Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ty7DqD73Bppg1Ct0bbBco-tmg1M.roa
File: ty7DqD73Bppg1Ct0bbBco-tmg1M.roa (raw, json)
Hash identifier: mt0Ej3df5IEBOlEonamiixhf/mEBE939S27PGXvvObA=
Subject key identifier: B7:2E:C3:A8:3E:F7:06:9A:60:D4:2B:74:6D:B0:5C:A3:EB:66:83:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184C8F2C64FD5F3DC771EFB120778B7D41E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ty7DqD73Bppg1Ct0bbBco-tmg1M.roa
Signing time: Wed 30 Nov 2022 14:31:04 +0000
ROA not before: Wed 30 Nov 2022 14:31:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:f2:c6:4f:d5:f3:dc:77:1e:fb:12:07:78:b7:d4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 30 14:31:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b72ec3a83ef7069a60d42b746db05ca3eb668353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:6d:12:17:1c:f8:69:34:ba:08:16:b5:fc:
af:90:b6:24:79:c0:6f:4c:26:07:32:55:91:ee:0c:
31:3c:c1:25:67:b7:c1:42:b4:22:86:ba:90:ff:9b:
8b:d9:94:09:de:0b:5a:6d:a7:1c:35:42:90:67:76:
97:78:08:4e:e2:6a:f5:0c:0f:e7:b8:41:73:2e:46:
0f:52:df:1b:e4:15:1a:b2:e4:1a:3f:c9:cd:54:1c:
0d:a1:d2:46:de:c7:15:5f:34:22:24:f8:9d:1e:f8:
70:64:bc:03:a0:38:5e:d1:92:7e:36:a0:8e:ee:6f:
24:ca:14:c5:72:52:16:26:94:e3:dd:5e:c5:a5:f1:
33:9e:d6:da:48:98:c3:d1:fd:f6:2c:47:36:59:90:
91:0f:6c:30:77:fc:1e:67:11:45:32:8f:51:56:a5:
34:47:bb:cd:d0:0d:4d:3d:87:23:d3:75:c2:7f:87:
03:fd:8a:c2:78:6f:da:34:50:10:ee:82:39:7e:b0:
0c:de:1c:da:19:4c:17:87:ae:a6:15:b7:18:c1:e6:
45:25:89:34:f4:b8:07:64:ee:bf:01:8e:f1:37:6e:
94:2b:2e:82:1b:74:74:8b:13:de:48:ec:28:6e:9e:
af:2e:6a:18:af:4a:61:c2:88:cd:4e:db:f8:b8:53:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:C3:A8:3E:F7:06:9A:60:D4:2B:74:6D:B0:5C:A3:EB:66:83:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ty7DqD73Bppg1Ct0bbBco-tmg1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
194.87.35.0/24
194.87.149.0/24
194.87.161.0/24
194.87.227.0/24
195.133.39.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e5:5a:c9:97:1b:0a:ef:6e:e6:25:e9:99:07:4d:76:21:f5:
d7:63:c0:52:75:e9:c6:91:53:0c:67:a7:14:88:6a:75:4b:a6:
6b:51:4e:84:af:e5:80:44:a9:37:fa:ee:c2:2b:d6:fb:f9:cf:
e3:d4:74:15:8b:0d:ce:f5:85:10:2b:db:eb:3d:6d:28:85:eb:
b9:c2:cf:ac:b3:c4:ee:11:95:0c:7b:7c:0b:74:70:04:8b:25:
e1:d9:a8:ce:53:18:75:0e:6f:7e:c7:3f:72:92:d9:f0:d9:60:
0a:71:53:a7:d1:67:5c:96:c8:70:44:f0:92:22:1b:33:a9:4e:
ba:11:bd:c8:6b:6a:ea:89:01:12:2f:fd:41:19:72:95:54:5f:
10:c8:02:15:cb:47:a6:b5:f7:80:fa:0a:0a:97:f4:17:13:63:
3b:84:7f:02:e5:f6:18:6a:3f:05:da:14:0a:06:1a:24:22:fb:
c0:56:00:21:6e:1b:fc:35:15:17:79:65:aa:25:d1:c1:00:c8:
bd:67:80:c0:b9:e4:fd:d7:cf:b6:b0:d0:57:74:09:25:47:74:
3c:f5:d1:38:fd:b4:12:08:2e:0a:e9:92:17:38:63:35:07:04:
58:7d:ea:5f:3c:0a:05:36:28:78:03:cb:f8:77:97:dc:67:5e:
28:fa:6e:3c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYTI8sZP1fPcdx77Egd4t9QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTMwMTQzMTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzJlYzNhODNlZjcwNjlhNjBkNDJiNzQ2ZGIwNWNhM2ViNjY4MzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HptEhcc+Gk0uggWtfyvkLYkecBv
TCYHMlWR7gwxPMElZ7fBQrQihrqQ/5uL2ZQJ3gtabaccNUKQZ3aXeAhO4mr1DA/n
uEFzLkYPUt8b5BUasuQaP8nNVBwNodJG3scVXzQiJPidHvhwZLwDoDhe0ZJ+NqCO
7m8kyhTFclIWJpTj3V7FpfEzntbaSJjD0f32LEc2WZCRD2wwd/weZxFFMo9RVqU0
R7vN0A1NPYcj03XCf4cD/YrCeG/aNFAQ7oI5frAM3hzaGUwXh66mFbcYweZFJYk0
9LgHZO6/AY7xN26UKy6CG3R0ixPeSOwobp6vLmoYr0phwojNTtv4uFPwhQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFLcuw6g+9waaYNQrdG2wXKPrZoNTMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdHk3RHFENzNCcHBnMUN0MGJiQmNvLXRtZzFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAwlX4AwQA
wlX6AwQAwlcjAwQAwleVAwQAwlehAwQAwlfjAwQAw4UnAwQC1MDYAwQC1MD0AwQA
1MEdMA0GCSqGSIb3DQEBCwUAA4IBAQAK5VrJlxsK727mJemZB012IfXXY8BSdenG
kVMMZ6cUiGp1S6ZrUU6Er+WARKk3+u7CK9b7+c/j1HQViw3O9YUQK9vrPW0oheu5
ws+ss8TuEZUMe3wLdHAEiyXh2ajOUxh1Dm9+xz9yktnw2WAKcVOn0WdclshwRPCS
IhszqU66Eb3Ia2rqiQESL/1BGXKVVF8QyAIVy0emtfeA+goKl/QXE2M7hH8C5fYY
aj8F2hQKBhokIvvAVgAhbhv8NRUXeWWqJdHBAMi9Z4DAueT918+2sNBXdAklR3Q8
9dE4/bQSCC4K6ZIXOGM1BwRYfepfPAoFNih4A8v4d5fcZ14o+m48
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:28 2024 by rpki-client on console-fra.rpki-client.org