Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7g7O6-Ctb09-dPj6ALQ5KYMedQo.roa
File: 7g7O6-Ctb09-dPj6ALQ5KYMedQo.roa (raw, json)
Hash identifier: E2ILkNIgAcaKnjHK8Qn1UP507mtUAo708SoSb9hYlJs=
Subject key identifier: EE:0E:CE:EB:E0:AD:6F:4F:7E:74:F8:FA:00:B4:39:29:83:1E:75:0A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 10321C69
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7g7O6-Ctb09-dPj6ALQ5KYMedQo.roa
Signing time: Wed 01 Jun 2022 14:41:23 +0000
ROA not before: Wed 01 Jun 2022 14:41:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
193.124.124.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/23 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
194.87.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271719529 (0x10321c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 1 14:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee0eceebe0ad6f4f7e74f8fa00b43929831e750a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:30:7f:6f:d1:bd:81:2c:e2:41:8d:61:2f:
af:29:e3:48:9e:e6:77:18:ec:a5:6b:36:18:96:56:
5d:5e:c0:4a:05:2e:57:8a:d0:d0:ce:d5:58:40:2f:
a2:01:80:06:c4:46:9a:6d:3f:e4:f5:06:c0:ec:e8:
9a:05:94:94:ef:6f:4b:e8:57:33:fa:1d:b1:60:a0:
a0:95:d1:95:c1:8b:1c:df:0f:23:85:5f:ba:28:ec:
60:d7:94:65:90:5f:3b:ec:ce:d5:dc:db:4e:61:82:
81:a0:20:2d:56:a6:ed:9b:07:16:41:c0:73:a8:17:
f8:f8:6b:d2:99:66:bc:e9:02:c9:4e:38:cf:f4:45:
6d:ad:27:d7:ee:d5:9f:05:97:d4:dc:95:f1:50:0e:
df:73:97:c0:24:16:09:70:24:0a:12:c9:08:cb:2d:
30:20:7b:5a:fc:66:23:c0:17:51:8c:b6:4e:c0:c3:
c3:fb:d0:63:4e:46:75:5f:78:05:76:7c:4a:a5:34:
7b:43:84:67:fe:2d:a3:11:f2:75:59:d9:6b:4a:5a:
cb:43:e6:5d:63:fd:6b:c1:0a:fc:94:1d:7b:88:55:
98:6e:a0:11:ea:ab:ea:77:88:4d:9e:90:1b:3a:65:
52:b4:ae:56:6f:bc:ed:9b:20:95:1e:8d:b8:75:97:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0E:CE:EB:E0:AD:6F:4F:7E:74:F8:FA:00:B4:39:29:83:1E:75:0A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7g7O6-Ctb09-dPj6ALQ5KYMedQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.41.0/24
193.124.89.0/24
193.124.93.0/24
193.124.95.0/24
193.124.124.0/23
193.124.202.0/23
194.58.41.0/24
194.58.60.0/24
194.58.67.0/24
194.87.1.0/24
194.87.7.0/24
194.87.16.0/24
194.87.30.0/24
194.87.56.0/24
194.87.64.0/24
194.87.77.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.226.0/24
194.87.254.0/24
194.135.23.0/24
194.135.124.0/24
195.58.52.0/24
195.133.73.0-195.133.75.255
195.133.77.0/24
212.192.10.0/23
