Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l8eOSIuNevBY0udIu451oOpb67g.roa
File: l8eOSIuNevBY0udIu451oOpb67g.roa (raw, json)
Hash identifier: P+mdp4944zfdb4MvgA+JhqN5Y8miYlduXVEubr5bZNg=
Subject key identifier: 97:C7:8E:48:8B:8D:7A:F0:58:D2:E7:48:BB:8E:75:A0:EA:5B:EB:B8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E1A7994
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l8eOSIuNevBY0udIu451oOpb67g.roa
Signing time: Sat 01 Jan 2022 01:58:17 +0000
ROA not before: Sat 01 Jan 2022 01:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51659
IP address blocks: 194.135.38.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
194.87.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236616084 (0xe1a7994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97c78e488b8d7af058d2e748bb8e75a0ea5bebb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:68:4a:64:1b:74:cb:b8:ef:50:ab:ad:63:
38:5c:4a:c9:3d:6d:55:8d:1d:4e:3e:a9:18:6e:21:
6b:e8:67:7e:42:69:e8:97:57:73:e3:20:fb:d7:2e:
ba:06:75:eb:20:e1:00:9a:fe:4c:12:8e:ac:17:a4:
51:11:3d:3a:44:7d:e8:d5:b4:20:52:d0:58:c3:7b:
2c:81:68:02:e3:41:af:31:75:31:43:b0:6a:37:1a:
6c:1e:50:8e:04:50:f1:c3:0d:56:5a:b4:f6:bf:eb:
c6:5d:99:2a:a1:92:9c:48:ce:44:b6:d6:aa:24:f8:
9e:b5:07:33:df:cf:98:f0:c3:af:df:78:88:a0:c6:
ac:fc:a9:cb:82:c4:3e:6f:d7:89:62:4d:e5:c4:00:
75:4a:f9:8e:51:fd:72:f8:7d:4e:3b:02:e8:d4:c8:
f3:09:f5:48:f5:8c:de:73:a8:a7:ed:7c:ca:32:b9:
a9:ae:07:ea:20:a1:a2:f4:19:23:d9:7b:ab:d3:38:
a1:3b:7d:28:45:6f:7d:65:41:96:5b:f9:40:3e:5c:
e7:9d:3a:e9:13:95:0d:7a:b2:04:07:1c:c2:78:a7:
2d:ef:5d:f9:64:4a:1c:a7:f5:70:8c:f7:2b:42:e7:
e0:cd:94:e6:e6:4e:bc:3d:d3:75:c1:3f:ba:07:18:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:8E:48:8B:8D:7A:F0:58:D2:E7:48:BB:8E:75:A0:EA:5B:EB:B8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l8eOSIuNevBY0udIu451oOpb67g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.196.0/23
194.135.38.0/24
195.133.9.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5b:6c:9a:e9:ad:e3:e9:7d:b2:20:45:f8:bd:de:82:3b:91:
95:19:b5:75:b3:21:25:87:e1:e4:90:be:13:69:86:a0:66:69:
e1:9e:2c:0d:41:2a:a0:3d:6b:df:0c:c4:f9:d4:c7:3e:5e:51:
95:a0:75:db:ab:0f:5e:ba:5f:53:96:70:a2:85:92:cb:11:bb:
32:c1:39:5d:b0:d9:2b:37:93:07:2e:61:81:92:21:3b:df:fe:
b9:73:85:d6:90:65:e9:70:96:95:50:02:8c:b2:4f:39:4b:94:
5b:4e:48:16:0d:96:f9:5b:0f:96:39:88:3e:56:e4:55:67:50:
98:a4:90:81:fa:a1:49:f2:4a:b4:5c:14:07:0e:4c:da:38:a4:
f4:29:0c:bc:7c:1a:eb:fe:ba:9a:be:95:10:31:72:16:17:f4:
55:76:9a:0b:5e:c1:08:a9:98:72:63:bb:a4:66:00:4a:01:cc:
2f:69:ab:e0:8f:fa:80:1e:d2:3c:24:e6:2d:1f:d1:e2:df:12:
e1:97:ce:6d:42:5c:6f:2d:50:4c:6b:91:2e:a8:84:c8:86:34:
0a:52:04:52:8f:84:f0:bb:63:7b:b9:f5:7e:d1:76:8b:6d:8b:
e8:6f:7e:c8:a7:7c:b2:0b:15:ec:8e:8e:c3:cb:b2:dd:8b:ed:
5a:3a:42:25
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEDhp5lDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDEw
MTAxNTgxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTdjNzhlNDg4Yjhk
N2FmMDU4ZDJlNzQ4YmI4ZTc1YTBlYTViZWJiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOWaEpkG3TLuO9Qq61jOFxKyT1tVY0dTj6pGG4ha+hnfkJp
6JdXc+Mg+9cuugZ16yDhAJr+TBKOrBekURE9OkR96NW0IFLQWMN7LIFoAuNBrzF1
MUOwajcabB5QjgRQ8cMNVlq09r/rxl2ZKqGSnEjORLbWqiT4nrUHM9/PmPDDr994
iKDGrPypy4LEPm/XiWJN5cQAdUr5jlH9cvh9TjsC6NTI8wn1SPWM3nOop+18yjK5
qa4H6iChovQZI9l7q9M4oTt9KEVvfWVBllv5QD5c55066ROVDXqyBAccwninLe9d
+WRKHKf1cIz3K0Ln4M2U5uZOvD3TdcE/ugcYer0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSXx45Ii4168FjS50i7jnWg6lvruDAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L2w4ZU9TSXVOZXZCWTB1ZEl1NDUxb09wYjY3Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAcJXxAMEAMKHJgMEAMOFCTANBgkq
hkiG9w0BAQsFAAOCAQEAGVtsmumt4+l9siBF+L3egjuRlRm1dbMhJYfh5JC+E2mG
oGZp4Z4sDUEqoD1r3wzE+dTHPl5RlaB126sPXrpfU5ZwooWSyxG7MsE5XbDZKzeT
By5hgZIhO9/+uXOF1pBl6XCWlVACjLJPOUuUW05IFg2W+VsPljmIPlbkVWdQmKSQ
gfqhSfJKtFwUBw5M2jik9CkMvHwa6/66mr6VEDFyFhf0VXaaC17BCKmYcmO7pGYA
SgHML2mr4I/6gB7SPCTmLR/R4t8S4ZfObUJcby1QTGuRLqiEyIY0ClIEUo+E8Ltj
e7n1ftF2i22L6G9+yKd8sgsV7I6Ow8uy3YvtWjpCJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:10 2023 by rpki-client on console-fra.rpki-client.org