Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HnKqs8YLOIVETQhwfTX386gSOQU.roa
File: HnKqs8YLOIVETQhwfTX386gSOQU.roa (raw, json)
Hash identifier: CSB1A8+X6e0p9GFDdX5H/jqFe/X9iRcKsxY3bjEdtrc=
Subject key identifier: 1E:72:AA:B3:C6:0B:38:85:44:4D:08:70:7D:35:F7:F3:A8:12:39:05
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182A5CDF82B7067D327B8F4C02591793CC4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HnKqs8YLOIVETQhwfTX386gSOQU.roa
Signing time: Tue 16 Aug 2022 08:38:35 +0000
ROA not before: Tue 16 Aug 2022 08:38:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:cd:f8:2b:70:67:d3:27:b8:f4:c0:25:91:79:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 16 08:38:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e72aab3c60b3885444d08707d35f7f3a8123905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:8b:ba:b8:ba:f9:c7:05:8e:4c:45:4d:49:
d3:55:44:92:ff:a2:54:ec:f7:8e:78:47:41:0c:f4:
e3:bd:fb:88:a9:5a:7d:7d:b8:98:17:81:03:c1:1a:
b4:ed:8d:5e:ab:e8:af:4f:9f:3a:da:6d:36:8c:28:
dc:8e:cc:4e:91:2b:1b:66:e6:ff:ea:e8:fe:21:5e:
6a:5a:09:b7:54:0d:63:6d:be:0b:16:64:76:52:b7:
4e:da:ec:a0:b3:f0:87:de:d7:f2:b4:e2:ad:c8:e4:
21:6e:11:82:7c:f9:20:fc:27:e6:e5:37:93:4f:9b:
6e:01:8e:6e:99:4a:cf:b6:5f:70:ea:b6:3a:47:cd:
a5:9b:70:0a:1e:d3:93:49:d6:0e:dd:09:0d:4a:33:
7a:c2:ee:b6:4b:e0:71:e7:10:46:11:0d:31:b4:49:
04:03:f0:2c:ec:67:ba:94:9b:15:ec:66:04:13:b3:
fe:26:16:97:74:22:22:4b:35:c8:a1:90:a7:07:ec:
23:ae:f2:f7:84:53:fc:66:0e:c6:c8:36:f4:5e:fd:
b4:99:73:d0:82:a6:5c:a8:dd:ce:6e:1f:96:b3:bd:
a1:1c:4d:bf:9f:ba:28:3b:0e:0a:1c:d9:71:dc:b9:
41:bb:c0:31:7f:7f:1e:c7:55:35:b0:24:55:a0:30:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:72:AA:B3:C6:0B:38:85:44:4D:08:70:7D:35:F7:F3:A8:12:39:05
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HnKqs8YLOIVETQhwfTX386gSOQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:14:6c:b5:fd:b3:b1:bd:4c:42:57:91:3e:57:e5:27:cd:bf:
68:54:0d:bc:38:9b:50:a1:5e:52:32:aa:f3:e9:02:cd:f1:df:
bc:ee:24:1f:b7:2b:7c:b1:23:ef:d6:f4:b1:12:45:9a:dc:70:
6b:f2:b6:93:25:a6:d0:83:05:26:8d:06:2b:6f:93:9e:88:34:
37:63:02:21:d2:11:46:8c:56:03:57:f9:1e:96:45:ba:8d:10:
08:e2:8c:81:9b:c9:6d:fc:ca:ce:39:9e:e9:0c:2a:00:f9:91:
0c:08:2b:45:48:40:c3:1d:56:0f:78:bb:a8:af:1a:05:69:11:
86:2c:d8:ab:e4:30:2d:55:9b:f1:d0:ee:a9:92:c8:f3:20:56:
2b:6a:89:07:aa:dc:69:ed:1a:54:68:8e:8c:3e:09:a9:c8:1c:
38:82:a2:c7:bb:61:23:8a:1f:aa:0f:b9:5f:46:7a:f3:85:63:
f2:5d:54:88:94:ba:33:b5:4b:4c:79:3f:3d:25:6a:bb:6b:b6:
24:2e:30:6f:e4:84:c2:47:bc:67:36:45:90:0a:14:ef:1d:f9:
3b:b2:b8:01:25:4e:3b:7d:b2:d0:8b:21:56:24:b9:ea:9a:ed:
e1:cb:42:3a:25:ee:95:0a:ca:35:6f:0a:bc:68:c5:7b:16:2d:
ba:a2:38:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKlzfgrcGfTJ7j0wCWReTzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwODE2MDgzODM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTcyYWFiM2M2MGIzODg1NDQ0ZDA4NzA3ZDM1ZjdmM2E4MTIzOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc2Luri6+ccFjkxFTUnTVUSS/6JU
7PeOeEdBDPTjvfuIqVp9fbiYF4EDwRq07Y1eq+ivT5862m02jCjcjsxOkSsbZub/
6uj+IV5qWgm3VA1jbb4LFmR2UrdO2uygs/CH3tfytOKtyOQhbhGCfPkg/Cfm5TeT
T5tuAY5umUrPtl9w6rY6R82lm3AKHtOTSdYO3QkNSjN6wu62S+Bx5xBGEQ0xtEkE
A/As7Ge6lJsV7GYEE7P+JhaXdCIiSzXIoZCnB+wjrvL3hFP8Zg7GyDb0Xv20mXPQ
gqZcqN3Obh+Ws72hHE2/n7ooOw4KHNlx3LlBu8Axf38ex1U1sCRVoDAKrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB5yqrPGCziFRE0IcH019/OoEjkFMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSG5LcXM4WUxPSVZFVFFod2ZUWDM4NmdTT1FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwle7MA0G
CSqGSIb3DQEBCwUAA4IBAQBOFGy1/bOxvUxCV5E+V+Unzb9oVA28OJtQoV5SMqrz
6QLN8d+87iQftyt8sSPv1vSxEkWa3HBr8raTJabQgwUmjQYrb5OeiDQ3YwIh0hFG
jFYDV/kelkW6jRAI4oyBm8lt/MrOOZ7pDCoA+ZEMCCtFSEDDHVYPeLuorxoFaRGG
LNir5DAtVZvx0O6pksjzIFYraokHqtxp7RpUaI6MPgmpyBw4gqLHu2Ejih+qD7lf
RnrzhWPyXVSIlLoztUtMeT89JWq7a7YkLjBv5ITCR7xnNkWQChTvHfk7srgBJU47
fbLQiyFWJLnqmu3hy0I6Je6VCso1bwq8aMV7Fi26ojjh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org