Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/O_41GJLNFcGZWRhHmvL_z5tyQJw.roa
File: O_41GJLNFcGZWRhHmvL_z5tyQJw.roa (raw, json)
Hash identifier: 5mLJFTJ+x8c8f0LVUrfWhTzYSAyZp4c1MM1fGJ3Ug84=
Subject key identifier: 3B:FE:35:18:92:CD:15:C1:99:59:18:47:9A:F2:FF:CF:9B:72:40:9C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01852AEA761969FB0BCA938BFEC0CAC9F3FF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/O_41GJLNFcGZWRhHmvL_z5tyQJw.roa
Signing time: Mon 19 Dec 2022 15:04:46 +0000
ROA not before: Mon 19 Dec 2022 15:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.74.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:ea:76:19:69:fb:0b:ca:93:8b:fe:c0:ca:c9:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 19 15:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bfe351892cd15c1995918479af2ffcf9b72409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:a6:5c:e8:b2:1f:a9:8d:21:83:a4:1b:4c:
8e:54:ae:0a:72:7c:eb:b5:4e:5a:70:b1:b5:dd:1b:
30:d8:eb:6b:f5:d1:ae:55:e6:80:f8:3f:a0:f8:b1:
95:92:c4:df:cc:e4:8d:f4:be:84:20:fd:9d:8e:f8:
f4:09:20:56:6c:ff:2c:79:9f:02:9a:00:b6:cf:93:
e8:78:04:3a:ab:d3:fc:56:9a:b0:cc:08:c0:29:a8:
62:fa:d8:dd:26:c2:e6:83:f6:f5:4b:26:34:fb:0f:
48:53:b4:77:ee:79:d8:17:bc:36:96:7d:aa:7f:87:
ea:cc:14:01:05:45:18:50:a8:26:31:84:40:4b:94:
8b:79:f2:fd:4f:23:c1:bd:0e:5a:2e:11:fc:57:c4:
a8:ca:38:06:31:17:a0:04:8f:9a:57:44:f2:61:04:
44:ca:bf:30:2a:e9:3e:a3:68:23:da:ba:53:15:f9:
cc:bf:52:5f:6c:5a:ae:01:55:96:1a:0d:1f:9e:c4:
e2:ba:2b:b1:75:41:f2:7b:3f:d2:ef:98:c8:eb:a9:
6f:5a:63:8e:d6:06:e3:3c:f8:f3:8d:fb:83:ec:2d:
5b:6a:29:55:82:33:f8:3c:5a:d8:8f:73:d9:33:e7:
7c:8c:e7:40:bf:6b:09:e7:38:93:12:e5:5d:4e:22:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:35:18:92:CD:15:C1:99:59:18:47:9A:F2:FF:CF:9B:72:40:9C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/O_41GJLNFcGZWRhHmvL_z5tyQJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.9.0/24
193.124.18.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.74.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.149.0/24
194.87.160.0/23
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.15.0/24
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.10.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
88:12:be:28:bf:2e:a9:17:e0:f3:1c:5b:fe:21:7a:84:49:5d:
6d:7e:5f:b6:e5:c9:67:65:81:7e:bd:4f:15:30:b6:43:0d:a0:
