Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/boS-kMvfq1UD0L-DWsSceDK_6rs.roa
File: boS-kMvfq1UD0L-DWsSceDK_6rs.roa (raw, json)
Hash identifier: S208SDDMEc7ft2RhwmGRiU9WhsRXha7JclNOwrp6baA=
Subject key identifier: 6E:84:BE:90:CB:DF:AB:55:03:D0:BF:83:5A:C4:9C:78:32:BF:EA:BB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01853FF46DC5C3B006799150FC95C0A8CA45
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/boS-kMvfq1UD0L-DWsSceDK_6rs.roa
Signing time: Fri 23 Dec 2022 17:07:41 +0000
ROA not before: Fri 23 Dec 2022 17:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:f4:6d:c5:c3:b0:06:79:91:50:fc:95:c0:a8:ca:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 23 17:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e84be90cbdfab5503d0bf835ac49c7832bfeabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:4f:49:34:40:ff:83:e1:fc:44:cd:58:fe:
25:e6:a3:83:56:d6:58:db:e6:1c:bf:ca:96:d8:b2:
1b:0e:62:f3:40:30:ce:ad:87:97:f0:f5:51:e3:ce:
84:24:a3:35:27:d4:07:cc:ea:ae:d2:60:2c:1c:22:
f4:7d:01:56:aa:85:a2:5d:6f:c4:66:c7:99:81:1a:
e0:07:04:b3:2e:6e:25:a6:98:25:dd:df:0f:6b:4c:
1a:49:ff:85:6c:b4:5c:d9:89:98:5c:dd:57:e4:c7:
77:dc:9a:4d:9a:e7:5a:85:06:a3:e7:25:41:33:d5:
cd:67:28:f9:3c:9b:49:e1:ff:30:5d:48:6f:bf:f6:
1c:37:8c:2c:4d:8b:43:a8:e1:af:ec:f4:5c:07:59:
eb:f1:ff:76:40:4c:2c:2a:ec:24:da:85:61:b0:d9:
38:9f:41:26:f1:f4:34:b2:69:ec:62:1f:b6:2c:51:
f1:cd:f2:cd:af:f7:16:a6:37:43:73:e4:e3:fc:85:
23:63:e6:8e:fd:b8:6a:3b:25:fd:94:c6:6a:89:e4:
5b:53:4f:bf:cd:ae:e8:d0:ab:5d:40:c0:0b:a7:dc:
21:f1:22:ac:fc:84:06:6b:1d:f8:94:52:fa:a3:0a:
ea:7b:e5:ab:46:5a:ae:93:85:fe:4f:f9:5e:ec:78:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:BE:90:CB:DF:AB:55:03:D0:BF:83:5A:C4:9C:78:32:BF:EA:BB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/boS-kMvfq1UD0L-DWsSceDK_6rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
194.87.1.0/24
194.87.38.0/24
194.87.42.0/24
194.87.73.0/24
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.178.0/23
194.87.187.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.56.0/24
195.133.0.0/24
195.133.30.0/24
195.133.35.0/24
195.133.195.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9f:b7:1f:1a:f1:56:1b:de:da:c1:2c:9a:7c:a9:10:ff:64:
16:47:d8:06:f4:ac:42:68:d0:58:9b:19:0c:e3:6d:5c:2c:25:
02:97:27:69:98:e2:a7:1e:d0:17:e7:02:ec:82:96:ae:7b:67:
bb:53:bf:3c:0d:90:a0:db:ed:66:40:2a:e9:ef:30:da:5a:ac:
92:9d:30:5f:f1:c3:f0:ee:ca:a8:14:43:e5:aa:41:37:2d:50:
5e:7d:8a:e5:c0:c7:12:b1:38:7d:ff:19:34:94:34:4e:30:5a:
00:a1:4d:de:f6:9c:be:dd:71:2c:2d:4c:6e:9e:5d:e5:df:d8:
b3:c9:b2:74:57:77:45:06:03:61:94:d6:60:dd:99:c4:09:d4:
d1:17:3b:39:83:d6:60:04:aa:ac:0d:c1:fe:aa:fd:13:91:75:
ca:0c:d4:18:18:6b:af:a9:3a:47:bc:fc:09:52:61:cc:48:c0:
8c:17:95:da:ab:df:37:4a:94:8d:f8:4d:04:11:66:04:24:e8:
01:ac:34:7e:6f:a7:56:84:c4:a6:ff:1c:e0:d8:af:41:bc:b1:
35:d1:d3:60:dc:0d:55:40:9a:2c:f5:f3:d2:59:e5:5e:57:35:
88:40:de:c5:92:de:22:3d:4a:02:73:10:97:54:27:a0:24:6a:
46:33:80:52
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAYU/9G3Fw7AGeZFQ/JXAqMpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjIzMTcwNzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTg0YmU5MGNiZGZhYjU1MDNkMGJmODM1YWM0OWM3ODMyYmZlYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYBPSTRA/4Ph/ETNWP4l5qODVtZY
2+Ycv8qW2LIbDmLzQDDOrYeX8PVR486EJKM1J9QHzOqu0mAsHCL0fQFWqoWiXW/E
ZseZgRrgBwSzLm4lppgl3d8Pa0waSf+FbLRc2YmYXN1X5Md33JpNmudahQaj5yVB
M9XNZyj5PJtJ4f8wXUhvv/YcN4wsTYtDqOGv7PRcB1nr8f92QEwsKuwk2oVhsNk4
n0Em8fQ0smnsYh+2LFHxzfLNr/cWpjdDc+Tj/IUjY+aO/bhqOyX9lMZqieRbU0+/
za7o0KtdQMALp9wh8SKs/IQGax34lFL6owrqe+WrRlquk4X+T/le7HgpZwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFG6EvpDL36tVA9C/g1rEnHgyv+q7MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYm9TLWtNdmZxMVVEMEwtRFdzU2NlREtfNnJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBADB
fAMDBADCVwEDBADCVyYDBADCVyoDBADCV0kDBAHCV4IDBADCV6YDBADCV6gDBAHC
V7IDBADCV7sDBADChxIDBADChxcwDAMEAMM6IwMEAMM6JAMEAMM6MgMEAMM6OAME
AMOFAAMEAMOFHgMEAMOFIwMEAMOFwwMEANTAHzANBgkqhkiG9w0BAQsFAAOCAQEA
QJ+3HxrxVhve2sEsmnypEP9kFkfYBvSsQmjQWJsZDONtXCwlApcnaZjipx7QF+cC
7IKWrntnu1O/PA2QoNvtZkAq6e8w2lqskp0wX/HD8O7KqBRD5apBNy1QXn2K5cDH
ErE4ff8ZNJQ0TjBaAKFN3vacvt1xLC1Mbp5d5d/Ys8mydFd3RQYDYZTWYN2ZxAnU
0Rc7OYPWYASqrA3B/qr9E5F1ygzUGBhrr6k6R7z8CVJhzEjAjBeV2qvfN0qUjfhN
BBFmBCToAaw0fm+nVoTEpv8c4NivQbyxNdHTYNwNVUCaLPXz0lnlXlc1iEDexZLe
Ij1KAnMQl1QnoCRqRjOAUg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org