Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pzv9wIUwjnJxhqD_-paRyqaUJDw.roa
File: Pzv9wIUwjnJxhqD_-paRyqaUJDw.roa (raw, json)
Hash identifier: +KMYCQ7C/qvW5X6DMs86JUCEF/EdlXMHHqRODFrL9vU=
Subject key identifier: 3F:3B:FD:C0:85:30:8E:72:71:86:A0:FF:FA:96:91:CA:A6:94:24:3C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0FDEFBB5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pzv9wIUwjnJxhqD_-paRyqaUJDw.roa
Signing time: Fri 13 May 2022 08:03:02 +0000
ROA not before: Fri 13 May 2022 08:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 62.76.232.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.10.0/23 maxlen: 24
194.87.22.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/23 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
212.193.0.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/23 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266271669 (0xfdefbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 13 08:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f3bfdc085308e727186a0fffa9691caa694243c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:72:d7:74:3a:09:ce:e8:29:15:5a:ba:6d:
bf:f4:5e:b8:d7:a6:82:83:b1:a1:fb:ad:fa:30:85:
82:11:0e:b4:12:81:dd:53:e2:c7:2a:c3:f3:8d:7c:
03:46:e5:24:35:10:bc:a9:24:46:38:ca:09:91:22:
82:01:bd:87:59:47:b7:8a:c5:74:c0:c0:08:1b:97:
d3:26:62:2d:b8:2e:95:cb:a7:48:1b:25:1e:6f:40:
af:a9:5c:b2:1b:50:06:21:e5:6b:c7:45:53:c3:d3:
7e:85:49:e8:2c:6c:86:94:36:7c:16:3e:71:74:07:
fb:82:88:46:87:df:f3:4f:8a:1b:14:f7:df:5d:d5:
01:9e:64:6b:f1:f0:59:e0:1d:fd:0d:d2:0f:7d:7a:
a4:f4:af:fb:81:bc:7e:79:d5:4c:67:db:19:c1:b1:
02:f7:e2:59:d7:17:fb:d1:d9:1e:e7:92:b6:a3:b8:
90:c2:8c:61:35:cf:d1:bf:62:20:b1:79:6e:00:ee:
96:82:e8:d2:42:90:af:9a:3e:42:05:d9:40:43:01:
ab:8e:c4:84:9f:01:5d:5b:5f:cd:f4:76:a7:18:a1:
4f:fa:97:11:4d:0e:71:ec:d3:38:25:cd:84:a2:03:
65:46:de:6b:08:4b:0d:7a:56:ac:f6:7e:f5:10:d7:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3B:FD:C0:85:30:8E:72:71:86:A0:FF:FA:96:91:CA:A6:94:24:3C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Pzv9wIUwjnJxhqD_-paRyqaUJDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.209.0/24
193.124.89.0/24
193.124.91.0/24
193.124.93.0/24
193.124.95.0/24
193.124.202.0/23
193.124.205.0/24
193.124.207.0/24
194.58.60.0/24
194.87.2.0/24
194.87.10.0/23
194.87.22.0/24
194.87.64.0/24
194.87.67.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.200.0/24
194.87.226.0/24
194.135.23.0/24
195.58.35.0/24
195.58.50.0-195.58.52.255
195.58.54.0/23
195.133.81.0/24
212.192.10.0/23
212.193.0.0/22
Signature Algorithm: sha256WithRSAEncryption
14:b2:54:d2:6a:6c:00:e0:23:3a:53:f5:f5:27:38:6c:0a:b9:
43:8f:87:59:c2:bc:31:8f:64:5f:42:f4:a2:bd:b1:ab:1e:5d:
02:1b:41:ab:47:61:c6:3f:f4:72:5a:b6:94:36:54:a3:1a:0e:
c9:9b:96:d3:c9:5c:21:76:8f:45:fd:b2:d2:32:0a:23:e2:07:
bc:94:31:45:75:82:14:79:d3:b0:6f:d5:e4:4d:8b:30:a6:d9:
bd:fc:71:74:ee:0b:79:c2:14:a1:34:b7:e9:58:3b:de:ae:ed:
ce:52:a4:a5:95:f6:58:90:e6:03:f9:05:ae:c1:f2:8a:63:d1:
ae:f1:8b:e5:2f:df:2c:cc:59:47:a2:21:82:c2:85:15:73:36:
1a:76:f5:39:a1:56:6f:86:38:e3:ed:94:01:28:b2:8b:53:03:
bc:99:19:5a:4a:cc:33:15:87:d0:5d:dc:2c:f4:39:cc:58:bc:
a3:83:b8:96:19:3a:30:74:74:a3:c3:5b:84:aa:56:b9:be:b2:
75:e7:06:fd:a3:a0:e3:24:ec:4d:45:26:84:7c:b2:1b:14:19:
b1:41:ea:d9:7a:ff:ff:e9:c8:b2:ee:87:02:b6:0f:78:e0:09:
e9:46:a7:ee:53:2b:57:d5:b7:30:7b:22:25:96:1b:3b:e7:08:
d9:3a:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:03 2023 by rpki-client on console-fra.rpki-client.org