Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PCW2lcDQxBYBXlacXK-JBKuP3q8.roa
File: PCW2lcDQxBYBXlacXK-JBKuP3q8.roa (raw, json)
Hash identifier: tZ2xjYO4FXzfAicCvMlzrZDLkh5v8vpnju4ebK85Vhc=
Subject key identifier: 3C:25:B6:95:C0:D0:C4:16:01:5E:56:9C:5C:AF:89:04:AB:8F:DE:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0FFB92EB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PCW2lcDQxBYBXlacXK-JBKuP3q8.roa
Signing time: Thu 19 May 2022 15:43:29 +0000
ROA not before: Thu 19 May 2022 15:43:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/23 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268145387 (0xffb92eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 19 15:43:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c25b695c0d0c416015e569c5caf8904ab8fdeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:a3:a9:dc:e8:29:7e:db:1a:13:f6:1c:2e:
2c:e0:6c:c2:11:e4:2a:e6:55:5a:64:d9:98:98:81:
74:5c:ed:d9:5e:df:6a:fe:10:c7:69:40:c0:c5:14:
aa:a9:99:50:dc:f3:3a:e6:9d:34:96:4b:56:ba:a5:
50:52:13:55:3e:e4:52:77:80:31:92:e5:6b:42:f8:
49:e3:5b:ee:82:7a:ac:4f:c1:06:10:28:67:69:db:
35:e5:5c:3e:fd:77:b6:5a:cf:ad:fb:b8:bb:eb:5e:
cd:dd:dd:5a:b8:a0:7b:67:58:0b:6c:04:82:19:ad:
3b:6f:41:59:66:3e:c5:3c:3b:8a:4b:5c:0b:a4:93:
4b:77:89:fd:20:e9:8d:1e:2b:28:52:58:b8:87:23:
21:f4:16:21:24:93:a4:35:33:89:2e:f2:7c:b1:f6:
36:8f:51:cb:31:60:19:6b:f5:ba:32:ed:a1:40:1b:
76:ce:3f:7e:f7:a6:06:97:8f:a3:03:e0:19:5c:0b:
c8:24:b9:84:08:36:2d:c4:67:76:a4:28:4f:42:15:
13:5e:55:90:54:2a:a2:95:d4:9c:b7:14:1a:44:bb:
b6:a5:3c:18:4c:45:31:1d:c9:a1:17:b3:6e:8f:4e:
cb:e2:8c:41:fc:c5:bf:7b:ee:7f:7e:d8:a4:08:9f:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:B6:95:C0:D0:C4:16:01:5E:56:9C:5C:AF:89:04:AB:8F:DE:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PCW2lcDQxBYBXlacXK-JBKuP3q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.89.0/24
193.124.91.0/24
193.124.93.0/24
193.124.95.0/24
193.124.202.0/23
193.124.205.0/24
194.58.60.0/24
194.87.16.0/24
194.87.22.0/24
194.87.64.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.200.0/24
194.87.226.0/24
194.135.23.0/24
195.58.35.0/24
195.58.50.0/24
195.58.52.0/24
195.133.81.0/24
212.192.10.0/23
Signature Algorithm: sha256WithRSAEncryption
37:74:c8:b7:9a:70:fe:7e:de:e3:72:ab:44:2b:49:20:4a:7b:
51:12:b2:48:60:6a:fe:d8:09:92:9a:b6:1c:45:8a:8f:86:3f:
5b:66:35:9c:d1:b3:4e:7a:6a:7d:9c:df:39:fd:6b:99:91:29:
e7:e8:ac:b7:26:f1:6d:bf:fe:ca:18:df:1a:32:f8:ff:6e:35:
df:0c:43:b8:e3:b6:df:5e:34:b8:6f:71:fd:16:84:8d:e3:29:
04:d7:30:d2:a6:e8:b3:54:5a:fa:ba:87:46:6b:f9:52:9f:3e:
f0:48:94:65:72:24:65:e7:ab:0c:be:41:90:1e:c1:ab:7b:65:
21:c1:aa:93:1c:d2:3c:a4:59:c1:2a:72:62:a5:1d:0a:63:cb:
50:f4:e3:d1:19:39:48:9c:bd:01:be:11:97:79:f3:e3:f0:12:
fa:3a:86:ce:35:bf:32:04:00:48:f8:41:d8:60:ea:9e:c2:a3:
5f:d6:e0:f5:ab:e6:be:9c:1f:90:f5:d7:65:d8:35:54:3d:9c:
19:17:8a:14:26:cc:98:f0:48:18:a4:58:71:7c:05:fc:1a:de:
55:fa:df:58:f3:b6:74:ed:af:0e:5e:ef:4c:94:dc:84:ed:c6:
a2:5e:22:33:fb:ba:2c:fb:0e:07:9b:2e:54:56:be:41:5e:03:
df:5a:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org