Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jAxOeiqqrI6dmOAFWnXCi-wwWYU.roa
File: jAxOeiqqrI6dmOAFWnXCi-wwWYU.roa (raw, json)
Hash identifier: DJL/Mx5nfk6X7BFlbEpw/rlYz/agQEEzVo+x1uORB0Q=
Subject key identifier: 8C:0C:4E:7A:2A:AA:AC:8E:9D:98:E0:05:5A:75:C2:8B:EC:30:59:85
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184F0E52BBD6ACEE65B864B17276DBB4AE9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jAxOeiqqrI6dmOAFWnXCi-wwWYU.roa
Signing time: Thu 08 Dec 2022 08:41:01 +0000
ROA not before: Thu 08 Dec 2022 08:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:e5:2b:bd:6a:ce:e6:5b:86:4b:17:27:6d:bb:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 8 08:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c0c4e7a2aaaac8e9d98e0055a75c28bec305985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:ef:7b:52:22:5d:2e:dd:0f:e2:f5:45:0e:
43:f2:85:42:aa:89:67:19:b0:16:57:3e:3c:47:69:
cb:83:d2:8c:59:bb:a4:d9:85:bd:c2:16:58:99:61:
76:6a:9a:e0:1b:75:e4:fa:d0:4f:a3:d8:c3:64:4e:
89:12:53:0c:63:c2:a7:6d:ab:ec:6d:9a:39:fc:63:
56:a7:bf:61:c8:b0:2d:0d:c6:42:ee:58:78:18:09:
9e:af:f4:12:a3:db:39:32:c5:c5:c8:f0:d2:0d:e8:
50:4d:2b:82:46:30:5f:b9:7d:10:06:19:bd:40:0b:
67:96:76:2a:ce:16:de:0e:7b:47:8c:90:4a:31:9b:
58:6d:87:0d:91:31:ef:61:c8:af:18:78:01:9f:cb:
2e:b4:aa:d7:6a:ea:43:34:61:64:fc:c1:88:a1:7b:
cd:bd:a2:89:49:35:2c:ba:dc:32:21:dc:01:f8:0d:
c9:67:51:82:ba:ee:9b:ac:97:e0:83:53:f9:8b:db:
f4:08:79:49:cd:b2:9d:0a:07:41:3f:39:02:81:50:
42:33:ae:66:cd:29:a4:a1:ac:05:6e:c1:f9:36:0e:
bd:e1:62:d1:58:fc:20:86:f2:c0:7d:42:33:77:37:
8b:3c:62:44:8d:f7:23:0b:8f:3a:9a:56:f5:8f:82:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:4E:7A:2A:AA:AC:8E:9D:98:E0:05:5A:75:C2:8B:EC:30:59:85
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jAxOeiqqrI6dmOAFWnXCi-wwWYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0-62.76.226.255
192.124.173.0/24
192.124.180.0/24
192.124.183.0/24
193.124.18.0/24
193.124.45.0/24
193.124.90.0/24
193.124.133.0/24
193.124.200.0/24
194.58.40.0/24
194.58.46.0/24
194.58.59.0/24
194.87.122.0/24
194.87.124.0/23
194.87.170.0/24
194.87.200.0/24
194.87.205.0/24
194.87.226.0/24
194.87.233.0/24
194.87.252.0/24
195.133.76.0/24
195.133.193.0/24
212.192.5.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:67:6d:36:f9:28:ff:ed:2f:a3:cb:9d:06:1c:0e:ff:94:fd:
