Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WZOw2QyJTJddqI4xSKQ2GIWWnq8.roa
File: WZOw2QyJTJddqI4xSKQ2GIWWnq8.roa (raw, json)
Hash identifier: yDFP1EJA7zyV0YEQS4iaejZ8eWBC7JTGIcj3zVDq3L8=
Subject key identifier: 59:93:B0:D9:0C:89:4C:97:5D:A8:8E:31:48:A4:36:18:85:96:9E:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01839DC8D8CD4C33525F6B741CABEC919B10
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WZOw2QyJTJddqI4xSKQ2GIWWnq8.roa
Signing time: Mon 03 Oct 2022 12:18:48 +0000
ROA not before: Mon 03 Oct 2022 12:18:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 195.133.94.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:c8:d8:cd:4c:33:52:5f:6b:74:1c:ab:ec:91:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 3 12:18:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5993b0d90c894c975da88e3148a4361885969eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:1b:9e:5a:32:97:00:c0:77:b7:8b:a8:e7:
f5:53:e9:e2:59:82:11:76:bf:83:a5:d0:76:db:5a:
07:6c:2a:fb:22:cb:30:d9:1e:ad:ad:4d:ce:ac:d0:
ea:79:49:25:46:d0:3a:e7:e3:42:5d:e8:78:82:c1:
4c:11:dc:ea:42:cf:e0:14:e4:89:24:01:6a:81:d2:
c0:70:a7:1f:65:9b:59:fe:96:7d:cf:07:ca:36:89:
f0:84:35:20:da:38:23:a2:8a:81:fa:54:c1:43:97:
d1:b8:2d:65:03:ea:e5:6d:a4:ec:0d:97:c5:e3:e1:
ce:15:8d:96:a4:d2:aa:fb:7f:7f:9b:b4:dc:92:5f:
9c:5b:84:cd:6b:f2:28:30:d7:8b:e2:e6:d5:4d:17:
5f:07:e2:28:53:a2:22:02:c2:49:01:60:f2:86:42:
41:82:63:ee:16:e1:2c:00:70:3a:08:9a:19:59:32:
9c:b2:4b:96:30:6e:aa:1a:2b:68:5f:0e:d6:b8:12:
42:dd:08:33:93:c9:db:d1:f5:32:12:da:76:52:2f:
56:48:99:29:eb:b7:3f:64:f1:92:a1:7d:e5:2b:1c:
4b:c7:7e:e9:f1:da:eb:d9:ef:da:74:f3:7a:99:93:
3d:a2:35:56:b3:fd:f9:0f:41:50:bd:f9:e7:db:54:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:93:B0:D9:0C:89:4C:97:5D:A8:8E:31:48:A4:36:18:85:96:9E:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WZOw2QyJTJddqI4xSKQ2GIWWnq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.94.0/24
212.192.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a0:4e:f0:fd:61:1a:b0:36:ae:81:38:b4:d3:3a:52:84:47:
f0:a6:53:43:24:23:64:4b:95:86:bf:3a:51:1b:33:2c:0e:73:
32:e0:9e:ca:3e:03:5f:ea:f2:eb:b1:42:04:23:7d:87:45:9f:
6d:e5:fc:a2:35:ed:f4:6d:c4:24:ed:6b:7d:0b:c4:b1:2d:e1:
0f:f9:19:d5:87:3d:90:5b:e9:61:81:9e:7b:3c:ee:f4:8b:cf:
9f:1e:b6:3c:52:39:9a:58:da:74:d0:da:58:77:a7:72:e7:6a:
c8:24:c6:7a:52:4e:2a:9c:9c:16:4f:36:52:d8:51:18:82:b0:
55:fa:3d:75:9b:66:a1:1a:dd:99:0e:c1:ea:3d:32:7a:fb:12:
8e:47:f4:19:96:72:dc:e4:5f:e9:03:a7:76:5a:df:a3:b8:6c:
61:b2:89:3c:3f:7a:da:b3:52:ff:a1:67:76:c0:7d:06:bb:e6:
7e:c9:d6:5e:9f:21:68:0d:49:4b:87:fd:70:29:cb:f6:2e:dc:
d2:a8:04:e3:18:ae:10:20:9f:c1:5a:bc:03:83:56:bc:0b:bd:
03:a3:91:6f:eb:28:44:f9:11:3d:f2:44:d1:79:16:ac:c9:b4:
6e:10:5c:e3:1f:f2:74:40:da:25:eb:62:2a:31:ce:d2:71:95:
f1:79:27:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOdyNjNTDNSX2t0HKvskZsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDAzMTIxODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTkzYjBkOTBjODk0Yzk3NWRhODhlMzE0OGE0MzYxODg1OTY5ZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfIbnloylwDAd7eLqOf1U+niWYIR
dr+DpdB221oHbCr7Issw2R6trU3OrNDqeUklRtA65+NCXeh4gsFMEdzqQs/gFOSJ
JAFqgdLAcKcfZZtZ/pZ9zwfKNonwhDUg2jgjooqB+lTBQ5fRuC1lA+rlbaTsDZfF
4+HOFY2WpNKq+39/m7Tckl+cW4TNa/IoMNeL4ubVTRdfB+IoU6IiAsJJAWDyhkJB
gmPuFuEsAHA6CJoZWTKcskuWMG6qGitoXw7WuBJC3Qgzk8nb0fUyEtp2Ui9WSJkp
67c/ZPGSoX3lKxxLx37p8drr2e/adPN6mZM9ojVWs/35D0FQvfnn21TPFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFmTsNkMiUyXXaiOMUikNhiFlp6vMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvV1pPdzJReUpUSmRkcUk0eFNLUTJHSVdXbnE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4VeAwQA
1MAMMA0GCSqGSIb3DQEBCwUAA4IBAQA/oE7w/WEasDaugTi00zpShEfwplNDJCNk
S5WGvzpRGzMsDnMy4J7KPgNf6vLrsUIEI32HRZ9t5fyiNe30bcQk7Wt9C8SxLeEP
+RnVhz2QW+lhgZ57PO70i8+fHrY8UjmaWNp00NpYd6dy52rIJMZ6Uk4qnJwWTzZS
2FEYgrBV+j11m2ahGt2ZDsHqPTJ6+xKOR/QZlnLc5F/pA6d2Wt+juGxhsok8P3ra
s1L/oWd2wH0Gu+Z+ydZenyFoDUlLh/1wKcv2LtzSqATjGK4QIJ/BWrwDg1a8C70D
o5Fv6yhE+RE98kTReRasybRuEFzjH/J0QNol62IqMc7ScZXxeSc3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org