Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FgLvUQLhKcLRELG3juAcqlbdcd0.roa
File: FgLvUQLhKcLRELG3juAcqlbdcd0.roa (raw, json)
Hash identifier: jxFkqIY7G0MLl2Cz2c5y3hORWR8W7jjz9XSNE1lW4ws=
Subject key identifier: 16:02:EF:51:02:E1:29:C2:D1:10:B1:B7:8E:E0:1C:AA:56:DD:71:DD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185072539FDC37AA155C4CD6F4BD0C31ED5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FgLvUQLhKcLRELG3juAcqlbdcd0.roa
Signing time: Mon 12 Dec 2022 16:22:38 +0000
ROA not before: Mon 12 Dec 2022 16:22:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.164.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:25:39:fd:c3:7a:a1:55:c4:cd:6f:4b:d0:c3:1e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 12 16:22:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1602ef5102e129c2d110b1b78ee01caa56dd71dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:45:d9:5a:57:42:8d:94:c4:ba:65:aa:c5:
f5:4f:92:88:41:54:cc:dd:dd:fc:d1:dd:83:ca:22:
8d:1a:dd:d5:67:52:f4:4d:78:2b:0a:84:55:8d:59:
87:74:46:d9:f4:5b:a9:16:28:f2:c5:bd:7c:51:de:
ea:72:c6:81:95:e2:02:67:c6:99:d3:e1:58:4c:b7:
7a:c3:0c:96:a9:14:54:2e:53:9c:66:6a:0b:9a:af:
b7:d3:06:c3:0b:5d:bc:8b:08:17:cd:bc:15:c1:81:
a1:91:d9:12:b0:ab:93:55:a5:b1:29:4b:a1:20:85:
14:44:1c:93:56:01:3c:07:82:92:46:f1:4e:73:d3:
76:f7:44:60:c7:ca:37:d9:6c:12:65:68:a3:a7:91:
01:45:6a:a4:88:4b:52:c7:84:08:41:67:79:de:e3:
d9:69:6f:0a:93:94:1a:ae:c5:fe:af:cf:dd:f5:5b:
6a:ec:fe:52:d7:03:84:f8:a7:64:2b:6c:33:2b:fe:
20:a8:56:35:14:bd:ab:44:3f:62:95:cc:bd:4c:eb:
47:91:a5:0c:d0:74:59:22:55:7d:e7:ad:d2:24:51:
35:ae:24:a7:c7:9c:10:e2:72:10:9f:30:ef:c2:ad:
7c:70:e5:14:75:8b:f6:46:6c:a7:7c:6c:bc:58:ce:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:EF:51:02:E1:29:C2:D1:10:B1:B7:8E:E0:1C:AA:56:DD:71:DD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FgLvUQLhKcLRELG3juAcqlbdcd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.9.0/24
193.124.18.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/23
194.87.149.0/24
194.87.160.0/23
194.87.163.0-194.87.165.255
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.198.0/23
194.87.202.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.233.0/24
194.87.250.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.30.0/24
195.133.55.0/24
195.133.195.0/24
212.192.10.0/24
212.192.210.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
63:56:70:1f:45:0d:0f:f8:71:f2:79:64:cd:0b:e5:a2:de:59:
c3:81:23:fc:11:2b:f0:79:43:d4:e2:d0:56:0d:be:77:7e:66:
f4:8f:27:55:a7:d4:24:96:dd:3c:77:96:c3:f3:a5:3c:c8:89:
5c:e3:86:11:8b:22:40:af:b6:6c:f6:f4:8d:25:92:1a:f6:30:
ba:f6:ae:ad:85:b1:69:0e:ca:fc:a1:9e:c3:e5:8b:fe:48:f1:
a3:bf:b6:93:96:3b:95:fb:b8:cf:9f:f7:30:19:ac:85:32:81:
76:f8:5f:78:3c:70:dd:62:51:e0:9e:02:86:6d:01:3a:b6:76:
fd:9a:45:2d:4b:6d:ff:d0:ed:07:26:ce:e0:d3:12:7c:58:2b:
6c:e8:a7:a5:45:bd:b7:9c:58:ce:7f:7c:0c:23:65:e5:91:55:
0a:d0:cf:70:d5:00:ce:b5:79:fd:85:82:08:67:04:20:9d:c3:
6e:71:c0:c9:f9:ba:8c:c6:72:71:9f:c9:6c:af:ac:4a:d6:77:
0c:f6:59:82:9c:07:ef:ef:03:b6:c5:d6:fa:e8:dd:6d:12:a7:
78:ed:67:e0:c6:65:05:e6:d9:78:05:4c:84:7a:73:7b:1c:8d:
64:43:9d:c5:07:1b:e4:99:03:78:8d:6e:bd:d9:db:a4:0f:c8:
d9:7a:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:11 2024 by rpki-client on console-fra.rpki-client.org