Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DwSwsIOGVBokeFuVGPIusedH3pE.roa
File: DwSwsIOGVBokeFuVGPIusedH3pE.roa (raw, json)
Hash identifier: VgBa3mj+V7Fk9QHbREi2X7P/oBsuT5wiHLRm0e1gY7M=
Subject key identifier: 0F:04:B0:B0:83:86:54:1A:24:78:5B:95:18:F2:2E:B1:E7:47:DE:91
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01849A35F0D6AAFC4C62A3B44C3ADA40421F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DwSwsIOGVBokeFuVGPIusedH3pE.roa
Signing time: Mon 21 Nov 2022 12:42:17 +0000
ROA not before: Mon 21 Nov 2022 12:42:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.36.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:35:f0:d6:aa:fc:4c:62:a3:b4:4c:3a:da:40:42:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 21 12:42:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f04b0b08386541a24785b9518f22eb1e747de91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:87:9a:17:61:0d:25:f0:76:dc:38:65:90:
a1:b4:4c:89:ef:78:d2:b6:3c:a8:01:92:4d:1b:f4:
1d:06:fd:f1:0e:4e:f9:08:a2:6e:45:c0:7f:1d:19:
bb:0c:f2:13:38:df:05:2f:35:f6:aa:18:fa:1e:2f:
00:e2:b5:56:9a:88:49:05:c0:77:31:81:50:e2:56:
37:d2:8d:a4:91:d7:3e:b1:39:bd:c5:ff:59:4f:9b:
8c:bc:40:e5:07:33:3e:11:f3:4c:f6:ec:98:3f:56:
f6:29:4d:30:69:3c:eb:e9:e3:06:78:69:12:e6:fa:
23:0a:4d:1d:3b:00:d1:67:78:c4:5f:7f:ff:0a:fc:
4c:88:ad:c7:2b:7e:9e:a2:41:f6:30:35:ff:6b:ef:
af:71:a0:fc:24:44:7d:95:dd:0c:d8:29:fa:d4:0c:
6b:ff:a1:e4:17:f8:15:db:e5:05:8e:a3:52:52:3b:
86:14:64:f3:67:23:6a:88:90:ef:f6:2b:1a:af:21:
8c:e0:8b:ed:d4:1e:06:5e:d4:30:ba:ec:97:13:5f:
b6:32:b9:fc:b9:6a:23:97:e8:82:2b:70:d8:80:fc:
03:b2:2d:a7:36:51:60:94:e9:41:77:71:3b:06:b0:
06:73:9f:e4:dc:19:2c:2f:36:23:f4:18:31:08:c5:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:B0:B0:83:86:54:1A:24:78:5B:95:18:F2:2E:B1:E7:47:DE:91
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DwSwsIOGVBokeFuVGPIusedH3pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/23
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.9.0/24
193.124.16.0/24
193.124.18.0/24
193.124.45.0/24
193.124.201.0/24
193.124.203.0/24
193.124.205.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.1.0/24
194.87.7.0/24
194.87.24.0/22
194.87.36.0/24
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.118.0/24
194.87.123.0/24
194.87.137.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0/24
194.87.170.0/24
194.87.179.0/24
194.87.191.0/24
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.233.0/24
194.135.18.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.30.0/24
195.133.55.0/24
212.192.6.0/24
212.192.10.0/24
212.192.208.0/23
212.192.222.0/24
212.193.0.0/24
212.193.3.0/24
212.193.6.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:41:7f:5f:09:a2:f2:3e:e4:d8:84:dc:e6:3e:d5:2b:98:1d:
0b:34:6e:1c:91:56:83:9a:5f:bd:20:34:db:a9:1c:c0:27:c4:
38:9f:ec:37:b7:b4:28:7d:b2:54:a6:8d:12:7c:d9:62:63:a6:
ad:75:1a:b0:28:b4:30:88:2e:32:7b:a4:c2:8a:01:ed:67:e4:
2f:a6:54:9d:49:88:24:77:21:2e:9f:c8:26:6d:a0:12:94:23:
c3:fb:4e:3f:e4:7d:be:d1:55:ab:7b:f6:69:4b:50:a3:cf:0a:
50:5e:d0:cc:be:9a:61:5d:32:8a:65:37:b8:82:b1:2c:6c:18:
90:7b:03:9c:2b:18:20:d0:5e:c3:e9:06:df:96:fb:16:e6:90:
7d:4a:8d:25:00:14:81:d8:52:f9:9f:46:08:e9:82:9d:a0:8d:
ef:ae:77:88:01:74:af:2b:6c:18:94:98:00:60:94:c6:0f:ca:
a1:61:92:b4:6e:ee:69:f3:ae:44:b6:90:f3:ac:1f:af:e5:65:
ce:86:d3:40:c3:13:f4:1d:d7:2c:d1:a2:22:1a:53:a8:f3:2b:
b4:2c:03:ab:91:8a:48:60:f9:84:0b:e1:b9:4c:6a:87:8e:a4:
87:3f:b3:8d:3f:fb:a1:2b:2c:26:c5:77:a6:3e:78:a3:cd:32:
38:5a:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org