Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ur-8VOCsc9icRnhHLS3QX51IqA0.roa
File: Ur-8VOCsc9icRnhHLS3QX51IqA0.roa (raw, json)
Hash identifier: xbj7Si4LLvmZKUkpfLfAFqavPFCjIb8Bu1g2wU1NKKg=
Subject key identifier: 52:BF:BC:54:E0:AC:73:D8:9C:46:78:47:2D:2D:D0:5F:9D:48:A8:0D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01848A28DC481537EDC501CFDDB19164942A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ur-8VOCsc9icRnhHLS3QX51IqA0.roa
Signing time: Fri 18 Nov 2022 09:54:04 +0000
ROA not before: Fri 18 Nov 2022 09:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.127.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:28:dc:48:15:37:ed:c5:01:cf:dd:b1:91:64:94:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 18 09:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52bfbc54e0ac73d89c4678472d2dd05f9d48a80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:e6:f7:19:59:17:29:a7:a3:f3:ae:06:bb:
ca:7a:2f:17:2e:ee:c2:4c:bf:95:ae:3b:8e:d9:06:
8c:74:3d:87:dd:73:c5:02:41:da:d6:2b:1d:06:ef:
30:5e:31:5d:a7:09:b0:03:b9:91:a5:24:12:ba:0a:
ff:20:e6:7a:2b:83:dc:e9:20:ce:bc:cf:5b:bc:71:
74:0a:90:b0:95:3d:55:1d:c1:76:fa:51:4e:86:3e:
aa:0e:2d:6f:6b:75:51:11:28:03:68:cf:e1:8a:c1:
1e:e0:87:43:4e:c4:c8:c5:59:7e:9d:36:38:cd:06:
73:5a:dc:6d:f9:8f:da:4c:ec:7e:21:74:04:25:72:
be:59:f5:30:49:1c:f9:7a:43:db:4d:9a:f2:53:17:
99:56:6d:d2:eb:aa:09:d7:cc:57:a9:09:14:2e:ba:
1e:a4:85:e7:3f:00:70:eb:0d:28:40:15:8a:d5:0f:
ff:7a:41:2e:e4:72:fb:56:22:e7:2d:0a:3a:a2:68:
2d:26:cb:2d:74:65:69:2c:96:8c:12:91:5a:f7:c6:
10:85:0e:77:6b:bf:74:f2:93:28:e7:a4:c5:ab:b7:
53:88:8b:7a:8f:1f:ad:35:77:d8:cb:1c:49:7d:53:
5e:47:41:fd:fe:89:53:8c:da:6f:23:02:24:cc:6f:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:BC:54:E0:AC:73:D8:9C:46:78:47:2D:2D:D0:5F:9D:48:A8:0D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ur-8VOCsc9icRnhHLS3QX51IqA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.173.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.9.0/24
193.124.16.0/24
193.124.18.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.1.0/24
194.87.7.0/24
194.87.24.0/22
194.87.36.0/24
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.118.0/24
194.87.127.0/24
194.87.137.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0/24
194.87.170.0/24
194.87.179.0/24
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.233.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.30.0/24
195.133.55.0/24
212.192.10.0/24
212.192.209.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ce:91:c2:dc:d6:61:18:75:93:7d:43:f1:df:8f:15:3d:1b:
2d:f2:74:6a:d6:0f:b8:f6:0a:53:56:87:45:3d:4e:d0:6e:bb:
83:82:8f:1b:52:e4:ea:17:60:94:86:04:65:98:88:3b:07:9e:
0c:a5:5a:c3:d1:e5:6a:0d:41:9e:18:07:9b:7a:d9:bb:d7:5a:
4c:c7:ff:bf:46:b7:5c:3f:63:9c:25:ed:8d:3b:e8:e2:18:53:
b1:0f:87:15:0a:ff:f4:13:cb:a3:e4:83:78:d4:a7:51:f0:9d:
86:eb:cb:0d:79:7a:2c:c5:26:67:7c:01:92:88:9e:25:ee:8f:
a1:6c:79:25:c2:ea:2e:c6:f8:88:23:c0:c2:25:43:f6:fa:9c:
f9:48:94:4d:6d:d2:1c:b2:d4:30:8b:7c:fd:d9:5e:3e:01:c6:
f3:07:42:fd:f3:0c:c1:b2:1a:b0:3a:eb:8c:c3:b0:fb:10:7d:
54:cf:37:1f:20:6d:8d:14:99:ba:9f:a3:39:c6:03:2f:f2:01:
39:39:03:af:71:8b:f5:31:b2:18:38:e3:cc:42:a5:32:bf:72:
ef:19:eb:44:92:30:e7:3b:01:c9:e9:7c:e5:3d:c8:84:ee:28:
f3:c6:a7:ad:f1:db:2e:5c:56:ed:73:d8:bd:78:47:15:9b:0a:
18:e4:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org