Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7EMwH1KUuxzHXzWVd-ypHF3Dipo.roa
File: 7EMwH1KUuxzHXzWVd-ypHF3Dipo.roa (raw, json)
Hash identifier: rwKgQrRxFZMaVv3XImyBJnI4iD+v5XPCNPS01iIPREM=
Subject key identifier: EC:43:30:1F:52:94:BB:1C:C7:5F:35:95:77:EC:A9:1C:5D:C3:8A:9A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01842DBAD61330F7F0A626D87F547B5C6A3D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7EMwH1KUuxzHXzWVd-ypHF3Dipo.roa
Signing time: Mon 31 Oct 2022 11:08:49 +0000
ROA not before: Mon 31 Oct 2022 11:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:ba:d6:13:30:f7:f0:a6:26:d8:7f:54:7b:5c:6a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 31 11:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec43301f5294bb1cc75f359577eca91c5dc38a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:91:d9:73:db:76:c6:09:c6:60:6b:2a:0f:
0d:b7:4c:7b:45:89:03:55:5f:0c:50:3f:d4:11:28:
5d:d4:cf:16:0a:5d:24:32:61:01:db:9e:f5:25:bb:
03:31:72:79:33:5a:95:6d:af:60:33:1e:a3:21:4a:
21:aa:c9:25:2a:41:e5:ed:3d:c2:a9:2d:a9:21:b8:
cd:11:4f:73:ca:39:de:7d:cd:90:a3:54:2f:7f:c2:
97:bd:bc:83:af:1d:9b:31:ce:71:0a:fa:dc:bf:57:
1e:4e:6d:73:4a:ca:4f:3e:7b:57:c0:f2:3b:b5:61:
b9:a1:47:db:20:af:dd:36:eb:f7:d8:a9:2c:8f:bf:
87:7b:ba:58:58:2c:3c:da:21:f8:1d:62:33:2c:1c:
76:b5:2b:44:5a:ff:d7:7e:f7:c1:5a:bb:4f:d4:ac:
9d:52:ed:70:ed:34:a7:ed:2e:58:b9:bb:18:36:3e:
14:b9:2e:07:c1:12:bc:a9:e9:50:20:6e:4b:16:e4:
f8:ad:0a:89:ab:04:d6:74:c3:a0:af:b2:5f:29:9b:
ab:fb:ac:14:9d:a1:ad:3e:ed:76:e1:6c:a2:f7:c7:
63:dd:4c:75:77:a7:de:9c:fa:c3:bf:ff:b0:b2:75:
b2:29:73:05:f7:44:fc:c5:c2:1f:9e:aa:9b:5c:43:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:30:1F:52:94:BB:1C:C7:5F:35:95:77:EC:A9:1C:5D:C3:8A:9A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7EMwH1KUuxzHXzWVd-ypHF3Dipo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.203.0/24
194.58.45.0/24
194.87.1.0/24
194.87.3.0/24
194.87.16.0/24
194.87.24.0/22
194.87.104.0/24
194.87.118.0/24
194.87.165.0-194.87.166.255
194.87.170.0/24
194.87.178.0/23
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.135.30.0/24
195.58.56.0/21
195.133.55.0/24
195.133.76.0/24
212.192.10.0/24
212.193.0.0/24
212.193.2.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
18:af:c7:fd:d3:be:19:85:c9:47:8e:bf:b0:fc:04:be:d0:30:
87:bb:10:d3:1f:36:16:46:95:03:09:30:41:0e:71:29:1a:bc:
33:08:25:96:f1:01:fd:de:31:9f:0c:f6:6b:f8:6e:10:78:5f:
40:32:71:8c:69:a3:40:5e:af:0f:e0:80:3f:e6:b0:78:90:98:
dd:9e:9b:21:35:02:a4:ea:36:28:4c:4d:14:51:0a:dd:4b:49:
0a:80:c8:57:dd:41:1f:60:5c:51:46:19:2f:e1:bf:72:59:91:
cb:b5:d5:88:db:fb:db:07:75:bf:65:20:40:b7:43:a8:df:da:
7e:7e:ef:40:32:06:34:50:c4:3c:d6:ee:07:d4:c3:b7:da:1e:
fc:51:22:b2:98:ff:19:d9:72:37:e9:f4:19:0e:eb:11:eb:04:
c5:fb:a4:28:be:fc:2d:c4:65:a0:82:8a:c6:22:66:bc:38:2a:
7b:4c:68:a8:4f:2f:d9:4d:93:05:b7:ce:f7:74:d8:e2:7e:41:
98:75:38:c0:7d:c3:fd:83:c4:c0:0a:11:f3:37:2f:d3:81:35:
f1:ce:f6:6a:6d:13:b1:cb:fa:2b:53:d3:c8:c4:67:e1:8e:9b:
e0:2b:1e:4e:ac:ec:25:a6:d2:75:66:e7:b1:34:f9:7e:cf:a3:
ca:88:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:56 2023 by rpki-client on console-fra.rpki-client.org