Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VzDMbPezN0T_JKl_i4fZHQTMbsc.roa
File: VzDMbPezN0T_JKl_i4fZHQTMbsc.roa (raw, json)
Hash identifier: J3zILYw8zWitxAWizIuL9M2n5RWUk97vNBuKhDqy7yc=
Subject key identifier: 57:30:CC:6C:F7:B3:37:44:FF:24:A9:7F:8B:87:D9:1D:04:CC:6E:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01841358C0F79140F3C7CCEA6EDB2737E6F9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VzDMbPezN0T_JKl_i4fZHQTMbsc.roa
Signing time: Wed 26 Oct 2022 08:11:34 +0000
ROA not before: Wed 26 Oct 2022 08:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.29.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:58:c0:f7:91:40:f3:c7:cc:ea:6e:db:27:37:e6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 26 08:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5730cc6cf7b33744ff24a97f8b87d91d04cc6ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6b:3a:57:68:ad:a1:b1:a0:00:07:85:47:96:
a6:a7:2a:4f:8a:dd:59:f0:40:49:21:92:7a:b2:d2:
d7:70:f9:e2:ed:eb:34:35:34:4e:31:61:6f:5f:72:
3d:63:91:61:96:26:92:a4:a4:f8:ff:ca:3f:db:b7:
a7:a6:18:1e:2c:25:ed:38:11:ed:8d:84:6b:bf:cc:
09:36:1a:c8:62:22:78:86:00:76:af:72:d8:53:18:
58:6a:5e:33:39:57:4b:15:19:4f:75:5a:86:51:f8:
eb:c8:19:36:40:31:72:26:04:5b:af:2a:53:e1:93:
06:16:e4:a5:c7:93:e2:0f:11:d2:64:ad:ea:ed:83:
18:e8:40:74:02:1c:1b:59:72:b4:02:0e:0f:2b:f3:
41:8b:a2:ac:ab:a7:76:96:70:db:79:73:71:a0:b9:
f0:5e:c2:15:4d:dd:a5:86:9a:3e:1b:0b:6b:5a:22:
43:b4:8d:65:32:79:e7:ad:35:05:16:74:2c:b9:08:
e4:33:14:bf:1d:e1:18:0f:74:92:6d:cf:0c:37:2a:
1f:f3:f7:81:35:89:66:3f:d3:59:7e:04:51:b1:fb:
08:65:93:bf:79:5e:9d:43:1c:c0:68:88:0c:bc:62:
2c:1e:6c:c8:dc:89:58:f6:fc:3f:af:6a:2b:31:3a:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:30:CC:6C:F7:B3:37:44:FF:24:A9:7F:8B:87:D9:1D:04:CC:6E:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VzDMbPezN0T_JKl_i4fZHQTMbsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
193.124.41.0/24
193.124.91.0/24
193.124.93.0-193.124.95.255
193.124.227.0/24
194.58.39.0/24
194.58.58.0/24
194.58.60.0/23
194.85.249.0/24
194.85.251.0/24
194.87.165.0/24
194.87.187.0/24
194.87.190.0/24
195.133.13.0-195.133.14.255
195.133.29.0/24
195.133.31.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
195.133.75.0/24
212.192.4.0/24
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a4:58:16:3a:c1:9e:17:3a:5c:45:99:c2:c6:97:20:38:0c:
fa:a4:2c:53:6d:98:ce:06:d7:6f:36:0a:b8:96:71:a1:9c:a1:
89:ee:ba:fb:11:2e:74:53:63:ba:5c:be:2f:e2:db:01:bd:e8:
71:0f:3b:9b:f8:1a:05:30:f4:38:20:0b:9f:d2:5f:1a:40:c5:
5d:2c:a3:ab:d1:2a:c7:c9:b7:a3:93:66:7b:56:b5:07:c3:a6:
d4:eb:7e:d1:b1:7e:13:0a:20:54:d5:47:13:29:df:29:fa:14:
64:79:10:67:af:17:f1:a2:5b:41:a6:ad:7c:dc:73:5b:7e:60:
cf:b4:0d:36:fc:88:82:ca:ce:e5:c2:5a:c4:f1:79:fc:3b:12:
e8:c2:81:01:35:06:fa:5f:7b:c0:d7:89:fc:32:04:7f:a6:ce:
46:08:6f:b3:5c:76:8e:53:a3:94:0a:d5:42:18:92:57:38:4d:
4f:84:b5:80:b0:19:d0:6b:97:dc:af:be:ca:46:c8:60:a6:54:
80:50:3b:21:13:31:3a:f1:c9:0a:e4:ad:d8:03:a0:95:00:7c:
a8:df:26:1e:0d:63:26:0e:8f:2a:dd:43:3d:3a:a1:99:7e:02:
71:5d:18:cb:3d:59:17:e4:11:01:b1:1a:ec:45:89:63:01:6e:
81:ef:f6:71
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAYQTWMD3kUDzx8zqbtsnN+b5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDI2MDgxMTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzMwY2M2Y2Y3YjMzNzQ0ZmYyNGE5N2Y4Yjg3ZDkxZDA0Y2M2ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWs6V2itobGgAAeFR5ampypPit1Z
8EBJIZJ6stLXcPni7es0NTROMWFvX3I9Y5FhliaSpKT4/8o/27enphgeLCXtOBHt
jYRrv8wJNhrIYiJ4hgB2r3LYUxhYal4zOVdLFRlPdVqGUfjryBk2QDFyJgRbrypT
4ZMGFuSlx5PiDxHSZK3q7YMY6EB0AhwbWXK0Ag4PK/NBi6Ksq6d2lnDbeXNxoLnw
XsIVTd2lhpo+GwtrWiJDtI1lMnnnrTUFFnQsuQjkMxS/HeEYD3SSbc8MNyof8/eB
NYlmP9NZfgRRsfsIZZO/eV6dQxzAaIgMvGIsHmzI3IlY9vw/r2orMTozVQIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFFcwzGz3szdE/ySpf4uH2R0EzG7HMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVnpETWJQZXpOMFRfSktsX2k0ZlpIUVRNYnNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBADA
fLwDBADBfCkDBADBfFswDAMEAMF8XQMEBcF8QAMEAMF84wMEAMI6JwMEAMI6OgME
AcI6PAMEAMJV+QMEAMJV+wMEAMJXpQMEAMJXuwMEAMJXvjAMAwQAw4UNAwQAw4UO
AwQAw4UdAwQAw4UfAwQAw4UlMAwDBADDhScDBALDhSgDBADDhUsDBADUwAQDBADU
wPADBADUwRwDBADUwR8wDQYJKoZIhvcNAQELBQADggEBAIWkWBY6wZ4XOlxFmcLG
lyA4DPqkLFNtmM4G1282CriWcaGcoYnuuvsRLnRTY7pcvi/i2wG96HEPO5v4GgUw
9DggC5/SXxpAxV0so6vRKsfJt6OTZntWtQfDptTrftGxfhMKIFTVRxMp3yn6FGR5
EGevF/GiW0GmrXzcc1t+YM+0DTb8iILKzuXCWsTxefw7EujCgQE1Bvpfe8DXifwy
BH+mzkYIb7Ncdo5To5QK1UIYklc4TU+EtYCwGdBrl9yvvspGyGCmVIBQOyETMTrx
yQrkrdgDoJUAfKjfJh4NYyYOjyrdQz06oZl+AnFdGMs9WRfkEQGxGuxFiWMBboHv
9nE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org