Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3lYqfNNqfGAiLqCJsryAsvLgv90.roa
File: 3lYqfNNqfGAiLqCJsryAsvLgv90.roa (raw, json)
Hash identifier: D5GcqvRSJpMW8BrYAk6aI8qv/kGevWbmDRgPxYUNr2k=
Subject key identifier: DE:56:2A:7C:D3:6A:7C:60:22:2E:A0:89:B2:BC:80:B2:F2:E0:BF:DD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01840AF4A902BEEA2FC5222195C373A50F7E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3lYqfNNqfGAiLqCJsryAsvLgv90.roa
Signing time: Mon 24 Oct 2022 17:05:16 +0000
ROA not before: Mon 24 Oct 2022 17:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.223.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:f4:a9:02:be:ea:2f:c5:22:21:95:c3:73:a5:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 24 17:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de562a7cd36a7c60222ea089b2bc80b2f2e0bfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:5b:17:22:b6:82:4c:8c:ef:66:a5:b2:35:
dd:ee:fa:55:07:07:e9:5c:27:1f:97:5a:e9:47:1f:
82:da:65:c7:ae:ab:19:1a:a7:9e:99:3c:50:3b:46:
75:d4:93:43:10:d6:b2:96:b6:f6:84:8d:6b:53:9e:
fa:f0:f7:5c:95:fe:45:29:87:e0:64:93:2f:41:30:
1b:73:f4:8c:a4:80:75:56:ba:64:a6:c5:ad:30:46:
f1:d5:c7:59:9a:0f:0b:cd:a0:c1:be:aa:ba:4d:2e:
be:81:bf:20:96:fe:ae:0b:cd:9f:c6:ce:bc:02:17:
a8:d9:ef:9b:1d:3b:45:f3:93:15:74:85:c0:7c:8b:
01:12:86:a8:bc:8a:8f:38:00:4c:17:20:e9:03:36:
48:61:11:82:fb:09:2d:73:e0:47:02:4e:9e:a8:40:
00:a7:e0:10:c0:ba:d9:3a:e2:f9:88:67:ff:56:49:
56:fd:d9:5c:19:db:07:69:f6:ca:40:1d:f6:d4:12:
37:3c:2f:79:67:6b:d5:57:be:99:91:f9:d2:2f:0e:
77:bc:08:62:92:d3:bc:1c:4d:d7:a3:39:85:90:3e:
f1:9b:74:67:c5:66:ef:8f:91:5c:4c:db:cb:6b:88:
46:9c:a5:9d:bd:9e:3f:d5:23:63:b3:33:f0:04:e5:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:2A:7C:D3:6A:7C:60:22:2E:A0:89:B2:BC:80:B2:F2:E0:BF:DD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3lYqfNNqfGAiLqCJsryAsvLgv90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.95.0/24
193.124.203.0/24
194.58.45.0/24
194.58.60.0/24
194.87.1.0/24
194.87.3.0/24
194.87.16.0/24
194.87.24.0/22
194.87.118.0/24
194.87.165.0/24
194.87.170.0/24
194.87.178.0/23
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.226.0/24
194.135.23.0/24
194.135.30.0/24
195.58.54.0/24
195.133.55.0/24
195.133.76.0/24
212.193.0.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
38:05:cd:fa:9f:d0:0c:f9:20:67:4f:41:0c:a2:77:81:db:6f:
3d:cf:9f:c2:9c:43:86:83:0a:b4:84:7a:d6:d9:bf:f5:27:96:
aa:08:29:ae:b1:c8:6a:13:cc:12:4d:e7:5c:f1:9c:1d:69:2b:
a5:29:04:31:54:79:c5:7a:55:c6:1a:ec:37:ab:ad:40:c6:f8:
7e:05:73:30:e4:e8:83:ec:99:7e:8b:bd:4f:aa:18:bd:63:b6:
b8:56:db:12:ab:5a:c4:f5:32:dd:9b:4e:a5:4a:7d:b9:08:35:
06:d8:13:15:99:1e:07:79:37:b4:6c:cd:52:e5:46:aa:ae:17:
44:b8:94:9d:8f:28:ad:be:02:3c:38:f6:1c:23:d1:fb:33:f0:
af:38:3a:05:f0:cf:92:aa:99:e3:43:e1:9a:4d:5b:7d:3b:c7:
75:c5:f6:7d:5a:05:8f:f4:56:01:b6:41:85:75:9c:52:36:85:
4e:18:15:90:08:b1:b8:da:05:e0:28:4e:77:44:cd:0b:0a:3e:
20:19:2b:66:26:3b:f6:bb:75:29:e8:ae:6b:59:7a:f6:e4:71:
0f:62:fc:78:ca:90:78:10:e1:11:37:4a:ae:ef:d8:1a:20:24:
92:4a:74:e8:78:1f:2c:0e:d9:41:f3:70:80:49:45:c6:22:64:
85:ac:e4:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:05 2024 by rpki-client on console-fra.rpki-client.org