Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X-2h9R5HnczkxcoCKo978ExwpKU.roa
File: X-2h9R5HnczkxcoCKo978ExwpKU.roa (raw, json)
Hash identifier: pWO86sJX/3pr8nkpMAzZQp7a2LFaVBkNvamEW7WjDKY=
Subject key identifier: 5F:ED:A1:F5:1E:47:9D:CC:E4:C5:CA:02:2A:8F:7B:F0:4C:70:A4:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 105960BF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X-2h9R5HnczkxcoCKo978ExwpKU.roa
Signing time: Mon 13 Jun 2022 07:02:08 +0000
ROA not before: Mon 13 Jun 2022 07:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
193.124.124.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/23 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
194.87.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274292927 (0x105960bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 13 07:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5feda1f51e479dcce4c5ca022a8f7bf04c70a4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:43:c7:65:77:11:cd:a2:19:07:e0:cc:39:
d8:94:fd:f4:38:18:66:f4:32:30:86:a6:61:6c:5c:
4e:ab:ec:f7:b2:b2:00:51:b9:61:25:3e:de:e2:98:
98:db:10:18:90:37:40:28:f1:98:1f:40:c1:84:3d:
b0:cf:fc:d6:b7:76:1a:20:ac:c9:d3:d1:77:8c:5d:
d5:e0:fb:19:1a:83:58:c5:06:0d:cc:b6:1a:42:1e:
c2:46:ab:15:b5:84:6b:79:c3:4e:71:7f:5a:98:07:
50:bf:5a:33:78:8e:5a:f4:f9:e7:22:af:ec:8c:35:
ea:40:ea:c1:48:fd:60:53:e1:f7:d3:b4:bb:d4:96:
ed:69:9d:cc:fb:8f:73:45:85:5d:74:05:6f:75:67:
65:05:5e:94:b2:4f:60:2b:be:9a:5b:19:fa:3c:e2:
f2:77:42:71:f3:9a:eb:1f:ca:d0:d3:62:b7:62:f9:
80:1b:02:d1:4c:fc:2e:a4:68:fd:43:0f:fc:a9:52:
67:c1:45:1a:20:b8:90:1f:05:9f:10:8e:2b:e6:f7:
9c:eb:fa:ff:c2:65:be:a2:92:66:71:54:74:85:ab:
89:7c:5d:3c:ba:86:a7:f9:35:3e:b6:ad:ef:b0:95:
ec:28:b8:fd:87:f4:70:34:49:a6:af:2b:65:ea:5f:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:A1:F5:1E:47:9D:CC:E4:C5:CA:02:2A:8F:7B:F0:4C:70:A4:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X-2h9R5HnczkxcoCKo978ExwpKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.41.0/24
193.124.89.0/24
193.124.93.0/24
193.124.95.0/24
193.124.124.0/23
193.124.202.0/23
194.58.41.0/24
194.58.60.0/24
194.58.67.0/24
194.87.1.0/24
194.87.7.0/24
194.87.16.0/24
194.87.30.0/24
194.87.56.0/24
194.87.64.0/24
194.87.77.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.226.0/24
194.87.254.0/24
194.135.23.0/24
194.135.124.0/24
195.58.52.0/24
195.133.73.0-195.133.75.255
195.133.77.0/24
212.192.10.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:26:81:3e:96:fd:5e:a8:5d:5d:47:82:67:22:ad:aa:b7:d1:
3e:82:ee:31:82:d1:44:3e:88:0e:67:40:d2:bf:62:9d:0b:bc:
c1:b9:ff:c9:a0:55:f1:5c:f8:a6:71:85:08:80:2c:cc:7a:41:
9a:23:fe:79:47:7e:e4:71:cf:64:0d:35:ad:cd:4a:fd:ba:82:
66:63:79:bb:8e:7f:29:ab:99:55:bc:a0:cf:6f:ac:39:aa:22:
f2:0c:6a:ee:be:40:32:e6:8b:80:f4:1f:1e:4f:f3:79:99:c9:
55:2d:52:41:28:8d:56:ca:9e:8f:54:15:28:1c:90:13:af:1f:
ae:aa:08:95:ad:87:96:9f:07:8d:2c:e9:83:ed:8d:0c:11:73:
a6:d5:a5:6c:f3:1b:11:28:00:69:72:80:79:28:f1:53:87:77:
e8:ad:aa:3a:e4:af:98:d8:d3:44:9e:d1:1c:7e:2e:87:03:a9:
38:3e:5a:2f:28:de:bd:df:6e:e9:c5:5e:8c:de:23:fc:ea:7d:
e0:ec:28:a2:94:0d:31:17:e4:eb:01:8f:6d:02:22:71:af:ed:
1c:31:4f:65:cd:ba:ab:fb:cf:26:b4:c5:2e:da:a9:a9:f4:58:
c3:95:eb:78:73:de:f2:81:40:bb:73:82:fe:6a:b1:3f:d7:72:
ce:2c:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org