Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TfASNs6MFW20vkTQqE8oGqCY964.roa
File: TfASNs6MFW20vkTQqE8oGqCY964.roa (raw, json)
Hash identifier: qd1yIfqT2hAI1B+QbP+S0EH7uQLBTbaN9ZC3t0VAwRE=
Subject key identifier: 4D:F0:12:36:CE:8C:15:6D:B4:BE:44:D0:A8:4F:28:1A:A0:98:F7:AE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184C3E208172976C9982AECF8B8395397A5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TfASNs6MFW20vkTQqE8oGqCY964.roa
Signing time: Tue 29 Nov 2022 14:54:41 +0000
ROA not before: Tue 29 Nov 2022 14:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.164.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:e2:08:17:29:76:c9:98:2a:ec:f8:b8:39:53:97:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 29 14:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4df01236ce8c156db4be44d0a84f281aa098f7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:a4:87:fa:06:b8:c3:e8:9b:ca:2f:c6:92:
78:ff:23:06:1a:33:c8:44:c1:60:a4:5d:71:d6:b6:
26:af:d4:99:ca:5c:4e:c9:e1:d3:7e:35:02:ec:92:
61:2d:f2:4d:2a:06:8c:7f:d5:05:18:6a:65:72:ab:
d0:0c:60:cd:dd:ef:cd:a1:07:d0:ef:a1:be:f7:58:
2a:2d:cc:28:c1:56:2b:ed:a3:23:95:03:81:e6:95:
63:d4:de:58:31:0c:4c:e0:8b:0b:bf:12:df:ba:f5:
3a:7e:3d:31:8b:fe:d4:c7:52:36:b5:cb:32:8d:f2:
e0:cb:9a:75:1d:75:e4:b3:37:a0:d3:42:42:82:fa:
1d:c3:3f:0c:95:cc:8f:45:06:fb:af:c2:d4:31:20:
1e:e4:40:cc:ca:87:b2:81:88:e2:83:21:06:19:4d:
a7:c9:15:c2:03:11:25:57:18:25:46:9c:a8:aa:2b:
44:89:1b:96:e5:0c:c8:a8:6d:6f:a0:00:44:71:10:
0f:db:bc:6d:86:b5:2c:b9:84:43:35:f5:18:31:53:
81:e9:9f:8c:c8:0e:22:ec:e0:ac:7a:97:91:ff:30:
26:88:3b:ec:6c:af:c2:e1:51:13:ca:af:06:45:47:
65:99:2d:fa:68:76:dd:20:5a:c8:29:02:cc:a8:f1:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:12:36:CE:8C:15:6D:B4:BE:44:D0:A8:4F:28:1A:A0:98:F7:AE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TfASNs6MFW20vkTQqE8oGqCY964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/23
192.124.178.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.9.0/24
193.124.18.0/24
193.124.45.0/24
193.124.201.0/24
193.124.203.0/24
193.124.205.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.32.0/24
194.87.36.0/24
194.87.56.0/24
194.87.64.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/23
194.87.160.0/24
194.87.163.0-194.87.165.255
194.87.170.0/23
194.87.176.0/24
194.87.191.0/24
194.87.198.0/23
194.87.202.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.233.0/24
194.87.250.0/24
194.135.18.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.30.0/24
195.133.55.0/24
212.192.6.0/24
212.192.10.0/24
212.192.208.0-212.192.210.255
212.192.222.0/24
212.193.0.0/24
212.193.6.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b6:71:54:04:0f:be:46:2f:7c:bd:03:f3:ea:c1:d5:d1:dc:
ac:6f:31:7c:59:26:69:34:51:62:10:91:b8:1c:94:46:6c:e9:
98:2d:9c:26:27:e8:b8:92:3c:e5:51:1d:9b:6f:e9:77:60:ee:
3b:63:89:8b:4c:b0:54:76:d9:2b:23:ea:37:15:f5:d9:58:d1:
3c:02:9d:65:05:d0:66:b5:fd:e5:53:04:f8:99:d4:b4:3c:02:
c3:5e:84:f9:e6:9f:ba:8b:58:20:12:9a:63:14:06:77:0a:bb:
f0:79:01:93:27:46:22:eb:c8:d5:76:6d:a7:84:a1:52:50:d8:
6c:4f:57:82:dd:12:4c:a1:41:c7:37:bc:1c:61:6a:1c:4d:11:
b0:a0:9b:82:f9:5f:18:d0:0c:01:c4:64:b9:fd:d4:6e:67:75:
7c:b7:75:a1:20:3c:7d:de:de:8b:1b:43:9a:8b:91:4f:8a:a3:
3f:71:de:d3:e2:32:1c:ae:74:e7:83:58:58:7e:65:25:86:ef:
d2:dd:a9:36:47:a7:48:f8:c3:11:e5:ef:f6:d6:29:ae:d7:cf:
ec:3e:3a:33:a0:9b:72:53:c9:ea:63:4b:08:18:03:69:b5:67:
2a:bd:ee:c4:08:03:5e:15:e9:4d:4b:1e:c3:0e:d9:2a:06:74:
5e:11:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org