Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_wRTLtLewoYJyXgms8Umq2_jHAU.roa
File: _wRTLtLewoYJyXgms8Umq2_jHAU.roa (raw, json)
Hash identifier: 2O5Q1W7WwGWohq1cf/7WewoBw3N01umvddVg5bqDa7s=
Subject key identifier: FF:04:53:2E:D2:DE:C2:86:09:C9:78:26:B3:C5:26:AB:6F:E3:1C:05
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0181CDB516862E1F5A46758925F85579EDA2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_wRTLtLewoYJyXgms8Umq2_jHAU.roa
Signing time: Tue 05 Jul 2022 09:33:25 +0000
ROA not before: Tue 05 Jul 2022 09:33:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 195.133.73.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cd:b5:16:86:2e:1f:5a:46:75:89:25:f8:55:79:ed:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 5 09:33:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff04532ed2dec28609c97826b3c526ab6fe31c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cd:14:c9:62:c3:24:f8:8f:a9:bb:2d:96:2f:
1f:31:32:6c:b2:5d:87:53:68:54:e4:6a:70:0e:09:
cd:61:34:30:df:99:5a:5e:9a:e5:7b:ff:ac:41:b4:
f6:a5:9c:22:09:ff:c7:1f:ed:22:01:5d:91:4e:b8:
dc:63:3b:7a:cc:13:33:cc:3a:d2:c8:0a:da:71:b5:
62:41:a7:60:11:88:2d:de:52:39:f0:af:66:cb:59:
42:52:24:24:a9:cb:48:29:9b:41:eb:78:e6:e3:8e:
58:98:c9:9a:e0:9e:10:6d:33:d5:b9:43:98:3c:78:
24:0e:3d:bc:42:42:93:0c:f1:48:95:ee:63:2c:a7:
66:36:77:8d:87:5b:89:a0:70:06:b1:67:37:94:c0:
13:87:66:cd:a3:d0:16:e3:79:07:c5:2a:55:7d:01:
dd:f8:31:9c:83:1f:57:83:1c:9a:35:81:31:6e:52:
1d:43:e9:a4:fc:d8:50:11:fa:f7:11:49:cf:b1:48:
3d:24:4d:c9:ec:81:eb:a2:e2:6e:e7:51:5b:87:53:
cf:ad:69:a8:76:68:09:61:d2:e7:22:0c:44:06:cf:
25:55:67:bb:7f:41:0c:24:eb:f5:11:f7:41:be:e9:
c0:dc:47:57:70:c2:8f:33:e3:85:99:b2:65:86:73:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:04:53:2E:D2:DE:C2:86:09:C9:78:26:B3:C5:26:AB:6F:E3:1C:05
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_wRTLtLewoYJyXgms8Umq2_jHAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.41.0/24
193.124.203.0/24
194.87.1.0/24
194.87.7.0/24
194.87.16.0/24
194.87.30.0/24
194.87.64.0/24
194.87.166.0/24
194.87.179.0/24
194.135.23.0/24
194.135.124.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:d7:2a:11:8f:51:37:cd:e8:4c:c6:fe:55:43:89:84:7c:
53:fc:0e:fb:21:45:2b:33:da:20:ab:72:ae:38:16:82:c9:3c:
f6:14:51:ee:26:95:6e:c5:19:68:8d:a1:47:a1:8a:be:1b:8e:
49:47:72:8c:b1:b1:2e:7c:b6:85:b8:be:b1:4e:b7:18:d7:28:
4f:11:68:5f:72:4c:16:d3:97:fe:46:bd:35:71:fa:ae:59:0d:
28:43:7b:7b:ea:57:c2:d2:36:d6:c7:d4:fb:88:62:48:43:df:
e7:bf:c1:c5:6a:fe:ca:26:4a:04:c1:4e:a2:de:81:c6:33:a3:
1c:38:1f:fa:fc:46:5c:7f:89:78:59:f3:92:5e:e2:9b:a3:af:
bd:28:08:c3:89:cd:dd:a0:76:52:66:c8:e5:c1:c5:71:5a:b4:
61:31:68:fa:8c:82:23:b7:29:66:42:b0:97:c9:fa:02:de:39:
71:5d:95:78:49:fc:0a:3e:16:58:c6:41:65:a0:10:25:2a:45:
d5:31:d4:77:da:e2:35:55:15:30:28:f3:21:23:2d:81:2a:77:
35:bf:ff:7d:98:04:9b:f0:df:a5:16:d3:1c:fd:9a:8f:4f:bc:
d0:4b:6c:02:f0:ea:0d:31:0e:bd:e5:7c:83:01:4a:80:11:a9:
f7:1b:38:50
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYHNtRaGLh9aRnWJJfhVee2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwNzA1MDkzMzI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjA0NTMyZWQyZGVjMjg2MDljOTc4MjZiM2M1MjZhYjZmZTMxYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM0UyWLDJPiPqbstli8fMTJssl2H
U2hU5GpwDgnNYTQw35laXprle/+sQbT2pZwiCf/HH+0iAV2RTrjcYzt6zBMzzDrS
yAracbViQadgEYgt3lI58K9my1lCUiQkqctIKZtB63jm445YmMma4J4QbTPVuUOY
PHgkDj28QkKTDPFIle5jLKdmNneNh1uJoHAGsWc3lMATh2bNo9AW43kHxSpVfQHd
+DGcgx9XgxyaNYExblIdQ+mk/NhQEfr3EUnPsUg9JE3J7IHrouJu51Fbh1PPrWmo
dmgJYdLnIgxEBs8lVWe7f0EMJOv1EfdBvunA3EdXcMKPM+OFmbJlhnPnnQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFP8EUy7S3sKGCcl4JrPFJqtv4xwFMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvX3dSVEx0TGV3b1lKeVhnbXM4VW1xMl9qSEFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAwHytAwQA
wHyyAwQCwHy0AwQCwHy8AwQAwHzRAwQAwXwpAwQAwXzLAwQAwlcBAwQAwlcHAwQA
wlcQAwQAwlceAwQAwldAAwQAwlemAwQAwlezAwQAwocXAwQAwod8AwQAw4VJMA0G
CSqGSIb3DQEBCwUAA4IBAQBIFNcqEY9RN83oTMb+VUOJhHxT/A77IUUrM9ogq3Ku
OBaCyTz2FFHuJpVuxRlojaFHoYq+G45JR3KMsbEufLaFuL6xTrcY1yhPEWhfckwW
05f+Rr01cfquWQ0oQ3t76lfC0jbWx9T7iGJIQ9/nv8HFav7KJkoEwU6i3oHGM6Mc
OB/6/EZcf4l4WfOSXuKbo6+9KAjDic3doHZSZsjlwcVxWrRhMWj6jIIjtylmQrCX
yfoC3jlxXZV4SfwKPhZYxkFloBAlKkXVMdR32uI1VRUwKPMhIy2BKnc1v/99mASb
8N+lFtMc/ZqPT7zQS2wC8OoNMQ695XyDAUqAEan3GzhQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org