Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DbFe_pPHquKVZrCtJvlZC1kMNwU.roa
File: DbFe_pPHquKVZrCtJvlZC1kMNwU.roa (raw, json)
Hash identifier: jJ/qawp9GTH5hDkif1pDFSA0lksm9Hi21BMjm9l3k44=
Subject key identifier: 0D:B1:5E:FE:93:C7:AA:E2:95:66:B0:AD:26:F9:59:0B:59:0C:37:05
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184EBA9BD9CB7FB1FD2AEC98BFB68040359
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DbFe_pPHquKVZrCtJvlZC1kMNwU.roa
Signing time: Wed 07 Dec 2022 08:18:00 +0000
ROA not before: Wed 07 Dec 2022 08:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.164.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:a9:bd:9c:b7:fb:1f:d2:ae:c9:8b:fb:68:04:03:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 7 08:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0db15efe93c7aae29566b0ad26f9590b590c3705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:df:f0:52:4d:18:e8:ae:06:55:61:f4:58:4d:
18:09:1a:ed:6a:dd:94:8c:76:98:3e:b8:59:b1:e1:
98:5e:e6:d1:2c:66:ad:0e:18:41:90:25:4b:63:7e:
00:9b:cf:09:b5:e8:28:33:d1:02:b5:84:3b:01:0e:
fb:28:97:83:f2:e7:e4:87:0d:09:15:13:0a:45:df:
a4:41:33:b2:a5:9b:e5:48:13:78:a4:19:17:6a:bc:
e0:a5:71:a0:39:ed:39:24:a8:d4:6a:42:a8:e6:88:
cd:ec:7b:f8:5b:2d:bf:a9:0c:0a:43:d8:09:ad:fd:
f6:77:84:65:7f:4e:e5:82:49:3c:5e:65:33:be:19:
73:7e:1a:bb:14:60:80:72:8e:a8:ae:63:b1:f7:51:
dc:af:18:2d:a5:c6:35:d9:45:34:c0:0c:56:17:c2:
26:16:58:9b:a1:34:38:e4:9f:ee:79:50:35:0c:5d:
99:7a:0b:12:52:76:12:b5:2e:ed:5c:02:72:45:5c:
59:c5:0e:22:6a:2e:f5:19:94:64:ca:91:cf:80:2f:
95:1f:fa:8a:31:37:93:2c:7d:05:1b:71:eb:dd:34:
db:08:1c:8b:d3:df:76:85:8d:d5:65:11:fd:c7:f8:
18:10:e2:6c:4f:a4:0f:cf:71:27:1c:09:6b:5c:46:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B1:5E:FE:93:C7:AA:E2:95:66:B0:AD:26:F9:59:0B:59:0C:37:05
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DbFe_pPHquKVZrCtJvlZC1kMNwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/23
192.124.178.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.9.0/24
193.124.18.0/24
193.124.201.0/24
193.124.203.0/24
193.124.205.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/23
194.87.149.0/24
194.87.160.0/23
194.87.163.0-194.87.165.255
194.87.170.0-194.87.172.255
194.87.176.0/24
194.87.198.0/23
194.87.202.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.233.0/24
194.87.250.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.30.0/24
195.133.55.0/24
212.192.6.0/24
212.192.10.0/24
212.192.208.0-212.192.210.255
212.192.222.0/24
212.193.0.0/24
212.193.6.0/24
212.193.12.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:82:31:8f:cc:dd:c7:3b:82:78:85:4b:5b:52:bb:e7:69:9d:
89:a8:e4:c9:a9:c5:05:28:69:63:7a:e7:b9:c2:0d:21:3e:ea:
f4:d0:71:e2:fd:5b:c0:38:dc:a7:f6:58:cc:2f:fa:bf:8f:20:
1d:4c:ea:f3:d9:09:a3:5c:f9:2c:50:fb:93:b0:70:d7:9a:25:
8c:5b:6a:67:52:fd:f5:11:b2:53:cf:a3:f7:ab:90:24:4a:03:
3b:cd:b7:0a:5b:60:10:09:ad:09:ba:ee:41:19:bf:09:a5:b4:
1c:74:98:69:ba:2e:f4:a0:66:a2:38:b4:71:a4:30:fc:56:ec:
be:c4:97:78:b1:d1:1d:8c:85:b5:32:c1:4c:34:89:41:bb:8c:
e3:d8:42:a8:47:85:6b:33:01:cf:43:6c:b9:e5:e5:2e:2a:f3:
d1:b5:0d:fb:da:83:df:a2:d5:6b:1a:fb:0e:d7:e1:bd:18:14:
40:33:d8:db:02:2a:ab:d4:01:73:56:de:40:ad:3a:c1:e6:8f:
8f:0a:1d:a5:2e:3f:33:2d:3a:b6:73:04:fc:89:32:5f:22:f6:
d2:f4:28:81:67:be:48:7f:f4:95:7c:65:5d:ed:64:11:f2:f4:
5c:e4:e4:d6:8f:92:6f:07:e0:df:6c:71:a3:80:9b:54:ba:65:
25:d8:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:58 2023 by rpki-client on console-fra.rpki-client.org