Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/xeC-SvQoaX3p9tfAtHxvOl_niC0.roa
File: xeC-SvQoaX3p9tfAtHxvOl_niC0.roa (raw, json)
Hash identifier: 8d4PczskOswwfD5OfclUHUC6J7FYHJZU7RwyIsUtVgg=
Subject key identifier: C5:E0:BE:4A:F4:28:69:7D:E9:F6:D7:C0:B4:7C:6F:3A:5F:E7:88:2D
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 01849998757C3C0CF2D0CBE505312C177B3D
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/xeC-SvQoaX3p9tfAtHxvOl_niC0.roa
Signing time: Mon 21 Nov 2022 09:50:16 +0000
ROA not before: Mon 21 Nov 2022 09:50:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28924
IP address blocks: 195.90.98.0/24 maxlen: 24
195.90.99.0/24 maxlen: 24
195.90.114.0/23 maxlen: 23
195.90.114.0/24 maxlen: 24
212.52.160.0/22 maxlen: 22
212.52.160.0/24 maxlen: 24
212.52.160.0/19 maxlen: 19
212.52.163.0/24 maxlen: 24
212.52.164.0/24 maxlen: 24
212.52.161.0/24 maxlen: 24
212.52.162.0/24 maxlen: 24
212.52.165.0/24 maxlen: 24
212.52.166.0/24 maxlen: 24
212.52.170.0/24 maxlen: 24
212.52.171.0/24 maxlen: 24
212.52.168.0/22 maxlen: 22
212.52.168.0/24 maxlen: 24
212.52.169.0/24 maxlen: 24
212.52.172.0/24 maxlen: 24
212.52.167.0/24 maxlen: 24
212.52.174.0/24 maxlen: 24
212.52.173.0/24 maxlen: 24
212.52.177.0/24 maxlen: 24
212.52.178.0/24 maxlen: 24
212.52.175.0/24 maxlen: 24
212.52.176.0/24 maxlen: 24
212.52.179.0/24 maxlen: 24
212.52.184.0/24 maxlen: 24
212.52.185.0/24 maxlen: 24
212.52.182.0/24 maxlen: 24
212.52.183.0/24 maxlen: 24
212.52.186.0/24 maxlen: 24
212.52.181.0/24 maxlen: 24
212.52.180.0/24 maxlen: 24
212.52.187.0/24 maxlen: 24
212.52.188.0/24 maxlen: 24
212.52.191.0/24 maxlen: 24
212.52.189.0/24 maxlen: 24
212.52.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:98:75:7c:3c:0c:f2:d0:cb:e5:05:31:2c:17:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Nov 21 09:50:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5e0be4af428697de9f6d7c0b47c6f3a5fe7882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:3e:92:8d:d4:f5:41:d2:d1:1c:7a:c8:8e:
2f:dd:8e:f7:1f:c2:ad:c6:4c:1a:a9:fa:c8:43:d8:
aa:68:19:73:61:11:6e:76:d0:5d:c2:32:6d:fa:1c:
03:0a:3f:ab:ba:f9:f3:93:f5:d2:40:8f:22:b2:d3:
fa:33:46:20:9a:2d:38:c0:25:99:9b:93:29:d1:4d:
f3:f7:64:b0:73:ae:b2:57:11:6c:aa:3d:d0:c1:96:
8d:8c:32:7d:f3:70:5d:1c:35:d3:55:29:58:c5:9d:
77:fb:f3:84:a2:c4:14:be:67:94:fd:d4:27:6e:c3:
d9:1b:a0:9a:7f:c1:5f:69:c1:b0:94:93:de:55:45:
26:64:c4:47:22:b2:f0:11:0e:06:ab:62:4e:d4:6a:
b1:32:c7:d2:32:49:07:b9:62:ce:6a:0a:2b:b5:62:
30:b5:c0:c9:c7:e5:53:bd:30:4d:eb:41:d5:fe:16:
c6:a6:d1:82:cb:9f:f2:b7:28:f0:ce:61:82:39:8f:
42:dc:ef:fe:91:58:f9:70:8d:4f:26:3e:89:9b:61:
56:c7:62:84:7c:11:c2:80:d7:e7:43:ae:41:78:4e:
ec:57:f7:cd:41:c3:13:cd:ba:6a:33:70:ca:cf:ce:
