Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bYQFF8ukFhWetd3qYcMOG67vlCM.roa
File: bYQFF8ukFhWetd3qYcMOG67vlCM.roa (raw, json)
Hash identifier: vuMJWDg7Y/9kZvT93oIIYiFv6HHOK5H4eoWv2uNSoBs=
Subject key identifier: 6D:84:05:17:CB:A4:16:15:9E:B5:DD:EA:61:C3:0E:1B:AE:EF:94:23
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01840FE8E5D611FE18125DF2BC9AD3DDFCA7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bYQFF8ukFhWetd3qYcMOG67vlCM.roa
Signing time: Tue 25 Oct 2022 16:10:32 +0000
ROA not before: Tue 25 Oct 2022 16:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.45.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:e8:e5:d6:11:fe:18:12:5d:f2:bc:9a:d3:dd:fc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 25 16:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d840517cba416159eb5ddea61c30e1baeef9423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:3b:4f:ad:cf:f9:67:33:9b:11:19:d9:90:
90:90:65:b3:fa:8c:e6:85:89:c5:c1:e3:bd:0e:b8:
fe:79:21:56:16:65:92:7d:d8:a9:71:d4:41:39:c9:
94:85:ab:dd:cd:26:ac:44:70:01:14:71:15:58:f2:
c9:39:47:94:b4:d6:23:1f:e1:8e:19:10:58:7d:e1:
b6:97:d4:44:02:bb:69:5c:14:fe:12:b8:da:40:ba:
b2:8d:d0:7d:6a:0b:27:b3:58:6c:c4:32:1a:4e:4c:
80:c3:0d:a3:8a:11:47:4f:b0:bd:6b:b7:1e:8e:49:
e4:2a:99:70:86:ad:c6:19:5e:2a:15:83:cf:ea:9b:
c1:3f:bd:10:9e:68:cc:0a:34:a9:76:98:e3:46:c5:
e2:9b:9c:18:d9:e3:bc:5c:d4:69:ef:13:a1:24:77:
40:23:48:70:24:76:b7:de:fe:f5:04:62:e2:07:2a:
f8:74:fc:63:b2:4b:7c:db:61:8e:2b:6e:ba:ba:4d:
dd:2a:fb:94:a8:cb:d9:88:25:8c:4f:d6:d9:aa:67:
90:52:7b:b9:66:54:bf:ac:2c:e4:fb:5e:bf:94:64:
28:a4:73:8c:74:04:47:f2:6c:2b:50:a3:aa:ae:ed:
a0:59:d9:70:4a:54:5f:87:94:35:da:64:f6:08:59:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:05:17:CB:A4:16:15:9E:B5:DD:EA:61:C3:0E:1B:AE:EF:94:23
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bYQFF8ukFhWetd3qYcMOG67vlCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.203.0/24
194.58.45.0/24
194.87.1.0/24
194.87.3.0/24
194.87.16.0/24
194.87.24.0/22
194.87.118.0/24
194.87.165.0/24
194.87.170.0/24
194.87.178.0/23
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.135.23.0/24
194.135.30.0/24
195.133.55.0/24
195.133.76.0/24
212.193.0.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:44:5a:50:81:85:26:82:2a:de:b6:ec:f2:34:31:df:32:cc:
3f:e9:57:98:f0:a1:a9:13:e5:cc:a2:c7:93:bf:9d:60:d0:40:
7a:26:7b:3e:f7:97:9d:b2:35:b6:a8:22:30:0c:5c:d0:ae:89:
7a:77:18:71:36:b5:aa:34:59:d9:eb:f7:6a:7b:b9:6c:c4:41:
cf:dc:6d:e1:eb:80:9c:28:5f:06:db:66:54:b3:8d:ee:42:dd:
ac:f1:31:fc:7d:db:bd:ac:65:fd:3c:8c:c7:61:da:61:2d:6d:
bc:70:49:65:2e:ab:4c:b3:2f:be:79:a9:b3:9e:14:ce:99:07:
5e:fb:c1:a1:cd:41:51:2f:7b:66:27:da:5c:5d:06:8d:8c:3a:
42:b4:9c:b9:8c:95:06:5a:ea:f1:da:6b:76:7e:15:6a:fc:37:
3e:f5:00:70:26:00:ec:c8:70:94:2f:24:a7:3e:28:ba:61:e1:
0c:e3:f5:12:fa:4d:dd:7f:73:90:ff:a6:01:2a:7d:05:63:3b:
83:be:f9:7c:70:16:d8:f2:8a:c0:98:2e:51:e5:fb:61:37:a6:
df:70:b4:02:e2:58:b3:91:45:5d:69:c2:50:b1:37:e7:a7:63:
b5:55:fc:e5:30:36:df:ac:5c:0d:3e:7f:8e:98:e0:ba:9c:8e:
52:f2:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:21 2024 by rpki-client on console-fra.rpki-client.org