Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JBu6DsCiApca3mZjaw91VlYo5IA.roa
File: JBu6DsCiApca3mZjaw91VlYo5IA.roa (raw, json)
Hash identifier: 4XJShUdMLGqmOIpytJgO1u3UHbZYo5FGIpAucPGyO4U=
Subject key identifier: 24:1B:BA:0E:C0:A2:02:97:1A:DE:66:63:6B:0F:75:56:56:28:E4:80
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01849FEB1C6AD57F0FDF19D66D48CD284D94
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JBu6DsCiApca3mZjaw91VlYo5IA.roa
Signing time: Tue 22 Nov 2022 15:18:16 +0000
ROA not before: Tue 22 Nov 2022 15:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:eb:1c:6a:d5:7f:0f:df:19:d6:6d:48:cd:28:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 22 15:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=241bba0ec0a202971ade66636b0f75565628e480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:e1:60:1b:60:55:92:d4:81:02:cf:be:59:
17:2f:05:34:99:6c:84:51:fa:fa:26:a3:81:13:58:
a9:35:cd:33:42:12:99:37:4b:b9:48:e4:83:4f:9d:
53:aa:13:25:70:72:1f:3f:45:de:ec:a4:87:14:ec:
81:65:2c:46:90:5b:74:3e:bc:cc:aa:22:03:2f:4c:
22:6e:73:b6:54:fb:13:24:d0:df:e7:49:b2:4d:ba:
c9:14:ac:f2:c3:e7:05:26:b9:fc:8c:46:3e:02:29:
84:b3:18:9a:ed:4b:c1:4e:2d:a2:c1:33:2f:6c:ec:
c4:b6:25:13:ee:3c:d4:4e:16:15:b8:33:30:09:17:
9f:41:5d:7b:ba:6d:be:21:e5:6e:82:9c:d1:10:bc:
49:9d:3f:08:c1:68:87:b5:a8:36:93:7b:37:13:ed:
b8:5e:7b:76:5a:73:f4:c4:6f:3d:fa:b9:c7:26:a9:
e6:a7:a4:db:db:26:c0:1c:28:78:05:6f:05:23:d4:
c3:d6:58:8c:7e:5f:9d:47:59:40:04:25:34:64:ab:
80:2e:18:d0:2b:bd:ad:f3:9a:27:53:6f:77:28:81:
e1:fb:13:96:a5:93:8f:59:fa:98:66:b2:25:dc:38:
ab:73:5a:8f:a0:07:4f:2e:c6:1d:fd:c5:89:fa:88:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:BA:0E:C0:A2:02:97:1A:DE:66:63:6B:0F:75:56:56:28:E4:80
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JBu6DsCiApca3mZjaw91VlYo5IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/23
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.9.0/24
193.124.16.0/24
193.124.18.0/24
193.124.45.0/24
193.124.201.0/24
193.124.203.0/24
193.124.205.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.32.0/24
194.87.36.0/24
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.137.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0/24
194.87.170.0/23
194.87.191.0/24
194.87.198.0/23
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.233.0/24
194.87.250.0/24
194.135.18.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.30.0/24
195.133.55.0/24
212.192.6.0/24
212.192.10.0/24
212.192.208.0/23
212.192.222.0/24
212.193.0.0/24
212.193.3.0/24
212.193.6.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:44:0c:50:18:03:51:07:d0:71:67:99:94:48:56:06:1b:ab:
16:59:76:fc:72:39:e2:be:d9:a2:e7:69:57:6e:b9:26:e1:61:
9c:20:1d:2f:50:8f:f0:c5:d8:90:dd:cf:8b:e2:ca:ef:a3:1c:
9f:2b:72:1a:1c:2f:12:9a:62:86:bf:cc:94:ef:d6:83:1d:6c:
07:21:0c:9a:f9:74:86:86:45:d0:bb:a1:19:dc:b6:b5:01:cf:
dc:ab:75:91:1b:1d:b3:38:32:f7:3b:60:67:ff:af:15:02:22:
3f:a5:a8:b4:af:71:70:80:66:29:85:ce:00:60:fd:13:53:06:
10:cb:13:35:1d:95:81:4e:fb:9b:2a:15:dc:38:18:59:5f:4b:
25:52:37:cf:52:c0:3c:85:d8:39:45:e6:9d:82:df:d0:30:63:
4a:62:f7:61:c4:17:9a:b5:76:03:4d:c5:dd:1d:c8:cb:16:eb:
29:48:f2:d1:19:4b:4a:f3:7c:66:1b:a5:60:4e:8d:bf:44:a1:
96:83:63:af:c9:9b:c7:ed:81:5c:15:84:92:fd:3a:d3:a1:bc:
df:9e:28:37:7b:f4:9f:68:45:06:47:cb:52:b9:4e:f4:d9:3a:
01:73:10:1b:3f:a3:52:72:27:f4:79:1d:e9:d0:9e:a3:b4:80:
af:b0:2e:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org