b0:83:47:c7:16:e2:98:24:57:15:42:15:fa:c5:17:f6:4e:dc:
a4:ec:c3:b4:f9:15:b5:a7:12:a2:8e:0a:fc:ce:93:36:ae:7b:
c9:9c:bd:26:9e:96:18:78:4b:6d:58:e1:4d:02:b7:55:eb:72:
12:a7:7f:3e:2b:e9:52:53:11:36:e1:65:22:1c:8a:1d:60:55:
3d:4a:e0:e4:6c:1e:b5:76:4c:24:d1:f0:2c:42:57:9c:8a:da:
1d:eb:d5:c0:c3:46:97:d6:27:e9:c0:e3:0e:1f:88:d8:e7:5e:
0f:3a:13:2e:a8:18:18:e3:cb:17:d8:bc:4d:88:74:46:22:2a:
31:6d:83:cf:1e:38:78:34:09:eb:f6:c9:1a:e4:6d:9d:ab:4e:
5f:dc:15:a6:2b:77:5e:bb:b0:9c:a4:db:bc:68:d8:05:15:75:
91:b4:44:30:49:ff:17:ea:e2:5b:d9:d8:af:4f:ae:78:0b:5b:
f2:2e:58:b4:d0:67:5a:42:dd:d6:b2:b3:62:65:b7:72:24:fd:
76:c0:78:be:04:25:7b:d5:01:7e:44:3f:2a:2b:f1:54:d5:f4:
26:df:b4:79
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISAYUq6nYZafsLypOL/sDKyfP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjE5MTUwNDQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmZlMzUxODkyY2QxNWMxOTk1OTE4NDc5YWYyZmZjZjliNzI0MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPKmXOiyH6mNIYOkG0yOVK4Kcnzr
tU5acLG13Rsw2Otr9dGuVeaA+D+g+LGVksTfzOSN9L6EIP2djvj0CSBWbP8seZ8C
mgC2z5PoeAQ6q9P8VpqwzAjAKahi+tjdJsLmg/b1SyY0+w9IU7R37nnYF7w2ln2q
f4fqzBQBBUUYUKgmMYRAS5SLefL9TyPBvQ5aLhH8V8SoyjgGMRegBI+aV0TyYQRE
yr8wKuk+o2gj2rpTFfnMv1JfbFquAVWWGg0fnsTiuiuxdUHyez/S75jI66lvWmOO
1gbjPPjzjfuD7C1bailVgjP4PFrYj3PZM+d8jOdAv2sJ5ziTEuVdTiK4TQIDAQAB
o4IDSTCCA0UwHQYDVR0OBBYEFDv+NRiSzRXBmVkYR5ry/8+bckCcMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvT180MUdKTE5GY0daV1JoSG12TF96NXR5UUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB
PAMEAD5M5wMEAMB8rAMEAMB8sgMEAsB8tAMEAMF8AwMEAMF8CQMEAMF8EgMEAMF8
hQMEAMF8yQMEAMF8ywMEAMF8zwMEAMI6JgMEAcI6KjAMAwQAwjotAwQEwjogAwQA
wjo7AwQAwlcHAwQCwlcYAwQAwlc4AwQAwldKAwQAwldMAwQBwldSAwQAwldoAwQA
wldsAwQAwld2AwQAwld7AwQAwleIAwQAwleVAwQBwlegAwQAwlejAwQAwlelMAwD
BADCV6sDBADCV6wDBADCV7ADBADCV7YDBAHCV8YDBADCV8oDBAHCV9ADBAHCV94D
BADCV+kDBADChx4DBADDOjIDBAPDOjgDBADDhQwDBADDhQ8DBADDhTcDBADDhcMD
BAHUwAADBADUwAoDBADUwN4DBADUwQADBADUwQwwDQYJKoZIhvcNAQELBQADggEB
AIgSvii/LqkX4PMcW/4heoRJXW1+X7blyWdlgX69TxUwtkMNoLCDR8cW4pgkVxVC
FfrFF/ZO3KTsw7T5FbWnEqKOCvzOkzaue8mcvSaelhh4S21Y4U0Ct1XrchKnfz4r
6VJTETbhZSIcih1gVT1K4ORsHrV2TCTR8CxCV5yK2h3r1cDDRpfWJ+nA4w4fiNjn
Xg86Ey6oGBjjyxfYvE2IdEYiKjFtg88eOHg0Cev2yRrkbZ2rTl/cFaYrd167sJyk
27xo2AUVdZG0RDBJ/xfq4lvZ2K9PrngLW/IuWLTQZ1pC3days2Jlt3Ik/XbAeL4E
JXvVAX5EPyor8VTV9CbftHk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org