Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Yx_9O8Gk7YfJcE1me8zcBTYSgo.roa
File: 6Yx_9O8Gk7YfJcE1me8zcBTYSgo.roa (raw, json)
Hash identifier: x3h6+VGP175ZcDFn898gYHOpuqsgpgmD0DjhGBaApFk=
Subject key identifier: E9:8C:7F:F4:EF:06:93:B6:1F:25:C1:35:99:EF:33:70:14:D8:4A:0A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01852F7700A034EFE7799217C8D149967F6A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Yx_9O8Gk7YfJcE1me8zcBTYSgo.roa
Signing time: Tue 20 Dec 2022 12:16:46 +0000
ROA not before: Tue 20 Dec 2022 12:16:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:77:00:a0:34:ef:e7:79:92:17:c8:d1:49:96:7f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 12:16:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e98c7ff4ef0693b61f25c13599ef337014d84a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:e2:30:52:5f:d2:d9:c0:30:47:ab:6a:76:
8e:b5:b8:c1:a4:7e:67:d0:bd:b3:48:af:e3:43:f9:
1d:07:52:fd:da:94:d8:5d:95:df:5d:48:61:d7:85:
dc:58:d6:11:52:77:4f:de:b0:02:76:4c:4b:ae:d9:
d4:9c:82:c2:2c:72:07:b7:c2:eb:c9:a8:92:14:5f:
67:15:9f:c0:96:86:7d:d5:46:e0:0b:78:4a:bf:78:
ad:2c:41:1b:ca:5d:dd:2c:9b:a2:8d:04:fb:bc:73:
3d:34:61:b0:f8:4f:22:ce:2d:64:ab:a0:a8:0a:4b:
f8:6e:17:f1:9b:05:95:cf:71:53:8a:7d:b4:cd:20:
63:60:5a:92:e1:e2:b1:4b:ce:e3:8d:fa:40:db:12:
f0:dd:ac:4c:31:f2:e0:dd:84:8c:d9:93:35:9c:ed:
4b:ee:c8:07:50:fa:db:cd:03:5f:99:a5:a6:c6:89:
39:e1:be:64:74:8d:38:b2:4d:c3:0a:ab:57:4f:89:
c7:75:a0:c0:d9:b0:f9:26:aa:29:c2:5f:62:4f:69:
ce:8d:03:4d:15:38:7b:ec:8d:cf:f6:1c:28:47:82:
f2:7b:c8:3c:b9:31:b4:42:8c:ac:f0:63:2e:5e:71:
4e:85:a5:c5:d1:6b:21:fb:b8:44:42:a3:73:36:c0:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8C:7F:F4:EF:06:93:B6:1F:25:C1:35:99:EF:33:70:14:D8:4A:0A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Yx_9O8Gk7YfJcE1me8zcBTYSgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
62.76.235.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.9.0/24
193.124.18.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.149.0/24
194.87.160.0/23
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
194.135.30.0/24
195.58.50.0/24
195.58.52.0/24
195.58.56.0/21
195.133.12.0/24
195.133.15.0/24
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.10.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
10:95:e6:58:35:d7:e7:c5:84:ec:5b:f8:34:e9:27:03:15:6d:
dc:2d:34:00:b8:ef:09:20:41:88:8e:3d:f0:4b:c3:19:0b:5c:
b5:d9:cc:7f:21:bc:ec:36:3a:57:b7:6c:dd:98:ab:eb:62:fc:
77:8e:b8:d3:ad:1a:07:cd:c1:8f:86:c1:61:9f:8f:00:ef:4b:
08:fc:46:1f:c9:26:46:b8:61:68:5e:ff:de:f1:58:fd:c3:f1:
0c:3e:74:af:b1:a9:82:16:6f:1f:1d:f7:74:23:04:f7:b5:45:
62:8e:0e:ab:93:70:1d:a7:4c:98:9b:65:7c:9d:2d:de:2e:b4:
c5:ec:0d:bf:a8:b2:7f:b0:a5:79:fc:79:06:7f:c5:12:52:3b:
7e:6e:fb:8e:2d:92:d0:57:c0:6f:7f:de:72:ad:5f:80:97:18:
22:3c:39:21:78:88:ce:82:f9:9f:07:c7:05:d9:0d:82:dd:d5:
a6:1a:9f:f3:a0:14:21:37:aa:fc:28:93:87:4f:63:87:0a:da:
84:d9:2e:04:16:40:9c:20:83:92:97:6f:4d:80:fe:9a:13:8c:
18:2b:41:5a:0e:d8:91:d5:7a:a5:b0:bc:76:32:e4:8b:70:9a:
0a:bf:ec:37:67:11:02:e2:f5:0d:04:45:07:c6:43:44:d9:5e:
fe:11:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:06 2024 by rpki-client on console-fra.rpki-client.org