Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fgfk8UQZJ-2PdJwLa_7bs9qqf-Q.roa
File: fgfk8UQZJ-2PdJwLa_7bs9qqf-Q.roa (raw, json)
Hash identifier: VKzHye08bDWywZVKVGvdUuEMh5y/PAjNqsmNuN3Cec0=
Subject key identifier: 7E:07:E4:F1:44:19:27:ED:8F:74:9C:0B:6B:FE:DB:B3:DA:AA:7F:E4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183A2DDC57CC9808C7CE5E43660035BCCC8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fgfk8UQZJ-2PdJwLa_7bs9qqf-Q.roa
Signing time: Tue 04 Oct 2022 11:59:46 +0000
ROA not before: Tue 04 Oct 2022 11:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
195.133.12.0/22 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
194.87.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:dd:c5:7c:c9:80:8c:7c:e5:e4:36:60:03:5b:cc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 4 11:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e07e4f1441927ed8f749c0b6bfedbb3daaa7fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:49:f4:de:13:90:9c:cf:fa:e9:f5:93:bd:
52:08:9c:26:81:e1:c3:7f:3e:f5:7e:eb:55:c5:59:
31:a2:19:6c:ad:17:11:f4:96:d6:0a:77:77:eb:04:
29:09:96:17:d2:5d:92:51:b9:4f:87:5b:fe:4d:86:
2b:e1:bc:51:98:4f:e5:02:76:99:63:9e:6c:5d:6b:
f8:24:73:e0:f9:a3:81:00:6b:f5:d5:6a:4b:5e:0b:
75:2e:eb:a8:65:f8:ab:78:15:e8:0e:b6:83:fa:88:
f4:8b:33:29:5f:1b:29:64:e1:15:1b:09:da:72:80:
d7:21:bf:97:60:55:fe:55:fb:31:fe:68:bb:1b:ea:
ae:cd:b4:a6:bc:2e:c5:bf:1a:dc:a7:2b:03:9c:68:
77:e4:d5:79:30:f5:a3:87:26:05:59:87:91:1f:65:
64:48:2b:bc:00:0d:1a:37:07:6d:cf:33:58:10:63:
a2:8f:2c:7f:7f:30:f4:7f:c8:31:d9:24:1e:59:3e:
bf:39:11:74:67:c2:b9:0a:04:6a:3a:81:55:86:37:
90:88:fa:f7:f7:28:fe:7d:73:ed:6f:f9:15:7d:b7:
ad:4e:c6:e3:98:6c:cb:33:62:b3:14:f0:68:56:69:
cb:e4:7b:7e:5e:2c:17:5c:21:cd:31:d0:75:49:f1:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:E4:F1:44:19:27:ED:8F:74:9C:0B:6B:FE:DB:B3:DA:AA:7F:E4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fgfk8UQZJ-2PdJwLa_7bs9qqf-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.3.0/24
193.124.45.0/24
193.124.90.0/24
193.124.95.0/24
193.124.203.0/24
194.58.45.0/24
194.58.60.0/24
194.87.1.0/24
194.87.24.0/22
194.87.165.0/24
194.87.179.0/24
194.87.191.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
194.87.226.0/24
194.87.254.0/24
194.135.23.0/24
195.58.54.0/24
195.133.12.0/22
195.133.76.0/24
195.133.80.0/24
195.133.82.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:56:86:15:79:ae:ba:82:e3:dc:cb:ec:7c:a7:bc:5a:90:ab:
85:79:f1:f2:32:cd:ba:cf:d1:07:a3:cb:06:2f:25:fa:54:48:
d2:b8:59:9c:fe:6f:0a:32:c5:e8:a2:25:50:8e:18:99:bd:4c:
b2:45:d2:79:2f:60:d4:ac:54:11:f9:e2:b0:12:7d:38:38:15:
36:a2:ca:3b:6d:73:ca:6e:d8:d8:b9:41:31:29:f4:83:39:fd:
08:ea:c8:97:e6:e1:da:87:90:69:0b:35:93:5e:29:a4:fe:dc:
30:97:08:4c:61:5d:58:4d:bb:59:76:5f:31:ef:1f:28:4a:4f:
ed:fb:99:1b:c5:1a:86:ac:0e:21:4f:d3:8a:68:37:74:b9:b7:
5a:5f:05:de:48:5c:6a:ab:ee:8d:e7:a8:76:d6:ee:b6:26:a3:
7c:fa:04:59:8f:e8:57:11:b0:d4:16:42:47:e3:22:7d:5d:45:
93:86:40:e5:21:b5:07:26:ec:de:9a:99:ce:e8:96:ea:d8:a1:
ba:44:fa:97:13:5a:ae:69:69:20:10:17:c9:82:99:2c:cd:5e:
2d:17:64:14:6a:ae:b1:23:81:84:e8:c4:25:dd:d2:ac:06:ac:
ee:52:53:e1:09:ca:3e:99:79:61:cf:d2:7b:a4:dd:c2:7e:87:
fe:a5:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org