Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cgw5kIdVQuRLQbzv9UYH9OYfPaE.roa
File: cgw5kIdVQuRLQbzv9UYH9OYfPaE.roa (raw, json)
Hash identifier: gf9QP72zDeu6uSDOszyZqLct7nSUwQKqbbG2kdt+MZM=
Subject key identifier: 72:0C:39:90:87:55:42:E4:4B:41:BC:EF:F5:46:07:F4:E6:1F:3D:A1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182F7E12488C9905C941E76736416690624
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cgw5kIdVQuRLQbzv9UYH9OYfPaE.roa
Signing time: Thu 01 Sep 2022 07:08:23 +0000
ROA not before: Thu 01 Sep 2022 07:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 194.87.114.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.132.0/22 maxlen: 24
194.87.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f7:e1:24:88:c9:90:5c:94:1e:76:73:64:16:69:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 1 07:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=720c3990875542e44b41bceff54607f4e61f3da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:8d:71:01:16:91:a3:03:6a:98:22:bd:d7:
b5:ac:37:de:ec:33:87:1c:69:2a:1a:6f:a0:9f:47:
f9:8e:1e:d7:cc:a8:2d:d6:c0:3f:45:60:7e:26:59:
fe:28:64:da:3c:47:c3:4b:7b:25:83:64:67:c2:31:
50:f1:39:5e:00:12:59:48:b2:b4:1e:87:4d:89:99:
17:c3:2e:8f:43:6d:da:f6:f7:4a:0c:e1:b2:a2:3f:
49:9a:c8:a3:18:6b:d8:b8:01:15:a7:6e:95:8f:8b:
e2:aa:5c:30:f2:c5:eb:cc:46:30:da:1b:7f:8a:9c:
99:41:3a:ef:b4:98:45:2c:99:c3:fe:1f:fb:a0:47:
62:93:53:a8:9a:b6:78:b8:c1:d0:f6:ea:06:ce:9e:
2b:12:ed:16:23:88:88:fc:59:e4:c7:b3:18:17:a8:
e9:4a:5a:7f:68:5b:e1:19:b2:ce:56:fc:52:eb:90:
0e:60:13:74:ab:30:ef:07:cc:84:41:0f:48:a1:25:
ee:95:63:d9:49:d8:3d:33:7c:de:43:49:36:55:fa:
60:86:24:ae:61:f4:f4:3c:ac:5f:5c:f9:f4:b4:24:
33:d7:60:d7:5d:aa:b9:11:18:ae:38:91:cb:bb:f0:
37:fa:6a:5d:ef:b3:02:c4:86:35:1d:22:aa:29:d7:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:39:90:87:55:42:E4:4B:41:BC:EF:F5:46:07:F4:E6:1F:3D:A1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cgw5kIdVQuRLQbzv9UYH9OYfPaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.42.0/24
194.87.114.0/24
194.87.131.0-194.87.135.255
Signature Algorithm: sha256WithRSAEncryption
0c:7d:a6:8d:28:9b:a5:c5:6f:41:18:17:a3:16:f0:1b:7b:f0:
ca:1e:a6:50:b6:33:18:69:8d:7b:24:25:0c:ab:90:bd:cf:d5:
87:b6:1b:dd:05:d9:5c:bb:e1:2e:db:11:8f:d2:47:44:39:dd:
e4:13:1d:0e:20:b4:49:0d:9f:f1:67:3c:2c:02:57:af:0b:1d:
d2:7c:1a:f6:d2:22:00:46:4b:73:ca:3e:82:23:71:e3:c5:e9:
1f:71:69:4a:c8:16:5a:77:b0:ad:97:75:19:da:c3:b5:92:ea:
7b:b2:9c:ea:a3:f3:8a:d6:97:e6:23:bd:55:5f:fa:f3:a5:30:
2d:b2:27:e3:1b:b3:c7:1b:c0:09:e7:10:7e:1b:1b:d3:ab:83:
81:52:4e:a9:c0:27:b2:ce:99:e9:95:df:00:0b:a5:6e:0d:06:
6e:be:f3:66:c7:1e:da:18:d2:ea:c4:99:98:62:75:fa:10:d5:
68:ed:0e:e3:9e:01:93:fd:32:01:9d:e9:27:87:ff:34:a2:51:
27:c7:1d:a9:d0:8d:a7:ba:a3:ca:6b:da:8e:0b:b8:90:88:ba:
ae:81:e3:66:db:88:79:34:42:e2:d6:96:14:79:32:6c:a6:a9:
04:a8:3d:1e:1f:f7:6b:c4:d4:c7:98:8c:69:4e:e8:51:e4:c2:
13:c6:38:53
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYL34SSIyZBclB52c2QWaQYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwOTAxMDcwODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjBjMzk5MDg3NTU0MmU0NGI0MWJjZWZmNTQ2MDdmNGU2MWYzZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq+NcQEWkaMDapgivde1rDfe7DOH
HGkqGm+gn0f5jh7XzKgt1sA/RWB+Jln+KGTaPEfDS3slg2RnwjFQ8TleABJZSLK0
HodNiZkXwy6PQ23a9vdKDOGyoj9JmsijGGvYuAEVp26Vj4viqlww8sXrzEYw2ht/
ipyZQTrvtJhFLJnD/h/7oEdik1OomrZ4uMHQ9uoGzp4rEu0WI4iI/Fnkx7MYF6jp
Slp/aFvhGbLOVvxS65AOYBN0qzDvB8yEQQ9IoSXulWPZSdg9M3zeQ0k2VfpghiSu
YfT0PKxfXPn0tCQz12DXXaq5ERiuOJHLu/A3+mpd77MCxIY1HSKqKde7sQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHIMOZCHVULkS0G87/VGB/TmHz2hMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvY2d3NWtJZFZRdVJMUWJ6djlVWUg5T1lmUGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwlcqAwQA
wldyMAwDBADCV4MDBAPCV4AwDQYJKoZIhvcNAQELBQADggEBAAx9po0om6XFb0EY
F6MW8Bt78MoeplC2MxhpjXskJQyrkL3P1Ye2G90F2Vy74S7bEY/SR0Q53eQTHQ4g
tEkNn/FnPCwCV68LHdJ8GvbSIgBGS3PKPoIjcePF6R9xaUrIFlp3sK2XdRnaw7WS
6nuynOqj84rWl+YjvVVf+vOlMC2yJ+Mbs8cbwAnnEH4bG9Org4FSTqnAJ7LOmemV
3wALpW4NBm6+82bHHtoY0urEmZhidfoQ1WjtDuOeAZP9MgGd6SeH/zSiUSfHHanQ
jae6o8pr2o4LuJCIuq6B42bbiHk0QuLWlhR5MmymqQSoPR4f92vE1MeYjGlO6FHk
whPGOFM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org