c6:45:a2:18:f5:ac:e7:9a:f9:1f:24:62:ad:d0:68:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E0:BE:4A:F4:28:69:7D:E9:F6:D7:C0:B4:7C:6F:3A:5F:E7:88:2D
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/xeC-SvQoaX3p9tfAtHxvOl_niC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/23
195.90.114.0/23
212.52.160.0/19
Signature Algorithm: sha256WithRSAEncryption
52:6e:aa:db:19:f9:4b:ec:5d:a3:21:31:94:9a:73:0c:b9:0c:
23:19:a7:eb:81:ab:b5:73:9d:06:67:00:2e:56:c1:e5:06:18:
ce:be:03:11:89:b4:87:35:8e:5c:9d:01:99:6f:17:0f:1e:37:
07:bc:f3:91:35:0d:71:15:5e:40:d0:54:d9:44:7c:58:1c:c2:
2e:21:6f:3a:3a:46:c6:88:e0:6b:f6:7b:ce:ab:b5:ac:d1:b0:
f5:1f:d2:88:6b:9b:8f:f0:90:15:14:1e:81:92:fc:c0:dc:c1:
20:78:ba:c2:d1:e4:57:1a:e0:64:fe:c8:98:1f:a5:b3:be:10:
16:8f:41:43:92:a0:07:e0:5e:16:47:e5:3a:02:43:44:4c:34:
14:26:e8:e8:c6:34:6a:f2:6f:8f:33:be:eb:a4:7d:87:75:fa:
07:a1:20:1d:ae:d3:16:e9:e9:e4:6d:39:92:2a:e1:d5:0d:29:
f9:e2:f6:c8:06:3e:f9:38:84:8a:96:66:64:5c:bf:5d:09:0f:
21:b5:38:ac:88:c8:fe:ef:76:1a:39:73:ff:fb:8b:18:52:91:
30:71:f3:41:0d:09:e5:f9:d8:89:2d:01:f1:10:44:c4:3e:3b:
ac:4c:dd:8d:a8:46:86:55:e8:91:62:91:a9:74:67:98:bf:cb:
44:07:56:19
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYSZmHV8PAzy0MvlBTEsF3s9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZThmNDFmNmIwMmI5M2Y4NWQxYTdiNDhiNDhjZmEzMjJm
MDg4ZjgwHhcNMjIxMTIxMDk1MDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWUwYmU0YWY0Mjg2OTdkZTlmNmQ3YzBiNDdjNmYzYTVmZTc4ODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3M+ko3U9UHS0Rx6yI4v3Y73H8Kt
xkwaqfrIQ9iqaBlzYRFudtBdwjJt+hwDCj+ruvnzk/XSQI8istP6M0Ygmi04wCWZ
m5Mp0U3z92Swc66yVxFsqj3QwZaNjDJ983BdHDXTVSlYxZ13+/OEosQUvmeU/dQn
bsPZG6Caf8FfacGwlJPeVUUmZMRHIrLwEQ4Gq2JO1GqxMsfSMkkHuWLOagortWIw
tcDJx+VTvTBN60HV/hbGptGCy5/ytyjwzmGCOY9C3O/+kVj5cI1PJj6Jm2FWx2KE
fBHCgNfnQ65BeE7sV/fNQcMTzbpqM3DKz87GRaIY9aznmvkfJGKt0GhVAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMXgvkr0KGl96fbXwLR8bzpf54gtMB8GA1UdIwQY
MBaAFOHo9B9rArk/hdGntItIz6Mi8Ij4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUt
NTM3YTJiMGI0ZGRhLzEveGVDLVN2UW9hWDNwOXRmQXRIeHZPbF9uaUMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUtNTM3YTJiMGI0ZGRh
LzEvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBw1piAwQB
w1pyAwQF1DSgMA0GCSqGSIb3DQEBCwUAA4IBAQBSbqrbGflL7F2jITGUmnMMuQwj
Gafrgau1c50GZwAuVsHlBhjOvgMRibSHNY5cnQGZbxcPHjcHvPORNQ1xFV5A0FTZ
RHxYHMIuIW86OkbGiOBr9nvOq7Ws0bD1H9KIa5uP8JAVFB6BkvzA3MEgeLrC0eRX
GuBk/siYH6WzvhAWj0FDkqAH4F4WR+U6AkNETDQUJujoxjRq8m+PM77rpH2HdfoH
oSAdrtMW6enkbTmSKuHVDSn54vbIBj75OISKlmZkXL9dCQ8htTisiMj+73YaOXP/
+4sYUpEwcfNBDQnl+diJLQHxEETEPjusTN2NqEaGVeiRYpGpdGeYv8tEB1YZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org