Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/208d_-OwjlGPzRquSLwYjwFTdv0.roa
File: 208d_-OwjlGPzRquSLwYjwFTdv0.roa (raw, json)
Hash identifier: KcxPWTOcOlw2RGMBQ9JwGknATAXCYcTwafZ/0iMAPQQ=
Subject key identifier: DB:4F:1D:FF:E3:B0:8E:51:8F:CD:1A:AE:48:BC:18:8F:01:53:76:FD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01853046D48C76341ED8CDE4AA107CEDC49E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/208d_-OwjlGPzRquSLwYjwFTdv0.roa
Signing time: Tue 20 Dec 2022 16:03:46 +0000
ROA not before: Tue 20 Dec 2022 16:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:46:d4:8c:76:34:1e:d8:cd:e4:aa:10:7c:ed:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 16:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db4f1dffe3b08e518fcd1aae48bc188f015376fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:a1:ad:38:fb:ea:49:bc:d4:c4:71:44:d4:
cc:e2:08:34:6c:25:49:e1:3c:90:e2:a0:88:18:39:
32:36:ec:9c:ce:ce:04:82:5d:e8:89:90:8a:f6:dd:
88:a0:9d:39:c0:7d:51:62:bc:89:57:12:ea:66:fa:
29:46:c2:0f:44:98:a6:de:41:99:22:f6:e4:8f:bd:
75:02:01:1b:37:a4:dd:3f:cf:0e:73:06:cf:2c:a9:
78:e0:38:d2:67:80:6a:97:dd:08:52:a6:fe:2a:33:
c6:3c:e9:22:dd:4e:f2:1b:99:67:92:dc:2f:c9:4c:
e3:33:91:cc:34:7d:92:43:25:c1:01:b9:a8:f5:5f:
e9:a7:47:f5:e8:40:ea:05:7c:58:a5:14:45:91:48:
ac:4c:ac:e7:63:b4:f0:48:49:4a:bc:29:2a:db:ab:
88:31:f7:29:5d:0c:f0:2a:74:76:64:33:ce:9b:b3:
d2:d6:fa:b2:70:00:22:1e:2e:77:7b:ad:a7:b7:da:
df:06:16:5e:0f:d8:58:ee:97:ab:7b:f7:20:91:65:
2d:2b:0b:07:12:b3:c8:13:95:23:cd:42:cc:f9:ab:
2f:6e:c2:ba:c5:47:9f:66:43:bc:e0:92:06:e4:6b:
18:4b:6b:44:d6:b2:e1:d3:54:11:2d:7e:75:a2:92:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4F:1D:FF:E3:B0:8E:51:8F:CD:1A:AE:48:BC:18:8F:01:53:76:FD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/208d_-OwjlGPzRquSLwYjwFTdv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
62.76.235.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.9.0/24
193.124.18.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.116.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.149.0/24
194.87.160.0/23
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
194.135.30.0/24
195.58.50.0/24
195.58.52.0/24
195.58.56.0/21
195.133.12.0/24
195.133.15.0/24
195.133.55.0/24
195.133.94.0/24
195.133.195.0/24
212.192.0.0/23
212.192.5.0/24
212.192.10.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
36:80:35:83:88:1b:af:40:cb:de:2c:01:d5:7b:20:c4:7a:81:
18:d8:d9:44:f4:ec:fb:dc:b7:fd:0a:54:20:04:3b:fb:f8:89:
7a:3a:2e:71:81:c4:5f:d3:46:61:67:85:7e:42:d5:a4:04:dd:
bc:d7:9b:f4:17:bd:61:ce:1c:69:af:d7:04:e7:67:01:86:00:
3b:a0:12:99:d9:49:03:62:0a:08:47:6e:97:24:a0:ac:42:49:
36:ec:67:ad:dd:a6:d0:2d:48:69:89:ea:5c:08:3b:bd:bf:fd:
ee:3a:ad:83:8d:8d:a3:b9:c3:03:7d:2a:e2:ff:d7:65:74:c5:
3b:8f:64:dd:c1:35:24:f1:2f:db:b4:08:fc:ff:b8:6c:7e:30:
ec:91:1b:48:95:40:04:5e:95:32:78:16:c9:2f:ff:13:62:81:
bf:d0:10:b7:3c:90:4e:76:73:ed:be:d8:a4:79:a5:da:7f:c1:
68:09:f1:48:be:57:73:82:e4:9d:ba:9f:b4:d9:77:16:dd:2d:
17:35:e2:eb:a8:85:9b:55:93:dd:17:f2:dd:4d:96:3d:24:fb:
8d:43:d2:b9:71:88:fa:e6:8d:0e:be:c8:8f:cc:d9:cd:71:d4:
70:ea:6e:2c:c0:6f:cc:bb:2c:b9:d5:b2:69:3c:0b:6f:87:72:
63:54:12:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org