Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LVB9kdJ9oY_f7555O0-bcXFKzvY.roa
File: LVB9kdJ9oY_f7555O0-bcXFKzvY.roa (raw, json)
Hash identifier: 3VldxQzhf7viZT+Xaqz9RW1NZc7nbX6eFCvR46QADrM=
Subject key identifier: 2D:50:7D:91:D2:7D:A1:8F:DF:EF:9E:79:3B:4F:9B:71:71:4A:CE:F6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183C5F4C681A483104CD12A88CCCA25404F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LVB9kdJ9oY_f7555O0-bcXFKzvY.roa
Signing time: Tue 11 Oct 2022 07:31:36 +0000
ROA not before: Tue 11 Oct 2022 07:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
195.133.12.0/22 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.87.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:f4:c6:81:a4:83:10:4c:d1:2a:88:cc:ca:25:40:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 11 07:31:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d507d91d27da18fdfef9e793b4f9b71714acef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:48:bf:80:36:4f:b5:19:89:23:be:59:1d:3d:
36:4c:14:78:ad:52:9b:de:44:59:49:4a:b9:ac:f9:
68:47:e4:4e:9d:77:7d:e5:a6:45:62:81:c9:6a:e1:
41:66:a8:4e:96:08:96:87:81:50:ff:78:ae:d1:3e:
ee:92:9b:16:24:7f:ba:07:10:cb:81:8c:b3:86:4f:
21:3e:57:14:db:ba:19:49:cd:e0:99:59:50:bf:d6:
d7:65:f0:21:20:1d:17:72:57:64:22:24:91:1d:f9:
82:ac:91:6a:f1:55:b4:f8:01:b4:34:db:3a:06:25:
b3:91:4f:d9:88:f8:36:91:db:b9:12:28:a5:ba:66:
89:f3:01:cb:e4:4d:75:d3:c8:b5:62:45:56:c1:be:
4b:77:40:6c:6f:c2:a9:e3:9c:d5:22:30:04:ed:9b:
2e:cd:9c:20:dc:dc:3e:d8:c7:2e:b1:82:a7:62:ac:
7f:85:7a:9e:0b:d1:1d:8e:81:84:7f:03:56:07:b0:
6c:34:d4:25:20:2c:35:36:14:d1:5d:46:36:79:dc:
0c:d3:59:1e:07:0d:f9:c3:6e:1e:84:43:26:2a:11:
8c:61:0e:42:3f:11:4d:8a:58:be:b3:52:4c:6b:f9:
e3:9c:a2:79:81:69:ca:54:7d:5a:15:aa:ba:5c:da:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:50:7D:91:D2:7D:A1:8F:DF:EF:9E:79:3B:4F:9B:71:71:4A:CE:F6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LVB9kdJ9oY_f7555O0-bcXFKzvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.41.0/24
193.124.45.0/24
193.124.90.0/24
193.124.95.0/24
193.124.203.0/24
194.58.45.0/24
194.58.60.0/24
194.87.1.0/24
194.87.24.0/22
194.87.165.0/24
194.87.170.0/24
194.87.179.0/24
194.87.191.0/24
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.226.0/24
194.87.254.0/24
194.135.23.0/24
195.58.54.0/24
195.133.12.0/22
195.133.76.0/24
195.133.82.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cf:fa:7a:5b:25:90:d7:8e:94:43:99:b7:a7:af:1c:83:70:
b6:9e:b1:9a:52:5c:99:cd:0f:a3:64:e2:22:9b:3d:fc:e3:47:
99:c3:a8:49:aa:cb:f2:7b:60:17:46:4d:d9:ab:bf:50:93:8b:
50:d6:cd:fd:96:db:63:05:a5:d7:a2:aa:aa:ba:ba:fa:2f:23:
db:c5:a8:8a:e2:e3:cc:a0:f3:9a:16:e9:8b:3f:d4:99:88:b4:
41:97:9f:61:26:5a:49:15:28:2a:1d:4a:22:57:c0:90:22:41:
ae:5c:74:7b:58:03:2d:54:a8:cf:9b:71:e5:67:df:b9:b3:82:
70:fe:e9:c7:a4:7b:76:b6:3b:3a:8a:88:a8:cf:a1:e4:8f:3e:
03:d3:14:6c:97:a4:21:db:f1:ef:d1:3e:eb:b9:5d:75:f1:2b:
e4:5b:1a:a6:ca:08:5a:ba:20:fa:f8:35:9c:72:f5:a2:43:a5:
48:cd:ed:7c:2f:3e:67:97:7f:e3:62:0b:ca:0c:ce:1e:a1:74:
0d:af:b1:5a:12:36:ed:cf:35:1b:1e:9b:df:99:47:d0:88:a4:
de:75:77:b7:f4:46:35:02:a7:1f:83:bd:33:94:86:2d:d2:59:
ef:81:ad:52:0a:90:b6:97:cc:ad:08:db:96:66:e7:b5:d5:8f:
bf:37:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org