Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pik_-PcTCmscHRfx8smQL7oSQPo.roa
File: Pik_-PcTCmscHRfx8smQL7oSQPo.roa (raw, json)
Hash identifier: 7qUCgiRYCq8rC3RHy7CVGDyXFDz/ufSu4ZeEeiJY5+8=
Subject key identifier: 3E:29:3F:F8:F7:13:0A:6B:1C:1D:17:F1:F2:C9:90:2F:BA:12:40:FA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018456D39CC6F413A215FAF5BAFF14F061CF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pik_-PcTCmscHRfx8smQL7oSQPo.roa
Signing time: Tue 08 Nov 2022 10:40:19 +0000
ROA not before: Tue 08 Nov 2022 10:40:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:d3:9c:c6:f4:13:a2:15:fa:f5:ba:ff:14:f0:61:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 8 10:40:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e293ff8f7130a6b1c1d17f1f2c9902fba1240fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:f6:df:2d:0b:ea:c8:f7:17:ef:15:19:d0:
38:74:38:8e:57:35:3c:b6:64:eb:89:50:45:16:5d:
d9:81:a2:59:77:c4:01:80:8a:07:fa:09:fb:10:5b:
e3:96:12:37:74:ef:a6:30:e6:93:80:3f:0f:d9:c7:
aa:9c:0e:df:66:13:cf:f3:52:83:13:c4:bb:1b:55:
84:31:2c:d4:81:22:01:db:4b:1c:45:81:1f:1c:f5:
1e:37:ab:fc:44:4d:1c:26:7c:a7:e8:47:ce:29:04:
d8:39:13:ed:8a:98:9b:1d:78:dd:d2:e6:2d:06:6c:
b7:bf:55:7a:78:7e:a3:7d:4f:57:95:84:db:8b:c1:
b3:34:99:8a:60:ff:de:07:fa:67:81:ff:cc:d1:b9:
f7:fa:b0:df:41:3b:df:b0:1c:6e:eb:91:8b:b9:e2:
3e:d6:a6:4a:cc:36:ed:36:8b:7e:92:8c:a7:27:9a:
ef:72:98:f7:e2:7b:f7:2b:73:08:85:58:94:03:1a:
5e:d2:88:73:10:e7:82:69:4f:28:f6:cd:56:a4:3e:
ea:de:bd:99:42:35:7c:9f:ed:11:87:1b:d8:37:3e:
a8:61:0a:7d:e0:a5:6c:42:ff:c6:76:84:78:5a:f4:
57:fd:55:e6:d6:b2:24:fc:ad:0b:4f:5f:e4:97:cd:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:29:3F:F8:F7:13:0A:6B:1C:1D:17:F1:F2:C9:90:2F:BA:12:40:FA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pik_-PcTCmscHRfx8smQL7oSQPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.173.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.18.0/24
193.124.200.0/23
193.124.203.0/24
194.58.38.0/24
194.58.40.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.1.0/24
194.87.3.0/24
194.87.16.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.118.0/24
194.87.163.0/24
194.87.165.0-194.87.166.255
194.87.170.0/24
194.87.179.0/24
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.135.30.0/24
195.58.56.0/21
195.133.30.0/24
195.133.55.0/24
195.133.76.0/24
212.192.10.0/24
212.193.0.0/24
212.193.2.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
56:15:f6:ca:42:26:b3:7d:cf:c2:fc:5e:06:ac:9f:17:4c:1e:
71:34:34:07:c1:c2:97:64:ea:45:d4:42:b9:9a:f0:37:5c:43:
ba:30:ba:af:53:e5:88:2d:d8:9b:fa:8f:54:e7:36:0e:5e:3a:
96:1f:e9:e4:09:60:34:39:e7:98:c0:d6:2a:9a:ec:ac:87:ab:
72:f0:a0:23:e6:b2:e7:82:2c:c1:f6:67:49:5f:80:66:7a:0e:
a4:f0:54:48:e8:14:d5:c5:70:0c:97:db:0c:e2:d2:c9:c5:15:
dc:42:16:89:92:f4:0c:05:8c:21:16:2b:29:6a:7c:0b:56:7c:
67:0a:b6:26:06:10:d8:7f:c1:09:78:76:03:a8:7c:03:04:e0:
7b:b9:29:31:e0:be:d6:72:b6:7e:64:73:86:85:09:33:4f:76:
b0:01:41:8b:58:f9:51:7a:4c:2f:60:9e:2f:dc:16:4d:33:00:
54:96:1a:10:48:55:d1:78:95:17:7e:0b:1b:25:65:41:b7:34:
9f:8a:bc:f8:d8:63:65:08:86:12:32:64:f5:02:0a:bf:63:0a:
c3:1c:96:f0:fd:51:83:cd:5d:c6:0b:50:3d:17:0d:d1:2c:68:
46:d6:de:df:a9:ab:88:8c:26:c7:76:af:3a:01:5d:5c:47:64:
83:f9:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:03 2023 by rpki-client on console-fra.rpki-client.org