Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aWB-bpZeq1T4xGZ67ukaEldzhPU.roa
File: aWB-bpZeq1T4xGZ67ukaEldzhPU.roa (raw, json)
Hash identifier: FIdqmW404zl9pWpHzjLhP//Fdi1z5tVVJrc/SoS8YXQ=
Subject key identifier: 69:60:7E:6E:96:5E:AB:54:F8:C4:66:7A:EE:E9:1A:12:57:73:84:F5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 10259679
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aWB-bpZeq1T4xGZ67ukaEldzhPU.roa
Signing time: Mon 30 May 2022 09:03:13 +0000
ROA not before: Mon 30 May 2022 09:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/23 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270898809 (0x10259679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 30 09:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69607e6e965eab54f8c4667aeee91a12577384f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:c0:d8:31:bf:e0:7f:5c:27:45:27:81:38:
d1:a1:0d:ad:05:f2:81:46:5b:2c:a2:eb:ce:9a:e5:
da:d3:c3:e3:e7:fc:f7:12:64:36:b9:cd:ec:2e:92:
3b:c4:45:37:ea:9c:a4:f4:31:e9:d6:e0:e1:9e:be:
a1:97:c9:0c:c9:11:4e:51:39:34:c3:1e:ba:2e:be:
4e:1f:28:ba:30:f7:66:4c:f4:c7:f7:a0:ed:1b:85:
fb:5f:cc:82:af:9f:8e:1b:de:85:04:e5:f1:37:3a:
66:59:79:be:cd:c6:df:9e:2c:af:0a:8d:e1:ff:7d:
b5:db:45:64:fe:58:c8:0a:7c:cc:7e:1c:3d:a6:a7:
5a:32:85:29:42:05:97:f1:f0:44:9e:a9:1b:f9:a8:
e4:9c:93:69:a8:eb:23:68:9b:41:4b:7d:38:99:01:
06:e9:85:1b:9d:0a:01:39:39:13:e5:73:4d:e3:04:
78:6f:b8:36:2a:bb:c1:71:6f:f9:89:6b:64:64:dd:
a2:d6:79:19:f6:4b:98:61:0a:25:34:20:e5:53:a1:
d0:65:b2:1d:47:a1:c4:ca:80:e2:03:4f:40:dc:32:
6b:18:39:bd:57:2e:52:b0:98:a5:46:b6:2d:6d:52:
3d:5e:05:6c:75:33:24:f4:bb:22:6b:57:50:10:56:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:7E:6E:96:5E:AB:54:F8:C4:66:7A:EE:E9:1A:12:57:73:84:F5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aWB-bpZeq1T4xGZ67ukaEldzhPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.89.0/24
193.124.93.0/24
193.124.95.0/24
193.124.202.0/23
194.58.60.0/24
194.58.67.0/24
194.87.7.0/24
194.87.16.0/24
194.87.64.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.226.0/24
194.135.23.0/24
194.135.124.0/24
195.58.52.0/24
195.133.77.0/24
195.133.81.0/24
212.192.10.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:cf:11:cb:e9:a8:d5:48:e6:7a:9f:a9:5f:47:11:81:36:79:
18:95:34:22:82:45:a9:17:85:b0:69:8d:8e:c0:d6:7e:06:b4:
a7:28:f1:94:3e:7d:ac:c8:1b:97:62:91:69:c3:f6:b8:12:88:
dc:07:48:59:e6:09:ba:e3:a0:44:f3:b9:6b:2d:75:67:31:aa:
30:5d:5a:9a:77:18:fe:61:fa:27:69:fb:cd:06:d5:b4:07:bc:
19:af:65:e3:bf:ae:f3:cd:30:c4:f6:46:3d:ba:09:ad:0f:93:
ba:f0:08:4c:4a:7c:94:06:7d:e3:d0:b2:62:b9:a4:49:3c:c8:
83:d8:51:e0:23:22:cd:30:63:c8:b0:d5:b4:36:75:b0:43:be:
6c:5d:8e:77:2a:f7:09:8f:27:0d:3a:2b:60:8f:5c:c4:22:10:
db:30:8c:fa:3b:1b:8f:a7:3f:13:b8:8c:8e:6c:44:60:cb:e2:
e4:0f:c3:90:fe:3a:c2:98:fc:98:f4:6a:dc:c9:bb:d9:2e:72:
b3:70:1a:4d:9b:95:22:d7:86:81:83:15:b9:f9:be:6d:61:3b:
00:0f:0e:39:00:4e:00:39:9d:f0:ca:9a:b9:de:c7:88:8c:bf:
ab:ec:a0:eb:37:f5:8e:9e:30:dc:e3:ce:5a:5b:c3:e5:0f:39:
13:bd:7c:b0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIEECWWeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDUz
MDA5MDMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjk2MDdlNmU5NjVl
YWI1NGY4YzQ2NjdhZWVlOTFhMTI1NzczODRmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0mwNgxv+B/XCdFJ4E40aENrQXygUZbLKLrzprl2tPD4+f8
9xJkNrnN7C6SO8RFN+qcpPQx6dbg4Z6+oZfJDMkRTlE5NMMeui6+Th8oujD3Zkz0
x/eg7RuF+1/Mgq+fjhvehQTl8Tc6Zll5vs3G354srwqN4f99tdtFZP5YyAp8zH4c
PaanWjKFKUIFl/HwRJ6pG/mo5JyTaajrI2ibQUt9OJkBBumFG50KATk5E+VzTeME
eG+4Niq7wXFv+YlrZGTdotZ5GfZLmGEKJTQg5VOh0GWyHUehxMqA4gNPQNwyaxg5
vVcuUrCYpUa2LW1SPV4FbHUzJPS7ImtXUBBWHLUCAwEAAaOCArAwggKsMB0GA1Ud
DgQWBBRpYH5ull6rVPjEZnru6RoSV3OE9TAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L2FXQi1icFplcTFUNHhHWjY3dWthRWxkemhQVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
xQYIKwYBBQUHAQcBAf8EgbUwgbIwga8EAgABMIGoAwQAPkzoAwQAPkzrAwQAwHyt
AwQAwHyyAwQCwHy0AwQCwHy8AwQAwHzRAwQAwXwEAwQAwXxZAwQAwXxdAwQAwXxf
AwQBwXzKAwQAwjo8AwQAwjpDAwQAwlcHAwQAwlcQAwQAwldAAwQAwldoAwQAwlem
AwQAwlesAwQAwlezAwQAwlfiAwQAwocXAwQAwod8AwQAwzo0AwQAw4VNAwQAw4VR
AwQB1MAKMA0GCSqGSIb3DQEBCwUAA4IBAQBrzxHL6ajVSOZ6n6lfRxGBNnkYlTQi
gkWpF4WwaY2OwNZ+BrSnKPGUPn2syBuXYpFpw/a4EojcB0hZ5gm646BE87lrLXVn
MaowXVqadxj+YfonafvNBtW0B7wZr2Xjv67zzTDE9kY9ugmtD5O68AhMSnyUBn3j
0LJiuaRJPMiD2FHgIyLNMGPIsNW0NnWwQ75sXY53KvcJjycNOitgj1zEIhDbMIz6
OxuPpz8TuIyObERgy+LkD8OQ/jrCmPyY9GrcybvZLnKzcBpNm5Ui14aBgxW5+b5t
YTsADw45AE4AOZ3wypq53seIjL+r7KDrN/WOnjDc485aW8PlDzkTvXyw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org