Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3w3bCweJvIU0SdqkvyPgA-imTn8.roa
File: 3w3bCweJvIU0SdqkvyPgA-imTn8.roa (raw, json)
Hash identifier: lryGv5etjtnJiau4Z/v1hmvdymk1hnFuU9t9Fr12+Oc=
Subject key identifier: DF:0D:DB:0B:07:89:BC:85:34:49:DA:A4:BF:23:E0:03:E8:A6:4E:7F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184136C38E1CCD06CC7C1D63C1092730C28
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3w3bCweJvIU0SdqkvyPgA-imTn8.roa
Signing time: Wed 26 Oct 2022 08:32:50 +0000
ROA not before: Wed 26 Oct 2022 08:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:6c:38:e1:cc:d0:6c:c7:c1:d6:3c:10:92:73:0c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 26 08:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df0ddb0b0789bc853449daa4bf23e003e8a64e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:78:a7:01:a6:2c:d8:6e:ba:6b:4f:2e:b2:
0a:66:42:cf:e4:e8:e9:83:56:98:0c:38:34:c5:cd:
c1:f6:10:52:92:28:11:20:78:74:c7:bd:14:aa:3d:
c7:89:9d:8d:97:34:ea:4d:b2:5e:b7:14:b1:56:28:
c8:18:ad:fe:cf:1c:d1:34:91:b8:5e:66:e3:51:21:
5e:0d:a0:94:5e:67:b2:c0:29:f4:1d:56:e2:9a:6e:
e2:c3:27:8f:15:0c:f0:96:1b:93:0b:76:b8:43:70:
ed:54:f5:dc:f4:4d:6e:09:e9:8c:bc:85:c8:aa:8e:
29:c5:56:b6:8c:e4:6b:19:b4:0e:5c:65:5e:f9:4d:
7a:26:01:14:33:63:8f:8f:2e:75:6f:bb:03:84:94:
00:8d:fb:b9:d4:44:c4:6e:7f:28:ea:4e:aa:60:68:
47:b5:2e:c8:80:b3:bb:20:f8:fb:c6:50:9f:9f:bf:
2a:51:91:ac:df:fe:16:74:24:4e:4e:2c:68:33:b9:
03:3e:96:02:02:d7:fb:8e:c6:44:7f:37:68:11:43:
00:ff:30:d3:23:a3:f2:01:cc:48:67:b8:f0:3d:4c:
56:fa:01:75:b1:28:87:96:be:3d:0b:53:dd:91:93:
53:86:db:b8:18:6d:2a:25:25:53:76:a2:6f:e6:8c:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:DB:0B:07:89:BC:85:34:49:DA:A4:BF:23:E0:03:E8:A6:4E:7F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3w3bCweJvIU0SdqkvyPgA-imTn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.203.0/24
194.58.45.0/24
194.87.1.0/24
194.87.3.0/24
194.87.16.0/24
194.87.24.0/22
194.87.118.0/24
194.87.165.0/24
194.87.170.0/24
194.87.178.0/23
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.135.23.0/24
194.135.30.0/24
195.58.56.0/21
195.133.55.0/24
195.133.76.0/24
212.193.0.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
60:38:f2:9d:23:10:44:8b:dc:e1:34:a0:b2:57:98:70:f2:3c:
73:ca:aa:45:41:cf:48:17:72:62:af:f4:64:08:4e:40:ff:c7:
3d:f0:00:12:fc:cb:5b:7e:7f:e4:47:4b:b0:e5:bf:34:fc:51:
f6:7d:f6:e6:24:6d:c6:4c:4d:44:10:e0:0d:9e:c5:29:01:61:
1f:ab:80:cb:2f:b5:29:d5:c6:f5:d8:7e:92:03:ee:98:14:cc:
bd:52:96:ee:6e:d4:c1:1c:08:c1:7a:21:05:55:43:ad:a9:33:
1e:3d:f5:fe:80:4a:a5:31:0e:56:11:51:de:60:ba:44:a8:78:
a7:c1:13:6e:5d:33:2a:b0:24:e6:a6:eb:25:f4:c2:c7:80:a3:
0d:b9:14:ea:3e:c2:19:48:7e:4c:98:f6:cf:bd:db:4c:9f:a0:
4e:5d:88:79:ae:11:73:20:e6:d4:c3:ba:23:55:41:a5:23:8b:
2d:09:ed:66:38:e7:64:a7:9b:9d:44:58:67:08:82:29:a8:f4:
e1:f4:7d:58:33:8a:c0:3f:ad:76:b1:d7:07:0a:36:54:5a:0e:
cb:43:3f:ca:73:28:7d:86:24:e1:dc:99:6f:2c:6e:59:e1:8e:
3a:5d:52:11:e1:39:6f:c9:84:de:37:b5:1b:f6:6a:dc:ae:c0:
bf:c4:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:55 2023 by rpki-client on console-fra.rpki-client.org