Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OIHa75_W1SjiYKI0c7X1-wE7S4E.roa
File: OIHa75_W1SjiYKI0c7X1-wE7S4E.roa (raw, json)
Hash identifier: Af4J2xJPthRdveqIimiRZFmJSVuTB4AGGCjxJFll9rw=
Subject key identifier: 38:81:DA:EF:9F:D6:D5:28:E2:60:A2:34:73:B5:F5:FB:01:3B:4B:81
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01852FB62D2740A42DC06541A9413B0F36C3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OIHa75_W1SjiYKI0c7X1-wE7S4E.roa
Signing time: Tue 20 Dec 2022 13:25:46 +0000
ROA not before: Tue 20 Dec 2022 13:25:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 193.108.112.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:b6:2d:27:40:a4:2d:c0:65:41:a9:41:3b:0f:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 13:25:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3881daef9fd6d528e260a23473b5f5fb013b4b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:78:a8:25:de:b2:4e:3a:63:b4:7b:72:d7:
e3:16:0b:4c:c8:68:1f:db:75:1d:69:52:77:03:d4:
5d:10:80:ce:96:fd:60:fb:09:5e:0d:8e:a2:c2:5e:
bb:7c:c3:9e:fb:af:87:de:f6:38:92:fe:22:0a:58:
ab:33:c3:18:7d:ba:a7:77:9b:7b:43:74:e0:cf:55:
78:be:f4:00:af:7d:67:f7:47:ee:e2:44:4a:ce:26:
f0:cc:8a:32:f1:25:64:24:1e:d8:dc:5a:e5:91:e4:
07:39:c6:d7:12:85:b0:d2:e5:50:5c:92:3d:da:10:
bb:2a:8b:c5:77:55:99:ac:55:0d:46:e4:7d:2f:b7:
f1:79:d3:56:32:a2:90:e1:e2:b5:cd:2c:4c:8a:fa:
5b:cc:19:06:1f:4f:e1:1b:88:34:56:9a:42:2a:0f:
03:40:78:82:88:c7:f1:30:43:5d:16:37:47:7b:c3:
66:87:d7:d7:d2:8d:8b:6d:a0:d5:53:d6:7d:16:9d:
0c:c3:ae:29:10:00:d4:82:19:ab:87:12:c9:40:3a:
7e:a3:9e:a5:00:5d:2e:81:42:76:3f:85:b1:de:ac:
ee:f1:36:d1:85:3c:04:29:33:64:e3:29:97:4d:67:
16:01:48:c0:8d:50:da:8d:ee:3a:7b:3f:38:76:01:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:81:DA:EF:9F:D6:D5:28:E2:60:A2:34:73:B5:F5:FB:01:3B:4B:81
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OIHa75_W1SjiYKI0c7X1-wE7S4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.209.0/24
193.108.112.0/24
194.58.60.0/24
195.133.31.0/24
212.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b3:13:f2:36:8e:27:4e:33:fe:40:ab:2a:06:62:01:c7:92:
b2:0d:64:43:cb:7e:70:1c:a5:0e:23:f0:76:2d:45:24:7a:bd:
ce:2c:a9:83:da:ed:1d:27:14:ba:74:14:a7:75:c7:c3:8e:79:
b7:a6:ed:23:64:9a:f9:f3:b4:f9:73:dc:46:f3:d4:d8:6c:c0:
7e:8d:7d:34:ad:47:78:fe:0b:15:db:33:74:1e:1f:b3:11:84:
ea:ca:26:4c:11:5c:c2:10:11:e9:d3:de:28:ae:79:c7:49:f7:
6a:62:6b:66:b3:be:d7:6e:0f:b5:ca:68:9b:c3:80:e4:f8:e1:
58:5c:f2:f6:a1:d1:36:c7:24:24:1c:49:58:8e:e5:4e:44:04:
6d:98:f8:54:ed:2a:b2:80:ef:71:d3:21:27:c5:a1:0a:f8:85:
f8:63:47:cf:55:b9:38:c9:4c:fb:6a:cf:f1:51:42:24:27:f5:
4e:c4:27:48:c1:9d:22:59:e9:c0:07:73:fa:94:67:4e:c3:31:
39:02:9a:73:0d:06:8c:77:4e:b3:4f:e4:a8:e9:24:00:c5:68:
0f:35:92:5d:c5:0f:2e:21:b0:58:28:d3:be:71:26:d0:8b:40:
dd:e1:8c:cc:3f:46:59:67:a4:83:e6:a6:d2:cd:c0:f2:89:d4:
15:a2:b0:53
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYUvti0nQKQtwGVBqUE7DzbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjIwMTMyNTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODgxZGFlZjlmZDZkNTI4ZTI2MGEyMzQ3M2I1ZjVmYjAxM2I0YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwl4qCXesk46Y7R7ctfjFgtMyGgf
23UdaVJ3A9RdEIDOlv1g+wleDY6iwl67fMOe+6+H3vY4kv4iClirM8MYfbqnd5t7
Q3Tgz1V4vvQAr31n90fu4kRKzibwzIoy8SVkJB7Y3FrlkeQHOcbXEoWw0uVQXJI9
2hC7KovFd1WZrFUNRuR9L7fxedNWMqKQ4eK1zSxMivpbzBkGH0/hG4g0VppCKg8D
QHiCiMfxMENdFjdHe8Nmh9fX0o2LbaDVU9Z9Fp0Mw64pEADUghmrhxLJQDp+o56l
AF0ugUJ2P4Wx3qzu8TbRhTwEKTNk4ymXTWcWAUjAjVDaje46ez84dgGyJQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDiB2u+f1tUo4mCiNHO19fsBO0uBMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvT0lIYTc1X1cxU2ppWUtJMGM3WDEtd0U3UzRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwHzRAwQA
wWxwAwQAwjo8AwQAw4UfAwQA1MAGMA0GCSqGSIb3DQEBCwUAA4IBAQAFsxPyNo4n
TjP+QKsqBmIBx5KyDWRDy35wHKUOI/B2LUUker3OLKmD2u0dJxS6dBSndcfDjnm3
pu0jZJr587T5c9xG89TYbMB+jX00rUd4/gsV2zN0Hh+zEYTqyiZMEVzCEBHp094o
rnnHSfdqYmtms77Xbg+1ymibw4Dk+OFYXPL2odE2xyQkHElYjuVORARtmPhU7Sqy
gO9x0yEnxaEK+IX4Y0fPVbk4yUz7as/xUUIkJ/VOxCdIwZ0iWenAB3P6lGdOwzE5
AppzDQaMd06zT+So6SQAxWgPNZJdxQ8uIbBYKNO+cSbQi0Dd4YzMP0ZZZ6SD5qbS
zcDyidQVorBT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:02 2023 by rpki-client on console-fra.rpki-client.org