Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ES1p-Q9N7woDMUG_jWe1jp2PFK8.roa
File: ES1p-Q9N7woDMUG_jWe1jp2PFK8.roa (raw, json)
Hash identifier: qHT5WP9tH/991I6kv3oyOK8snAjiB4O7VSNTbov7mDU=
Subject key identifier: 11:2D:69:F9:0F:4D:EF:0A:03:31:41:BF:8D:67:B5:8E:9D:8F:14:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183EA77DE2BD42754869519E3374C3EB242
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ES1p-Q9N7woDMUG_jWe1jp2PFK8.roa
Signing time: Tue 18 Oct 2022 09:41:07 +0000
ROA not before: Tue 18 Oct 2022 09:41:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.223.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:77:de:2b:d4:27:54:86:95:19:e3:37:4c:3e:b2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 18 09:41:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=112d69f90f4def0a033141bf8d67b58e9d8f14af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:d0:7a:51:9c:dd:1f:bf:29:ed:7b:42:a9:
f7:fd:dd:98:0d:d1:c0:0b:88:d7:41:3e:fa:e7:24:
fb:dd:c8:90:1a:12:d9:5f:b6:30:f2:3a:10:24:8a:
91:a0:32:a9:a4:f8:6c:5e:bc:57:32:83:8a:bb:97:
ea:5a:b2:26:86:93:2a:6d:84:4b:70:a6:88:ee:32:
a6:31:a4:2c:5f:1a:3b:ab:c0:cb:dd:76:36:00:1b:
69:d4:42:9a:8b:d6:89:67:7a:98:66:54:08:0b:0f:
04:c2:cd:b0:72:24:32:0e:cc:c0:4f:dd:70:6e:ee:
e5:8f:63:9b:0e:2d:c5:d8:9f:65:92:d1:80:59:f8:
16:1c:aa:6a:2d:dc:20:8f:6f:8a:fa:2f:67:dc:e4:
64:cf:de:d8:7d:ac:fa:4b:5a:01:04:9b:d3:8c:73:
d9:ab:71:c8:7d:c0:d8:11:3e:c6:de:9a:7e:6c:bd:
89:57:98:ec:92:24:39:ed:ee:4e:b6:f0:30:b8:b2:
7e:e0:9d:10:47:2f:a1:7f:ab:f8:98:76:ca:1e:63:
d9:6f:9d:d9:f6:2b:42:10:6d:59:0b:90:4d:b5:43:
96:58:e3:1e:c7:b5:7a:4a:0f:03:66:89:79:ab:77:
71:85:7b:22:9a:d6:3b:4f:c1:79:d3:b3:0d:82:26:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:69:F9:0F:4D:EF:0A:03:31:41:BF:8D:67:B5:8E:9D:8F:14:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ES1p-Q9N7woDMUG_jWe1jp2PFK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.209.0/24
193.124.3.0/24
193.124.95.0/24
193.124.203.0/24
194.58.45.0/24
194.58.60.0/24
194.87.1.0/24
194.87.24.0/22
194.87.165.0/24
194.87.170.0/24
194.87.179.0/24
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.226.0/24
194.135.23.0/24
194.135.30.0/24
195.58.54.0/24
195.133.76.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:54:c5:6f:5c:e9:dc:b0:a4:26:0c:58:ad:4c:64:f4:a1:49:
4f:e2:45:ab:0c:13:51:c5:74:fc:97:8f:bc:ee:d3:ab:0a:c6:
62:71:4f:21:7b:c1:d0:7f:66:f4:1f:6a:c6:78:20:32:76:8c:
ed:37:e2:f5:6f:e4:6c:13:f6:7c:29:5b:97:29:54:23:dd:94:
b4:7e:9b:cb:80:16:ba:fd:bf:6f:9b:3f:13:71:fc:91:9a:80:
6c:e3:fe:d0:cc:9b:cd:d9:67:55:6a:72:28:69:98:2b:ef:c2:
ca:6b:b9:90:07:c8:ec:ee:69:95:4d:86:71:f2:a6:b9:55:d4:
e9:a1:fd:2e:39:51:c0:85:af:88:2e:22:bd:5a:86:1f:67:3b:
da:4a:83:11:ef:9f:e9:fd:99:ca:1a:08:9f:fa:eb:29:a3:f2:
30:b4:87:92:cf:ff:b9:1c:d7:3b:37:90:0c:03:b7:fa:71:51:
c8:20:9e:3a:ba:da:3b:49:00:b2:6e:01:b5:55:e2:92:ad:df:
a9:22:52:bf:15:c3:c7:7d:73:f5:4a:49:56:67:5d:ce:c1:b8:
b6:0e:b3:93:56:13:a0:38:52:8a:8d:01:db:fa:3d:d8:2e:bb:
24:14:6f:2b:04:e4:d8:d2:06:fc:02:1d:00:fe:73:95:9f:68:
1b:eb:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org