Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kdZecSKIzC58Jv8zt75niIRbTmI.roa
File: kdZecSKIzC58Jv8zt75niIRbTmI.roa (raw, json)
Hash identifier: jMPYxDoHDo2K8fblkoXbt6Fs7ZwYN5o5qTdM3VnjfqA=
Subject key identifier: 91:D6:5E:71:22:88:CC:2E:7C:26:FF:33:B7:BE:67:88:84:5B:4E:62
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0181D83F3175213708223DAE61110E4B1A1A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kdZecSKIzC58Jv8zt75niIRbTmI.roa
Signing time: Thu 07 Jul 2022 10:40:28 +0000
ROA not before: Thu 07 Jul 2022 10:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:3f:31:75:21:37:08:22:3d:ae:61:11:0e:4b:1a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 7 10:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91d65e712288cc2e7c26ff33b7be6788845b4e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:37:36:e7:b0:78:e0:fe:25:27:b3:15:06:19:
6c:f1:cf:38:04:af:a7:96:14:6b:ff:a0:e0:46:72:
bb:cc:e8:11:b8:be:6c:aa:dd:1d:2f:8f:8e:f4:09:
6c:24:ef:a7:4f:77:10:55:06:84:d5:64:f3:64:7e:
09:7f:7f:d1:2f:6c:e4:07:70:62:6a:54:cc:f4:2f:
37:e7:2e:83:4a:39:8e:2b:ba:29:bd:fc:51:9a:9c:
36:2f:66:37:1c:de:c5:1e:f7:cb:8c:7d:25:18:5e:
1f:6a:14:3f:3c:1c:f9:5b:f9:b3:5a:28:24:fa:2f:
cf:36:5a:4e:e0:a6:82:10:b4:e8:b8:ec:f8:54:89:
4f:dd:4e:7f:cc:bc:6d:1d:26:cc:ef:2b:6a:92:25:
71:1f:c0:ed:7b:1a:63:af:64:43:8b:61:3b:a6:b4:
4a:db:c0:86:26:33:ea:55:19:7d:27:fa:ac:76:fd:
a6:fb:61:50:b8:02:ac:39:ab:56:c1:23:90:53:86:
ef:33:42:fa:8f:ca:d3:85:42:2b:1e:ff:7e:4a:97:
43:4a:43:52:93:34:95:41:90:75:30:ad:c3:cc:2e:
f8:56:d7:fd:97:17:36:2d:ad:20:5a:e9:75:63:db:
69:74:d1:f0:10:99:0a:63:3d:77:d1:66:81:77:d7:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D6:5E:71:22:88:CC:2E:7C:26:FF:33:B7:BE:67:88:84:5B:4E:62
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kdZecSKIzC58Jv8zt75niIRbTmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
193.124.41.0/24
193.124.93.0/24
193.124.125.0/24
194.87.56.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b8:31:1e:94:99:b5:e4:b9:27:13:da:fb:3f:03:f1:d4:8f:
e1:6e:a4:da:1b:1a:2b:e5:17:04:95:91:f6:69:28:ca:93:4b:
9c:db:89:06:18:d8:0f:47:ca:87:24:cb:1a:65:09:ef:a5:77:
03:25:97:c4:0c:73:fb:13:c2:da:eb:22:58:59:f7:82:3f:c0:
bc:aa:9d:de:b2:3e:cd:35:ce:5f:0c:f1:37:9e:80:fd:d2:ef:
4b:e1:d5:1f:37:3c:3a:02:29:12:1a:c2:91:a1:cc:79:c0:39:
88:ac:af:e9:c8:9f:82:46:e3:73:a4:68:82:92:f4:b1:98:92:
ea:be:86:54:33:80:5f:14:4c:73:f6:c8:d3:65:a6:42:a9:ff:
66:81:6b:ba:fb:c1:86:7f:dc:be:44:bc:cd:de:09:ac:e3:fe:
70:c7:7e:5b:73:59:2b:f7:18:07:8b:e1:87:40:c0:fa:8c:04:
ab:b0:be:b3:cd:58:02:09:7a:90:a6:b1:62:01:ab:55:76:c6:
b7:2f:3c:3b:66:02:7c:e1:d7:94:d2:90:16:d0:d8:b6:03:ef:
a9:91:65:8c:8f:e8:5d:c6:28:d5:4d:d7:7a:19:da:ee:38:15:
b6:c2:ff:55:7f:57:2c:cc:aa:67:2b:aa:1d:42:07:a4:f3:52:
89:5d:97:4c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYHYPzF1ITcIIj2uYREOSxoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwNzA3MTA0MDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWQ2NWU3MTIyODhjYzJlN2MyNmZmMzNiN2JlNjc4ODg0NWI0ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDc257B44P4lJ7MVBhls8c84BK+n
lhRr/6DgRnK7zOgRuL5sqt0dL4+O9AlsJO+nT3cQVQaE1WTzZH4Jf3/RL2zkB3Bi
alTM9C835y6DSjmOK7opvfxRmpw2L2Y3HN7FHvfLjH0lGF4fahQ/PBz5W/mzWigk
+i/PNlpO4KaCELTouOz4VIlP3U5/zLxtHSbM7ytqkiVxH8Dtexpjr2RDi2E7prRK
28CGJjPqVRl9J/qsdv2m+2FQuAKsOatWwSOQU4bvM0L6j8rThUIrHv9+SpdDSkNS
kzSVQZB1MK3DzC74Vtf9lxc2La0gWul1Y9tpdNHwEJkKYz130WaBd9fpjQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJHWXnEiiMwufCb/M7e+Z4iEW05iMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEva2RaZWNTS0l6QzU4SnY4enQ3NW5pSVJiVG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwXwEAwQA
wXwpAwQAwXxdAwQAwXx9AwQAwlc4MA0GCSqGSIb3DQEBCwUAA4IBAQBWuDEelJm1
5LknE9r7PwPx1I/hbqTaGxor5RcElZH2aSjKk0uc24kGGNgPR8qHJMsaZQnvpXcD
JZfEDHP7E8La6yJYWfeCP8C8qp3esj7NNc5fDPE3noD90u9L4dUfNzw6AikSGsKR
ocx5wDmIrK/pyJ+CRuNzpGiCkvSxmJLqvoZUM4BfFExz9sjTZaZCqf9mgWu6+8GG
f9y+RLzN3gms4/5wx35bc1kr9xgHi+GHQMD6jASrsL6zzVgCCXqQprFiAatVdsa3
Lzw7ZgJ84deU0pAW0Ni2A++pkWWMj+hdxijVTdd6GdruOBW2wv9Vf1cszKpnK6od
Qgek81KJXZdM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org