Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jrSwwUqBGK54bfr840rAHhVzCWc.roa
File: jrSwwUqBGK54bfr840rAHhVzCWc.roa (raw, json)
Hash identifier: s+x7pyIY+tOzrFKnjOnpNLMmSDV1uLpO9EqQ8hY1eEo=
Subject key identifier: 8E:B4:B0:C1:4A:81:18:AE:78:6D:FA:FC:E3:4A:C0:1E:15:73:09:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184CD681620F3A592D665BC364EAE01DEEC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jrSwwUqBGK54bfr840rAHhVzCWc.roa
Signing time: Thu 01 Dec 2022 11:17:41 +0000
ROA not before: Thu 01 Dec 2022 11:17:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:68:16:20:f3:a5:92:d6:65:bc:36:4e:ae:01:de:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 1 11:17:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8eb4b0c14a8118ae786dfafce34ac01e15730967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:3d:2d:db:67:e0:a0:a8:ec:a9:11:fc:92:
67:d7:4f:39:8e:5a:6b:f2:1b:97:b1:6e:0b:6b:f0:
de:8f:1f:ad:d4:95:32:dc:16:97:92:ec:b7:d9:e1:
80:e1:86:02:f7:9f:fd:36:fb:2e:a5:84:a0:e8:aa:
ab:8e:7e:ec:f8:b1:6f:33:4c:dc:02:0d:e7:12:f0:
1e:0f:87:ad:b9:8c:70:d0:13:7e:a0:77:03:82:0c:
2c:72:56:e5:21:51:aa:57:bd:10:03:87:da:28:b3:
8c:37:1e:38:5c:cc:d2:73:0d:f8:9b:3c:28:49:5f:
ee:cc:ef:49:b9:db:d0:85:1a:1a:82:90:f9:c3:6a:
7b:f3:17:32:ef:f5:2c:d6:eb:7f:65:d2:ef:dc:13:
5b:c8:0e:e1:1d:8d:9b:9c:37:7b:a2:1c:69:c5:51:
5d:3e:24:d9:e3:eb:ae:07:d7:d1:1a:87:fc:12:7d:
0f:d3:af:e2:b3:36:e1:69:90:a6:ae:0a:b0:f7:4e:
98:06:2b:66:05:06:0d:a4:df:5b:c0:ed:93:54:3f:
1b:d1:63:08:28:b5:76:31:61:e7:e3:cc:b8:55:7d:
bc:5b:e1:43:65:58:37:bd:f6:4d:24:2c:2d:5c:88:
2d:f4:8c:36:32:d2:64:1d:f6:23:07:e9:58:af:b2:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:B0:C1:4A:81:18:AE:78:6D:FA:FC:E3:4A:C0:1E:15:73:09:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jrSwwUqBGK54bfr840rAHhVzCWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
194.87.35.0/24
194.87.227.0/24
195.133.39.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
87:18:6c:17:63:ee:df:d7:5b:8d:e0:a8:a9:7c:96:81:33:9a:
ef:cd:62:c4:b9:ab:97:bb:54:41:71:dc:30:15:c4:6b:e9:06:
5f:46:40:71:5e:29:05:01:c1:76:5c:a8:a3:5c:98:7f:00:b8:
47:20:10:73:3d:31:8b:19:fa:c9:25:b5:a0:bf:51:9d:52:17:
ba:d4:9e:2a:32:cc:0e:62:79:35:c0:d8:bc:0d:e9:d4:48:c6:
bf:ae:bd:b3:9d:4b:0c:a0:d0:36:e8:10:a7:26:3b:a2:04:ed:
64:8d:f5:b2:ec:af:ef:80:92:e8:d1:c6:93:14:de:66:76:fe:
dd:f4:d6:df:0e:f4:b3:fa:3e:7c:1b:05:a2:10:2c:ea:e7:63:
32:a1:42:88:ce:d4:fd:16:68:87:34:c7:6c:78:a5:38:28:5c:
ac:5e:35:c0:12:92:85:99:53:f8:52:7b:be:1a:d9:a0:29:60:
d7:2a:11:a4:8a:12:43:26:c5:09:10:52:7d:0b:08:64:26:1e:
20:63:de:50:8e:23:cc:0c:63:1e:2d:90:0c:9b:51:21:c1:a9:
a6:20:e5:aa:39:be:ec:07:b2:b3:a8:b5:be:24:31:ca:1a:cb:
f3:31:6a:a2:91:f6:e7:ef:c6:a1:56:94:7d:a3:3f:df:08:7f:
ac:a3:d0:29
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYTNaBYg86WS1mW8Nk6uAd7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjAxMTExNzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWI0YjBjMTRhODExOGFlNzg2ZGZhZmNlMzRhYzAxZTE1NzMwOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHA9Ldtn4KCo7KkR/JJn1085jlpr
8huXsW4La/Dejx+t1JUy3BaXkuy32eGA4YYC95/9NvsupYSg6Kqrjn7s+LFvM0zc
Ag3nEvAeD4etuYxw0BN+oHcDggwsclblIVGqV70QA4faKLOMNx44XMzScw34mzwo
SV/uzO9JudvQhRoagpD5w2p78xcy7/Us1ut/ZdLv3BNbyA7hHY2bnDd7ohxpxVFd
PiTZ4+uuB9fRGof8En0P06/iszbhaZCmrgqw906YBitmBQYNpN9bwO2TVD8b0WMI
KLV2MWHn48y4VX28W+FDZVg3vfZNJCwtXIgt9Iw2MtJkHfYjB+lYr7IXbQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFI60sMFKgRiueG36/ONKwB4VcwlnMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvanJTd3dVcUJHSzU0YmZyODQwckFIaFZ6Q1djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAwlX4AwQA
wlX6AwQAwlcjAwQAwlfjAwQAw4UnAwQC1MDYAwQC1MD0AwQA1MEdMA0GCSqGSIb3
DQEBCwUAA4IBAQCHGGwXY+7f11uN4KipfJaBM5rvzWLEuauXu1RBcdwwFcRr6QZf
RkBxXikFAcF2XKijXJh/ALhHIBBzPTGLGfrJJbWgv1GdUhe61J4qMswOYnk1wNi8
DenUSMa/rr2znUsMoNA26BCnJjuiBO1kjfWy7K/vgJLo0caTFN5mdv7d9NbfDvSz
+j58GwWiECzq52MyoUKIztT9FmiHNMdseKU4KFysXjXAEpKFmVP4Unu+GtmgKWDX
KhGkihJDJsUJEFJ9CwhkJh4gY95QjiPMDGMeLZAMm1EhwammIOWqOb7sB7KzqLW+
JDHKGsvzMWqikfbn78ahVpR9oz/fCH+so9Ap
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:10 2023 by rpki-client on console-fra.rpki-client.org