Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U2Qq7HnHPDVeIXp7bD7UkmZQxX8.roa
File: U2Qq7HnHPDVeIXp7bD7UkmZQxX8.roa (raw, json)
Hash identifier: vK4rglzBelC0sncfzxgj3DG7uDPOZrjJwtsufKdRDyE=
Subject key identifier: 53:64:2A:EC:79:C7:3C:35:5E:21:7A:7B:6C:3E:D4:92:66:50:C5:7F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01852E837944669C1FD3F0E568A9B8B0FDC4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U2Qq7HnHPDVeIXp7bD7UkmZQxX8.roa
Signing time: Tue 20 Dec 2022 07:50:46 +0000
ROA not before: Tue 20 Dec 2022 07:50:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:83:79:44:66:9c:1f:d3:f0:e5:68:a9:b8:b0:fd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 07:50:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53642aec79c73c355e217a7b6c3ed4926650c57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:16:17:76:03:00:d6:43:56:20:1a:37:46:
b4:1c:38:27:3c:6e:19:c0:31:d5:90:50:50:9d:ec:
7a:72:93:c8:4a:01:b9:bb:fe:04:30:c0:22:c6:ce:
64:08:50:66:cc:27:da:db:f4:ab:bd:b8:cc:89:88:
38:a6:75:2e:f3:2a:53:c8:c3:e8:02:ae:6c:da:09:
e7:e8:30:4c:54:a1:1b:74:93:95:2d:d4:71:77:4f:
95:23:27:76:3c:2f:33:bb:48:7c:ab:4d:79:f6:ba:
5c:96:b5:75:68:b6:28:4f:ed:97:ed:0d:65:a2:e2:
17:8c:c5:46:df:3c:e8:66:2b:f7:0f:c4:a3:67:db:
89:d0:c7:66:64:01:0c:04:7c:08:bf:0d:d6:f6:0c:
8d:8a:35:4e:49:e1:93:e1:46:97:e7:9d:1b:75:24:
ff:76:7e:73:35:af:94:4f:2e:bf:a6:43:85:4b:98:
2a:8e:8e:6b:88:78:bb:79:9e:fe:96:51:81:5d:e0:
4a:3d:32:9b:5d:c8:04:46:a4:91:84:11:66:e1:95:
ec:05:87:68:16:b3:89:25:38:45:c1:6d:cf:55:2d:
6b:34:54:d7:c0:80:43:d5:74:57:9c:5b:49:1b:b3:
42:a6:4d:c3:b2:21:58:16:b3:9d:ff:3d:e3:67:7e:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:64:2A:EC:79:C7:3C:35:5E:21:7A:7B:6C:3E:D4:92:66:50:C5:7F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U2Qq7HnHPDVeIXp7bD7UkmZQxX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.9.0/24
193.124.18.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.149.0/24
194.87.160.0/23
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.15.0/24
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.10.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
24:db:df:c8:22:b6:f9:8c:cc:62:f3:ea:89:eb:9a:1b:8f:e0:
cf:2a:53:6f:fb:09:f5:9f:c6:af:61:0c:8a:bb:d4:39:61:39:
a8:69:2d:24:3f:9e:02:d4:e3:d8:04:a4:19:d5:bd:02:30:ef:
7e:30:6b:d6:8b:7d:c4:2e:8a:00:bc:9a:bd:0b:fa:3b:e4:47:
c9:f5:0f:a6:3a:5e:7c:35:a6:12:14:88:ac:5a:b3:68:15:9d:
c0:8a:b8:aa:6b:04:d0:76:bc:f7:e6:8a:2e:25:85:71:8a:8f:
aa:54:0c:d8:e0:d0:5c:83:4e:95:f1:06:62:cd:c5:47:3a:00:
43:c9:42:96:82:5d:87:c1:de:a8:5d:24:6b:c5:b8:f8:d1:37:
9f:8b:15:b7:88:89:39:44:87:a8:6d:07:84:44:06:a4:ec:c5:
b7:a9:c8:09:af:84:3b:02:b2:50:3e:05:29:ee:73:94:03:31:
cd:c2:92:71:73:78:ee:d2:4d:eb:11:1e:ee:e9:04:f9:eb:b5:
6d:e6:7f:6d:24:db:47:98:ff:29:d1:3e:47:5f:3f:c9:52:5d:
8b:60:da:74:96:d1:f9:43:30:75:e9:46:b1:f6:51:78:24:a5:
3f:d9:1f:cb:df:bc:b1:53:b7:42:eb:07:bd:6f:7a:12:21:a8:
8f:41:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org