Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V1funvarbzDfjXPCBrpgIdIXbJI.roa
File: V1funvarbzDfjXPCBrpgIdIXbJI.roa (raw, json)
Hash identifier: 7wunTYzU7ktpwXcM8BN10EPJT+Zxt0tnjS8vYLzwZ+E=
Subject key identifier: 57:57:EE:9E:F6:AB:6F:30:DF:8D:73:C2:06:BA:60:21:D2:17:6C:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01851B87C9B034D4C158FC2C6C952192E8D1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V1funvarbzDfjXPCBrpgIdIXbJI.roa
Signing time: Fri 16 Dec 2022 15:22:41 +0000
ROA not before: Fri 16 Dec 2022 15:22:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.164.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:87:c9:b0:34:d4:c1:58:fc:2c:6c:95:21:92:e8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 16 15:22:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5757ee9ef6ab6f30df8d73c206ba6021d2176c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:a9:47:64:0c:33:14:ab:c8:4b:6c:6b:26:
c8:e1:bf:4c:a3:bf:29:c4:1b:e4:c6:94:a2:61:5c:
c9:7b:b4:cc:d7:39:ef:62:c3:48:d1:71:69:7a:19:
92:cc:1f:a2:9f:4c:99:63:32:47:f6:bc:d4:c7:c2:
5f:26:7f:b2:57:35:c5:a8:d0:21:44:91:a1:4c:30:
67:8a:2e:1f:d4:c2:0f:97:f9:95:05:56:ec:77:61:
e1:22:14:44:7c:f3:d5:5a:7f:97:0f:f8:18:6b:e8:
35:66:0f:88:82:10:61:a4:fb:ba:51:87:c1:3a:19:
98:3a:c2:08:e5:78:48:54:76:ca:45:ca:cb:68:25:
64:de:ff:2f:01:75:0b:c5:6f:b9:78:9e:32:dc:5d:
b9:51:2f:6d:fd:72:37:11:65:07:d6:ec:46:cb:f4:
28:a7:29:2c:87:91:71:0d:fc:82:4d:d1:95:a8:09:
96:ff:2a:0d:3e:f4:e5:ed:d8:6a:d1:c1:54:34:cd:
a5:b9:d0:b4:0c:f0:b8:8a:4e:40:7a:83:c6:cd:3c:
aa:4e:9d:95:e3:84:f9:04:13:21:7c:fa:57:26:7e:
6c:50:ca:ea:3d:fd:1c:9d:3e:a0:e4:7f:b4:5c:65:
52:da:7e:16:7d:1d:c5:c3:ae:97:53:6d:4f:db:49:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:57:EE:9E:F6:AB:6F:30:DF:8D:73:C2:06:BA:60:21:D2:17:6C:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V1funvarbzDfjXPCBrpgIdIXbJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.9.0/24
193.124.18.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.149.0/24
194.87.160.0/23
194.87.163.0-194.87.165.255
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.15.0/24
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.10.0/24
212.192.210.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
62:57:61:30:86:6f:16:5a:12:92:be:82:53:f5:4a:c2:c0:29:
aa:83:a3:30:87:5a:7f:af:98:c4:24:de:9b:6a:f1:ac:69:2a:
58:45:5f:20:64:96:a9:03:23:48:b2:f9:83:24:f9:a1:f7:0a:
f2:de:3a:86:0b:9d:70:6e:21:e5:d6:a1:26:3f:c4:e8:df:0e:
9a:b4:fd:06:f0:12:e8:b1:f1:23:e4:1f:44:74:42:b8:cb:54:
96:8e:2a:7f:c2:f2:f5:2e:7a:48:3e:ea:3c:85:b1:ff:dc:fe:
4f:fb:cd:62:4f:4c:9b:22:7b:79:d1:24:fe:eb:2c:88:74:b6:
52:1b:0d:f7:07:c9:51:5a:c2:ea:a1:ef:4a:50:4a:6e:1b:ab:
fe:f8:20:50:76:2a:cf:7a:c0:28:1b:c6:8c:14:2a:94:7d:10:
a4:f4:b0:eb:36:dd:a9:0d:41:c6:38:ee:5c:5f:8a:99:3e:06:
6b:43:de:b3:6a:f2:6f:f4:63:8a:25:56:68:cd:24:c5:ec:d9:
4b:d7:be:31:87:af:d5:27:9c:88:7f:83:1c:a8:fb:a1:40:9d:
62:41:80:2d:15:ff:08:7f:47:10:5a:83:ba:fb:98:45:89:38:
7c:5f:17:b9:98:dc:8c:a4:6a:f1:70:4e:a4:7f:32:18:26:a7:
b4:ac:ce:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org