Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0QV4D1r7iSfVTKoFZ4-dUKaEYVo.roa
File: 0QV4D1r7iSfVTKoFZ4-dUKaEYVo.roa (raw, json)
Hash identifier: FhihxOwJdo4Z6v+WA9IJ4MbNP5UTEUOrcIDwAtED+7Q=
Subject key identifier: D1:05:78:0F:5A:FB:89:27:D5:4C:AA:05:67:8F:9D:50:A6:84:61:5A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183B91D25E74F958E407F09DF95DD9E9272
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0QV4D1r7iSfVTKoFZ4-dUKaEYVo.roa
Signing time: Sat 08 Oct 2022 19:40:38 +0000
ROA not before: Sat 08 Oct 2022 19:40:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
195.133.12.0/22 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.87.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b9:1d:25:e7:4f:95:8e:40:7f:09:df:95:dd:9e:92:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 8 19:40:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d105780f5afb8927d54caa05678f9d50a684615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:60:bb:e3:0e:27:7f:4d:c5:e9:f2:b2:a7:
be:0c:91:c0:24:3b:a0:97:eb:e1:5f:8f:76:71:65:
fd:68:92:61:a1:6d:31:33:29:94:b9:3a:85:d7:d5:
5a:08:7f:90:1f:ed:24:f1:db:60:8d:f6:57:d5:fd:
b8:b9:03:09:08:7a:4f:c2:4e:87:95:81:30:4c:22:
4c:ac:58:81:be:d4:dc:f5:4e:90:b0:31:47:a8:8b:
b2:e3:fa:9a:49:62:f1:1f:a9:57:7d:81:3f:3c:68:
13:cf:20:62:37:5d:1a:96:9a:bb:22:b6:03:7b:ca:
bc:6e:64:b8:a0:cd:e8:d6:0e:e7:1a:8f:99:80:a2:
97:d3:4b:32:6d:48:54:ad:be:59:4b:2b:a9:9d:cf:
53:ef:51:4d:82:4f:2b:e4:be:d9:a5:25:09:a6:23:
5d:f5:fc:be:1b:52:48:0a:b4:11:7a:b7:8a:ca:17:
d2:76:ef:a8:e0:46:43:ba:e6:34:cb:50:54:18:74:
c2:6e:ed:b9:c2:f6:7f:91:18:c0:27:12:13:fc:48:
43:e0:b1:7b:bd:06:aa:d5:d6:eb:98:24:f9:9d:70:
5b:9a:37:d3:0d:91:dd:77:51:f4:4d:5c:03:d1:63:
27:bf:de:8f:56:91:5e:8c:a2:99:d5:2e:23:b9:56:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:05:78:0F:5A:FB:89:27:D5:4C:AA:05:67:8F:9D:50:A6:84:61:5A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0QV4D1r7iSfVTKoFZ4-dUKaEYVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.45.0/24
193.124.90.0/24
193.124.95.0/24
193.124.203.0/24
194.58.45.0/24
194.58.60.0/24
194.87.1.0/24
194.87.24.0/22
194.87.165.0/24
194.87.170.0/24
194.87.179.0/24
194.87.191.0/24
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.226.0/24
194.87.254.0/24
194.135.23.0/24
195.58.54.0/24
195.133.12.0/22
195.133.76.0/24
195.133.80.0/24
195.133.82.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8d:6f:df:4b:fd:a7:73:55:92:d0:a6:c5:c7:50:e0:db:20:
61:59:b9:b9:b9:8e:0e:7c:b0:b1:7e:d5:84:d2:c3:58:87:b1:
76:35:4a:79:e0:ed:34:76:eb:6b:7f:bc:c6:c3:ac:26:e4:d1:
7b:de:9f:3c:4f:64:92:c4:33:60:d6:97:b7:b4:80:e6:f7:9e:
40:76:50:6f:03:e5:d2:17:e2:60:e4:bb:e5:c2:9c:19:2a:86:
31:79:57:c3:bf:6d:7d:f6:56:2c:04:b7:4a:89:61:3a:c6:4b:
16:f0:71:a3:48:90:e3:c3:fe:e2:11:19:26:2f:01:e8:8a:67:
83:80:73:d6:d3:9a:1c:2c:7b:19:24:fd:fa:93:71:91:40:68:
c1:f9:db:65:71:30:02:db:92:df:f2:ba:0f:a8:25:5f:e4:6d:
2f:21:5d:65:ea:57:9c:ec:fb:67:83:ea:86:96:04:96:1b:b5:
03:58:b9:c5:93:16:77:93:a7:61:ca:c4:11:9f:79:09:0d:e8:
46:ff:2e:80:89:5c:3c:36:6b:bb:5f:8d:a6:b6:b8:50:10:f3:
37:d1:8f:dc:d9:b3:47:15:ba:0e:f4:7e:5e:ce:14:19:71:27:
72:d3:5b:c5:a6:37:b9:be:90:48:2f:f2:56:d2:b5:10:fe:8f:
e0:7d:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org