:
38:06:96:59:f9:36:43:70:84:22:5d:61:dc:bb:24:
dd:b0:78:ba:bb:5a:43:45:d6:f2:0a:81:33:df:00:
41:49:3f:ae:63:91:d5:bd:4e:f1:50:4d:fb:56:38:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8D:00:5E:37:31:43:D5:16:F6:E5:D1:BB:66:81:D6:B2:D8:B5:00
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HY0AXjcxQ9UW9uXRu2aB1rLYtQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.89.0/24
193.124.91.0/24
193.124.93.0/24
193.124.95.0/24
193.124.202.0/23
194.58.60.0/24
194.87.16.0/24
194.87.22.0/24
194.87.64.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.200.0/24
194.87.226.0/24
194.135.23.0/24
195.58.35.0/24
195.58.50.0/24
195.58.52.0/24
195.133.81.0/24
212.192.10.0/23
Signature Algorithm: sha256WithRSAEncryption
40:56:00:5f:91:76:a5:fb:55:13:1b:1d:79:03:cd:0b:5d:c6:
73:d2:7d:51:4c:5e:5c:96:31:7e:6f:bf:63:c0:0e:8e:14:a6:
9f:e6:56:0b:bd:4e:aa:47:5d:8b:7e:a7:1a:a9:a6:55:5e:31:
69:13:f4:00:54:e8:f9:5e:b3:97:bb:7d:27:5c:a9:7d:01:83:
de:29:6e:6c:e8:19:15:14:f7:74:2e:ff:c3:09:8b:6d:ee:5f:
0b:ab:36:01:49:fd:a0:3a:ee:82:80:8f:e2:f9:7d:07:df:47:
a7:21:9b:6b:ba:39:7a:a3:10:9a:83:5e:6a:c5:6c:99:35:0a:
d6:b4:1e:96:10:70:ea:e8:45:a8:cd:c0:fa:31:83:69:1d:f7:
06:87:3b:1e:4b:c1:6b:14:52:78:1b:ec:64:13:61:37:63:61:
eb:e0:a9:67:da:84:1a:3d:cd:2d:5f:e4:65:14:7e:ae:53:f5:
3d:55:49:ad:8c:cb:a1:b8:38:21:89:a8:cf:54:0b:68:fd:3b:
de:d5:cb:35:30:5c:fd:19:e5:7a:30:42:5b:2f:4b:07:88:95:
e8:73:4a:00:c8:e1:07:75:4b:20:3c:f1:25:06:4e:b0:c1:3c:
58:05:bc:41:8d:81:16:35:c5:01:27:15:d6:a7:62:39:7d:51:
14:8b:d1:73
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIEEAsCZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDUy
NDA4NTYxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQ4ZDAwNWUzNzMx
NDNkNTE2ZjZlNWQxYmI2NjgxZDZiMmQ4YjUwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPY2YnM0LAmJQ+TVmBjBcXM93u5/zMr+2hj/QT2k/Wi3/R1I
Ftm5eGUmzHDNnk5JQtO9X43H/O35nvuQEmxdorEIPg5rOgejtny31kXq+OKywVKD
+6kF59B+KvGcet5OHrHHLqCZ06malyhRNy898h6mrWJ7Dv9+YVjpnFhYG2ySdm8r
KEcPMCNttZse+NR9ykYW0onzab/nBYo4pp7BIoAV/SS9uMlBiUc0RJkaDBtU4gA6
Bjw9VcX7gMfWZ5NGnWWSvj05Ivk4GQneGMte6a4kOAaWWfk2Q3CEIl1h3Lsk3bB4
urtaQ0XW8gqBM98AQUk/rmOR1b1O8VBN+1Y4UV8CAwEAAaOCArYwggKyMB0GA1Ud
DgQWBBQdjQBeNzFD1Rb25dG7ZoHWsti1ADAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L0hZMEFYamN4UTlVVzl1WFJ1MmFCMXJMWXRRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
ywYIKwYBBQUHAQcBAf8EgbswgbgwgbUEAgABMIGuAwQAPkzoAwQAPkzrAwQAwHyt
AwQAwHyyAwQCwHy0AwQCwHy8AwQAwHzRAwQAwXwEAwQAwXxZAwQAwXxbAwQAwXxd
AwQAwXxfAwQBwXzKAwQAwjo8AwQAwlcQAwQAwlcWAwQAwldAAwQAwldoAwQAwlem
AwQAwlesAwQAwlezAwQAwlfIAwQAwlfiAwQAwocXAwQAwzojAwQAwzoyAwQAwzo0
AwQAw4VRAwQB1MAKMA0GCSqGSIb3DQEBCwUAA4IBAQBAVgBfkXal+1UTGx15A80L
XcZz0n1RTF5cljF+b79jwA6OFKaf5lYLvU6qR12LfqcaqaZVXjFpE/QAVOj5XrOX
u30nXKl9AYPeKW5s6BkVFPd0Lv/DCYtt7l8LqzYBSf2gOu6CgI/i+X0H30enIZtr
ujl6oxCag15qxWyZNQrWtB6WEHDq6EWozcD6MYNpHfcGhzseS8FrFFJ4G+xkE2E3
Y2Hr4Kln2oQaPc0tX+RlFH6uU/U9VUmtjMuhuDghiajPVAto/Tve1cs1MFz9GeV6
MEJbL0sHiJXoc0oAyOEHdUsgPPElBk6wwTxYBbxBjYEWNcUBJxXWp2I5fVEUi9Fz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org