Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h7zV0k7QKoQ0hypBSr0uLauRxuo.roa
File: h7zV0k7QKoQ0hypBSr0uLauRxuo.roa (raw, json)
Hash identifier: C7xF97ERAgixyU8GY2KB87VSxb9BqOVt2Y2HS6U1QJE=
Subject key identifier: 87:BC:D5:D2:4E:D0:2A:84:34:87:2A:41:4A:BD:2E:2D:AB:91:C6:EA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01842E50FC33D6859CD4398857B3004D093F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h7zV0k7QKoQ0hypBSr0uLauRxuo.roa
Signing time: Mon 31 Oct 2022 13:52:50 +0000
ROA not before: Mon 31 Oct 2022 13:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.200.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
194.87.223.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
195.58.56.0/23 maxlen: 24
195.58.54.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:50:fc:33:d6:85:9c:d4:39:88:57:b3:00:4d:09:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 31 13:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87bcd5d24ed02a8434872a414abd2e2dab91c6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:a0:82:ce:ed:fb:1c:cf:7d:76:e3:68:31:
03:15:a6:8d:15:ba:96:ff:ce:1a:93:41:a1:a8:37:
a5:74:15:9b:e2:40:cc:3e:30:73:f8:97:8b:84:a4:
42:7f:00:f1:e2:24:e7:f7:50:af:bd:bd:2f:92:5f:
f6:d3:40:c1:c6:ac:ae:16:98:e3:4b:7d:78:2e:a6:
8c:2c:8f:3c:30:a0:65:53:5c:3e:79:66:5e:f1:79:
ca:d3:8a:03:a9:9e:31:4a:46:6e:d8:96:10:cf:ea:
98:bd:67:a9:80:d5:a1:09:c2:d7:67:34:fb:0f:20:
6b:ca:51:0f:ea:53:43:57:b2:d4:9f:83:f6:47:24:
17:eb:6a:ed:35:fb:0f:04:82:1a:09:6e:3a:c0:8e:
6e:eb:6d:13:93:45:88:94:5b:50:5d:d1:b5:ed:4f:
be:5a:8a:c2:ea:b6:96:00:bc:0d:c1:03:85:97:36:
f6:04:a7:bc:5c:6c:6a:72:20:dc:27:3a:72:de:63:
15:35:33:c4:f5:aa:0f:57:1f:7a:d9:02:72:b3:a8:
ba:05:52:7a:56:a9:53:70:d2:da:d1:2d:c1:0c:b9:
6d:e1:20:90:55:f1:ca:2a:44:0a:6c:38:a4:c5:04:
34:f6:31:9a:d2:e5:fd:ec:57:af:ee:b2:5d:93:f3:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:D5:D2:4E:D0:2A:84:34:87:2A:41:4A:BD:2E:2D:AB:91:C6:EA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h7zV0k7QKoQ0hypBSr0uLauRxuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0-62.76.226.255
192.124.180.0/24
192.124.183.0/24
193.124.90.0/24
193.124.133.0/24
194.87.199.0-194.87.200.255
194.87.223.0/24
194.87.226.0/24
194.87.252.0/24
195.58.54.0/24
195.58.56.0/23
195.133.193.0/24
212.192.5.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c2:8a:c2:09:f1:f7:2c:e5:54:4a:7c:bf:32:da:13:61:4c:
2a:3b:ea:c9:ce:91:c4:7f:25:df:c4:2a:43:70:74:73:61:49:
5c:6d:d4:a1:5a:fd:f3:46:f2:8e:66:a3:f7:79:75:8e:15:bb:
3a:96:f2:9f:d2:92:c7:b0:98:8d:19:89:85:5a:86:b4:bd:a2:
19:76:3b:29:0d:dd:e2:04:b7:7d:e4:a8:da:39:ca:dd:d1:3a:
f5:14:78:2c:53:66:c6:8c:64:1a:c5:b2:5a:91:ab:97:44:37:
e3:40:63:43:87:bd:f6:05:40:e1:9a:71:f1:f0:b4:4d:99:04:
c4:19:56:92:4a:09:c1:04:24:db:19:49:e8:1d:a4:07:5e:37:
9d:c3:43:8a:ff:58:77:d5:dc:96:6b:52:b3:2d:25:39:9a:93:
20:23:37:5e:f1:a7:50:d3:01:80:e2:6d:ad:85:32:f1:dd:5a:
9b:97:4e:98:65:11:93:d9:1b:80:79:2b:33:92:24:ab:17:08:
fb:d2:2e:c5:bc:2d:5d:cb:f9:a2:95:56:6e:41:ce:b6:5f:6d:
1e:d5:46:98:9c:1e:c8:7f:eb:2a:ed:b5:5e:fa:d5:c8:e1:ce:
b8:37:57:c2:ea:41:75:35:97:a6:05:f6:7e:d0:ef:52:41:d5:
7d:d6:f1:c9
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAYQuUPwz1oWc1DmIV7MATQk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDMxMTM1MjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2JjZDVkMjRlZDAyYTg0MzQ4NzJhNDE0YWJkMmUyZGFiOTFjNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvmggs7t+xzPfXbjaDEDFaaNFbqW
/84ak0GhqDeldBWb4kDMPjBz+JeLhKRCfwDx4iTn91Cvvb0vkl/200DBxqyuFpjj
S314LqaMLI88MKBlU1w+eWZe8XnK04oDqZ4xSkZu2JYQz+qYvWepgNWhCcLXZzT7
DyBrylEP6lNDV7LUn4P2RyQX62rtNfsPBIIaCW46wI5u620Tk0WIlFtQXdG17U++
WorC6raWALwNwQOFlzb2BKe8XGxqciDcJzpy3mMVNTPE9aoPVx962QJys6i6BVJ6
VqlTcNLa0S3BDLlt4SCQVfHKKkQKbDikxQQ09jGa0uX97Fev7rJdk/P6dwIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFIe81dJO0CqENIcqQUq9Li2rkcbqMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaDd6VjBrN1FLb1EwaHlwQlNyMHVMYXVSeHVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkMAwDBAA+TOED
BAA+TOIDBADAfLQDBADAfLcDBADBfFoDBADBfIUwDAMEAMJXxwMEAMJXyAMEAMJX
3wMEAMJX4gMEAMJX/AMEAMM6NgMEAcM6OAMEAMOFwQMEANTABQMEANTACTANBgkq
hkiG9w0BAQsFAAOCAQEAb8KKwgnx9yzlVEp8vzLaE2FMKjvqyc6RxH8l38QqQ3B0
c2FJXG3UoVr980byjmaj93l1jhW7Opbyn9KSx7CYjRmJhVqGtL2iGXY7KQ3d4gS3
feSo2jnK3dE69RR4LFNmxoxkGsWyWpGrl0Q340BjQ4e99gVA4Zpx8fC0TZkExBlW
kkoJwQQk2xlJ6B2kB143ncNDiv9Yd9XclmtSsy0lOZqTICM3XvGnUNMBgOJtrYUy
8d1am5dOmGURk9kbgHkrM5IkqxcI+9IuxbwtXcv5opVWbkHOtl9tHtVGmJweyH/r
Ku21XvrVyOHOuDdXwupBdTWXpgX2ftDvUkHVfdbxyQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org