f9:2e:52:97:da:5b:04:0d:e5:20:90:ee:56:fd:4f:32:46:3b:
f2:01:c9:17:4f:f5:5f:9d:7e:63:e0:5a:cc:6c:78:40:27:77:
27:ae:70:2a:a9:9d:ae:bf:32:78:2a:4c:c4:83:8e:6f:0b:fe:
32:9b:e1:75:9c:f3:d9:2b:9d:c7:cd:67:0d:e5:8e:93:96:bd:
f3:b4:07:fc:6e:29:b0:36:bc:eb:23:98:a4:1e:91:2b:55:09:
e8:ec:0c:b5:c4:34:62:e5:47:c9:c7:0b:b1:27:33:40:a6:0a:
47:15:75:a7:b4:40:b1:43:ef:77:0d:34:04:b2:af:6e:f0:4b:
4f:68:32:d5:29:16:74:ec:09:f8:72:b7:e8:0a:14:b3:ae:38:
0a:3c:74:d3:64:44:af:31:ad:ae:9d:84:8e:9b:07:5a:c3:ee:
59:3d:6a:5c:ef:fd:c5:3c:2f:f2:f5:38:b0:70:b6:dc:c5:b5:
c8:9d:9e:d6:b1:db:fb:6a:f4:54:92:fa:9c:9d:ee:f8:56:4d:
e6:df:7f:f2:c5:d4:a6:d6:cd:fc:d6:24:d5:7d:29:fe:e7:6d:
09:cc:0b:c3:b9:22:34:f0:1b:42:d7:50:fb:34:80:08:48:be:
4c:b1:bc:66
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYTw5Su9as7mW4ZLFydtu0rpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjA4MDg0MTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzBjNGU3YTJhYWFhYzhlOWQ5OGUwMDU1YTc1YzI4YmVjMzA1OTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd/ve1IiXS7dD+L1RQ5D8oVCqoln
GbAWVz48R2nLg9KMWbuk2YW9whZYmWF2aprgG3Xk+tBPo9jDZE6JElMMY8Knbavs
bZo5/GNWp79hyLAtDcZC7lh4GAmer/QSo9s5MsXFyPDSDehQTSuCRjBfuX0QBhm9
QAtnlnYqzhbeDntHjJBKMZtYbYcNkTHvYcivGHgBn8sutKrXaupDNGFk/MGIoXvN
vaKJSTUsutwyIdwB+A3JZ1GCuu6brJfgg1P5i9v0CHlJzbKdCgdBPzkCgVBCM65m
zSmkoawFbsH5Ng694WLRWPwghvLAfUIzdzeLPGJEjfcjC486mlb1j4KpAQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFIwMTnoqqqyOnZjgBVp1wovsMFmFMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvakF4T2VpcXFySTZkbU9BRlduWENpLXd3V1lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgwDAME
AD5M4QMEAD5M4gMEAMB8rQMEAMB8tAMEAMB8twMEAMF8EgMEAMF8LQMEAMF8WgME
AMF8hQMEAMF8yAMEAMI6KAMEAMI6LgMEAMI6OwMEAMJXegMEAcJXfAMEAMJXqgME
AMJXyAMEAMJXzQMEAMJX4gMEAMJX6QMEAMJX/AMEAMOFTAMEAMOFwQMEANTABQME
ANTACTANBgkqhkiG9w0BAQsFAAOCAQEATmdtNvko/+0vo8udBhwO/5T9+S5Sl9pb
BA3lIJDuVv1PMkY78gHJF0/1X51+Y+BazGx4QCd3J65wKqmdrr8yeCpMxIOObwv+
MpvhdZzz2Sudx81nDeWOk5a987QH/G4psDa86yOYpB6RK1UJ6OwMtcQ0YuVHyccL
sSczQKYKRxV1p7RAsUPvdw00BLKvbvBLT2gy1SkWdOwJ+HK36AoUs644Cjx002RE
rzGtrp2EjpsHWsPuWT1qXO/9xTwv8vU4sHC23MW1yJ2e1rHb+2r0VJL6nJ3u+FZN
5t9/8sXUptbN/NYk1X0p/udtCcwLw7kiNPAbQtdQ+zSACEi+TLG8Zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:24 2024 by rpki-client on console-fra.rpki-client.org