Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LmlGfQ1SuTbCfrCfRJt16YRMklU.roa
File: LmlGfQ1SuTbCfrCfRJt16YRMklU.roa (raw, json)
Hash identifier: rSKzegPvwz1HaRrhDy9EHcRNLrILnPokfLNI/tDEbLM=
Subject key identifier: 2E:69:46:7D:0D:52:B9:36:C2:7E:B0:9F:44:9B:75:E9:84:4C:92:55
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E09FDF3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LmlGfQ1SuTbCfrCfRJt16YRMklU.roa
Signing time: Sat 01 Jan 2022 01:58:09 +0000
ROA not before: Sat 01 Jan 2022 01:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.193.24.0/22 maxlen: 24
193.124.224.0/23 maxlen: 23
193.124.226.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
212.192.16.0/21 maxlen: 24
194.87.192.0/22 maxlen: 22
212.193.4.0/22 maxlen: 24
212.193.8.0/22 maxlen: 24
194.87.124.0/22 maxlen: 24
194.87.120.0/22 maxlen: 24
212.192.208.0/22 maxlen: 24
194.87.41.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235535859 (0xe09fdf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e69467d0d52b936c27eb09f449b75e9844c9255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:d7:a2:d5:ab:3a:a9:34:99:7a:5c:d2:c0:
cc:a4:5e:74:f2:30:ab:3c:ae:63:11:5f:0b:4d:3b:
f8:3a:62:6a:9b:fe:3a:fe:57:a9:f6:de:ce:14:6c:
19:11:dc:37:fc:d9:c2:9e:fe:2c:f9:76:17:d6:da:
bd:c1:5f:15:23:66:e1:95:13:c4:5f:37:89:48:f0:
01:d8:ae:66:6e:ee:81:45:f2:37:6c:08:da:6c:45:
99:8c:74:7c:e0:06:7b:df:45:50:30:47:06:8d:ec:
9e:2a:d1:72:37:d6:bf:af:0e:6d:d4:6c:f8:e2:5b:
51:f2:34:62:7c:19:ff:e7:7b:2b:16:0c:a4:ba:62:
e3:9e:c7:88:04:c4:1e:7e:95:35:7d:c9:ff:66:f2:
18:32:3f:ac:f4:a8:45:e2:e3:9d:64:8d:ea:a2:33:
9a:81:e2:8f:76:68:ef:d5:91:8f:12:a9:ce:32:cc:
69:49:97:09:48:e6:14:f4:e3:f2:9d:79:10:03:14:
34:0b:60:74:21:63:e5:3b:6c:03:8c:3b:d0:5f:2d:
2b:28:ec:d0:ea:f1:03:4d:de:b2:22:b5:e2:12:ec:
63:2e:17:0d:53:da:0d:28:a6:cf:f0:64:17:6f:6f:
c5:3d:76:1a:e9:40:1d:4b:f8:71:74:54:95:f9:bb:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:46:7D:0D:52:B9:36:C2:7E:B0:9F:44:9B:75:E9:84:4C:92:55
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LmlGfQ1SuTbCfrCfRJt16YRMklU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.49.0/24
193.124.224.0-193.124.226.255
194.87.41.0/24
194.87.61.0/24
194.87.120.0/21
194.87.192.0/22
194.135.46.0/24
212.192.16.0/21
212.192.208.0/22
212.193.4.0-212.193.11.255
212.193.24.0/22
Signature Algorithm: sha256WithRSAEncryption
42:5d:eb:99:64:42:69:f1:9f:91:ca:a9:5d:11:97:73:59:82:
9b:52:42:3d:fa:d4:5e:f0:ad:7b:91:8f:fe:73:26:fa:6b:42:
57:ea:c8:15:c9:a6:2e:5e:df:03:c6:82:7f:c2:e5:e9:86:1e:
78:47:b3:dd:64:5a:18:2d:e9:4f:66:ec:78:1a:4d:d9:8a:a4:
af:23:2d:c2:10:d7:d6:9f:91:cb:03:23:b1:3d:f0:61:fd:5b:
75:69:a1:74:e8:c8:57:b8:bb:e8:9b:90:52:29:ad:1b:e1:32:
d0:92:1d:62:d2:a5:75:f6:54:77:46:f9:59:e7:51:d6:63:3b:
51:08:45:0f:c9:0e:e2:75:cb:71:80:24:b5:d8:42:d7:12:a4:
7a:bc:93:dd:96:75:cf:76:e0:92:79:74:59:20:21:8b:67:c9:
4e:4a:b8:cf:23:b3:ee:1c:f1:b5:6a:53:85:43:9d:ad:1d:80:
88:c7:08:3a:76:7d:9c:fb:d0:01:a1:8b:9c:09:3e:15:de:47:
23:f3:6a:e4:f4:c9:3e:26:b7:a9:cc:b9:48:00:e0:b8:e6:04:
fb:16:6e:07:2e:fa:00:85:38:be:ed:3a:14:04:78:c3:23:cc:
c8:cd:46:ef:5d:69:ae:b2:67:90:63:9c:8a:31:83:ea:10:5f:
88:fd:a5:d4
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIEDgn98zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDEw
MTAxNTgwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmU2OTQ2N2QwZDUy
YjkzNmMyN2ViMDlmNDQ5Yjc1ZTk4NDRjOTI1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALSA16LVqzqpNJl6XNLAzKRedPIwqzyuYxFfC007+Dpiapv+
Ov5XqfbezhRsGRHcN/zZwp7+LPl2F9bavcFfFSNm4ZUTxF83iUjwAdiuZm7ugUXy
N2wI2mxFmYx0fOAGe99FUDBHBo3snirRcjfWv68ObdRs+OJbUfI0YnwZ/+d7KxYM
pLpi457HiATEHn6VNX3J/2byGDI/rPSoReLjnWSN6qIzmoHij3Zo79WRjxKpzjLM
aUmXCUjmFPTj8p15EAMUNAtgdCFj5TtsA4w70F8tKyjs0OrxA03esiK14hLsYy4X
DVPaDSimz/BkF29vxT12GulAHUv4cXRUlfm7/FMCAwEAAaOCAlUwggJRMB0GA1Ud
DgQWBBQuaUZ9DVK5NsJ+sJ9Em3XphEySVTAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L0xtbEdmUTFTdVRiQ2ZyQ2ZSSnQxNllSTWtsVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBr
BggrBgEFBQcBBwEB/wRcMFowWAQCAAEwUgMEAMF8MTAMAwQFwXzgAwQAwXziAwQA
wlcpAwQAwlc9AwQDwld4AwQCwlfAAwQAwocuAwQD1MAQAwQC1MDQMAwDBALUwQQD
BALUwQgDBALUwRgwDQYJKoZIhvcNAQELBQADggEBAEJd65lkQmnxn5HKqV0Rl3NZ
gptSQj361F7wrXuRj/5zJvprQlfqyBXJpi5e3wPGgn/C5emGHnhHs91kWhgt6U9m
7HgaTdmKpK8jLcIQ19afkcsDI7E98GH9W3VpoXToyFe4u+ibkFIprRvhMtCSHWLS
pXX2VHdG+VnnUdZjO1EIRQ/JDuJ1y3GAJLXYQtcSpHq8k92Wdc924JJ5dFkgIYtn
yU5KuM8js+4c8bVqU4VDna0dgIjHCDp2fZz70AGhi5wJPhXeRyPzauT0yT4mt6nM
uUgA4LjmBPsWbgcu+gCFOL7tOhQEeMMjzMjNRu9daa6yZ5BjnIoxg+oQX4j9pdQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org