Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mGWFt-DL3UlrRabJRmAe0UTuUFM.roa
File: mGWFt-DL3UlrRabJRmAe0UTuUFM.roa (raw, json)
Hash identifier: vgQI8GKFH/BiaIgmSUsHqR9U1tHnn12LyZc/NeIPtD4=
Subject key identifier: 98:65:85:B7:E0:CB:DD:49:6B:45:A6:C9:46:60:1E:D1:44:EE:50:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01837F4EE3E0F525802DBD2D247341FB2173
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mGWFt-DL3UlrRabJRmAe0UTuUFM.roa
Signing time: Tue 27 Sep 2022 14:17:00 +0000
ROA not before: Tue 27 Sep 2022 14:17:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:4e:e3:e0:f5:25:80:2d:bd:2d:24:73:41:fb:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 27 14:17:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=986585b7e0cbdd496b45a6c946601ed144ee5053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:0e:37:00:2f:9a:c4:be:fa:99:ce:07:77:
a4:4f:f6:5c:17:b4:d9:5a:a6:cf:a6:f9:72:5f:d9:
91:49:62:67:9c:63:11:b8:2b:83:8f:b1:40:72:e1:
5d:24:99:df:0a:b0:56:c3:fb:f6:96:c5:6c:ca:ff:
f9:73:ec:71:94:4b:fc:41:e0:c9:8e:b0:ae:b6:ab:
45:32:e3:82:f6:b5:0e:3f:85:34:fe:cd:37:38:05:
ac:dd:30:ac:f2:53:9e:2c:ba:ab:df:a2:27:a0:92:
48:5e:76:90:78:43:46:f4:81:7a:94:6f:82:cf:8d:
3a:6b:18:57:80:56:6b:10:60:9f:6e:fc:d5:4a:26:
8a:81:7f:7c:81:1b:64:18:a8:34:f7:35:cc:16:68:
cb:af:39:70:05:40:8b:a8:72:91:7f:b4:66:88:82:
93:32:cc:06:67:5d:af:89:29:46:ad:cb:22:09:62:
06:cd:31:79:0b:92:de:f3:cf:58:aa:6d:1d:cc:b6:
f7:07:ab:29:d3:1c:7f:ad:f1:c2:f9:7e:85:b5:38:
a0:45:59:7a:87:3a:12:8f:2b:a7:ce:d3:0e:3c:58:
ca:50:52:31:93:33:22:8d:8a:f4:ef:fc:cd:eb:a3:
2a:3f:fa:4e:30:d3:ca:db:2f:e7:84:9d:0f:32:88:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:85:B7:E0:CB:DD:49:6B:45:A6:C9:46:60:1E:D1:44:EE:50:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mGWFt-DL3UlrRabJRmAe0UTuUFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
194.87.32.0/24
194.87.35.0/24
194.87.82.0/23
194.87.149.0/24
194.87.161.0/24
194.87.163.0/24
194.87.227.0/24
195.133.15.0/24
195.133.39.0/24
212.192.11.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b2:42:78:48:5f:8e:70:d7:a2:16:15:11:f2:fb:b2:4a:94:
7b:55:e9:5b:13:25:e8:69:f6:90:e1:7d:53:09:ac:9d:8d:e6:
d3:18:74:c2:a3:8a:47:de:a5:8f:d0:b3:57:72:24:3b:36:ab:
a6:55:dd:26:07:20:bc:7c:1e:f6:dd:f3:60:7d:fb:d6:95:ec:
02:c9:dd:61:ff:d7:92:38:cf:19:11:84:92:b0:e8:76:ca:c3:
90:d1:7c:ac:e5:6b:34:f0:08:b0:8a:b7:89:72:ab:c7:b0:c4:
4e:0a:9e:87:97:2b:84:92:0e:3a:ac:0d:80:1a:3c:74:e7:09:
3b:46:e8:ff:90:ee:57:ea:3c:54:ab:73:79:bb:d7:b8:7e:c4:
78:e4:e7:a2:a9:3b:b6:18:e6:1d:c9:49:b1:c5:a1:03:49:92:
0d:e5:52:77:c9:56:c4:2e:23:73:4c:70:0d:03:8a:bf:85:b7:
87:ae:1b:9c:ee:bc:9d:a9:17:ab:27:c2:e1:ba:4e:e6:0b:b3:
f7:1b:1f:f0:32:6e:db:c1:eb:4b:3c:4b:34:ba:0a:65:ec:a1:
b9:b4:d7:a2:cf:a9:a3:be:b5:60:cc:1f:2b:2c:d5:a8:22:35:
4d:20:43:3b:53:02:20:6f:a9:67:be:75:2c:0d:01:16:20:3a:
5b:2e:06:77
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYN/TuPg9SWALb0tJHNB+yFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwOTI3MTQxNzAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODY1ODViN2UwY2JkZDQ5NmI0NWE2Yzk0NjYwMWVkMTQ0ZWU1MDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu0ONwAvmsS++pnOB3ekT/ZcF7TZ
WqbPpvlyX9mRSWJnnGMRuCuDj7FAcuFdJJnfCrBWw/v2lsVsyv/5c+xxlEv8QeDJ
jrCutqtFMuOC9rUOP4U0/s03OAWs3TCs8lOeLLqr36InoJJIXnaQeENG9IF6lG+C
z406axhXgFZrEGCfbvzVSiaKgX98gRtkGKg09zXMFmjLrzlwBUCLqHKRf7RmiIKT
MswGZ12viSlGrcsiCWIGzTF5C5Le889Yqm0dzLb3B6sp0xx/rfHC+X6FtTigRVl6
hzoSjyunztMOPFjKUFIxkzMijYr07/zN66MqP/pOMNPK2y/nhJ0PMohUkQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFJhlhbfgy91Ja0WmyUZgHtFE7lBTMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbUdXRnQtREwzVWxyUmFiSlJtQWUwVVR1VUZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAwlX4AwQA
wlX6AwQAwlcgAwQAwlcjAwQBwldSAwQAwleVAwQAwlehAwQAwlejAwQAwlfjAwQA
w4UPAwQAw4UnAwQA1MALAwQC1MDYAwQC1MD0AwQA1MEdMA0GCSqGSIb3DQEBCwUA
A4IBAQB4skJ4SF+OcNeiFhUR8vuySpR7VelbEyXoafaQ4X1TCaydjebTGHTCo4pH
3qWP0LNXciQ7NqumVd0mByC8fB723fNgffvWlewCyd1h/9eSOM8ZEYSSsOh2ysOQ
0Xys5Ws08AiwireJcqvHsMROCp6HlyuEkg46rA2AGjx05wk7Ruj/kO5X6jxUq3N5
u9e4fsR45OeiqTu2GOYdyUmxxaEDSZIN5VJ3yVbELiNzTHANA4q/hbeHrhuc7ryd
qRerJ8Lhuk7mC7P3Gx/wMm7bwetLPEs0ugpl7KG5tNeiz6mjvrVgzB8rLNWoIjVN
IEM7UwIgb6lnvnUsDQEWIDpbLgZ3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org