Signature Algorithm: sha256WithRSAEncryption
85:fa:5a:a3:1c:23:f4:9e:8c:c0:66:dd:78:46:13:4e:94:a5:
8a:00:8d:a4:b4:f1:a6:fa:8c:41:75:ed:0a:0a:e9:68:56:23:
e5:bc:d8:31:2c:68:8b:22:fe:b6:1e:47:f7:15:5a:34:92:e7:
16:5c:a8:6a:9a:9d:cd:e2:f7:f1:74:98:e8:11:15:a2:a3:77:
dd:11:69:62:77:8d:c6:53:1d:ae:fa:54:7c:d3:91:f4:bc:6e:
a0:e6:2d:72:c0:d1:50:a4:53:27:f6:4c:a0:8f:05:9e:ed:2f:
96:26:26:f9:c9:c6:8d:2e:e7:58:41:78:8c:eb:ce:22:31:f9:
77:23:c9:7b:19:de:ae:dd:8b:ab:9b:06:89:a3:5b:3b:3f:d3:
31:ce:78:31:aa:b4:5b:78:f4:33:c4:67:f7:92:83:77:d2:e0:
3c:a4:e4:f3:ad:aa:e9:fb:1d:d5:76:9e:eb:70:0f:66:5c:22:
ae:b6:ea:b0:d0:eb:f1:af:23:cf:6a:46:12:b4:13:f4:a5:2c:
54:11:e5:4b:66:16:be:9f:26:ce:28:39:3b:a3:1e:2a:45:71:
42:81:37:11:84:02:c1:17:28:52:5a:f0:95:f7:cd:5d:df:27:
b6:8e:0c:49:7d:27:55:44:59:15:40:fd:f3:0e:31:02:a5:f7:
96:06:c6:5d
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEEDIcaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDYw
MTE0NDEyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWUwZWNlZWJlMGFk
NmY0ZjdlNzRmOGZhMDBiNDM5Mjk4MzFlNzUwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCqMH9v0b2BLOJBjWEvrynjSJ7mdxjspWs2GJZWXV7ASgUu
V4rQ0M7VWEAvogGABsRGmm0/5PUGwOzomgWUlO9vS+hXM/odsWCgoJXRlcGLHN8P
I4VfuijsYNeUZZBfO+zO1dzbTmGCgaAgLVam7ZsHFkHAc6gX+Phr0plmvOkCyU44
z/RFba0n1+7VnwWX1NyV8VAO33OXwCQWCXAkChLJCMstMCB7WvxmI8AXUYy2TsDD
w/vQY05GdV94BXZ8SqU0e0OEZ/4toxHydVnZa0pay0PmXWP9a8EK/JQde4hVmG6g
Eeqr6neITZ6QGzplUrSuVm+87ZsglR6NuHWX8skCAwEAAaOCAugwggLkMB0GA1Ud
DgQWBBTuDs7r4K1vT350+PoAtDkpgx51CjAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
LzdnN082LUN0YjA5LWRQajZBTFE1S1lNZWRRby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
/QYIKwYBBQUHAQcBAf8Ege0wgeowgecEAgABMIHgAwQAPkzoAwQAPkzrAwQAwHyt
AwQAwHyyAwQCwHy0AwQCwHy8AwQAwHzRAwQAwXwEAwQAwXwpAwQAwXxZAwQAwXxd
AwQAwXxfAwQBwXx8AwQBwXzKAwQAwjopAwQAwjo8AwQAwjpDAwQAwlcBAwQAwlcH
AwQAwlcQAwQAwlceAwQAwlc4AwQAwldAAwQAwldNAwQAwldoAwQAwlemAwQAwles
AwQAwlezAwQAwlfiAwQAwlf+AwQAwocXAwQAwod8AwQAwzo0MAwDBADDhUkDBALD
hUgDBADDhU0DBAHUwAowDQYJKoZIhvcNAQELBQADggEBAIX6WqMcI/SejMBm3XhG
E06UpYoAjaS08ab6jEF17QoK6WhWI+W82DEsaIsi/rYeR/cVWjSS5xZcqGqanc3i
9/F0mOgRFaKjd90RaWJ3jcZTHa76VHzTkfS8bqDmLXLA0VCkUyf2TKCPBZ7tL5Ym
JvnJxo0u51hBeIzrziIx+XcjyXsZ3q7di6ubBomjWzs/0zHOeDGqtFt49DPEZ/eS
g3fS4Dyk5POtqun7HdV2nutwD2ZcIq626rDQ6/GvI89qRhK0E/SlLFQR5UtmFr6f
Js4oOTujHipFcUKBNxGEAsEXKFJa8JX3zV3fJ7aODEl9J1VEWRVA/fMOMQKl95YG
xl0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org