Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iqvN0E2oa4iDx9yB-TOZ7RPCBlY.roa
File: iqvN0E2oa4iDx9yB-TOZ7RPCBlY.roa (raw, json)
Hash identifier: 5E8zZi9IeAR6IR8cgaDgoGWqCrM9XmcvgbFA+h6kn1U=
Subject key identifier: 8A:AB:CD:D0:4D:A8:6B:88:83:C7:DC:81:F9:33:99:ED:13:C2:06:56
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018410950688882DAA9D58B98ACC0A83B729
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iqvN0E2oa4iDx9yB-TOZ7RPCBlY.roa
Signing time: Tue 25 Oct 2022 19:18:32 +0000
ROA not before: Tue 25 Oct 2022 19:18:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.45.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:95:06:88:88:2d:aa:9d:58:b9:8a:cc:0a:83:b7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 25 19:18:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8aabcdd04da86b8883c7dc81f93399ed13c20656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:a9:65:84:9d:c9:a8:48:ce:46:3d:49:64:
b1:6c:13:2a:4d:9e:90:78:d1:22:00:c8:00:c5:6a:
c6:ea:62:be:9a:05:4e:f8:09:64:69:f4:df:83:6c:
3d:5d:8d:f8:ec:4f:2f:e5:b7:5a:1c:d4:78:a4:63:
08:74:ea:ee:e7:f0:1a:0d:38:75:da:e1:a4:d1:4d:
17:07:c5:d6:0c:97:b4:68:56:8d:8b:8f:7b:1b:82:
4f:f9:02:88:ac:58:b2:86:e0:93:be:70:65:23:38:
fa:19:1f:d1:9a:7d:3a:19:79:e0:28:0d:5a:1e:f0:
b1:cc:b5:56:7c:a3:12:4b:e3:5e:f9:e4:42:ca:98:
67:0a:79:85:7e:81:13:99:41:94:27:a2:71:b2:75:
1a:5a:48:4a:9e:b2:9a:05:0a:36:71:5e:57:f8:42:
62:e5:b1:26:8c:3e:be:94:64:38:ce:3a:e0:96:e2:
d0:37:bc:e6:83:a6:c1:81:4d:0c:36:c7:d9:f2:70:
50:05:98:61:b7:34:d4:b0:10:c9:ed:49:6d:30:6c:
05:a4:c8:70:cc:f5:7c:db:f6:26:a4:7e:18:0d:46:
11:78:82:e1:6b:ec:f7:42:af:da:c2:ca:30:a7:5b:
30:cb:25:a0:8a:2d:d5:8b:f2:d6:0d:ad:a9:e7:9f:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:CD:D0:4D:A8:6B:88:83:C7:DC:81:F9:33:99:ED:13:C2:06:56
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iqvN0E2oa4iDx9yB-TOZ7RPCBlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.203.0/24
194.58.45.0/24
194.87.1.0/24
194.87.3.0/24
194.87.16.0/24
194.87.24.0/22
194.87.118.0/24
194.87.165.0/24
194.87.170.0/24
194.87.178.0/23
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.135.23.0/24
194.135.30.0/24
195.133.55.0/24
195.133.76.0/24
212.193.0.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:da:c9:d3:ee:73:7a:0c:bc:5f:43:d8:ce:16:c1:4d:1e:f0:
15:54:6c:39:5f:c3:a3:60:78:7a:b0:77:fa:81:ac:6d:c4:eb:
b1:c0:e9:a7:cf:7e:5c:9f:7e:8a:22:c0:29:f2:1d:21:9f:09:
5f:73:c4:2b:51:cd:89:ce:83:ea:62:0e:73:1f:e9:aa:d7:9b:
20:c5:85:ce:86:9a:3e:45:86:cc:7e:02:10:bc:58:40:70:3c:
a2:db:80:c5:95:31:3c:92:0d:c3:93:61:65:46:90:cc:16:92:
78:e8:20:34:a2:ee:88:54:42:32:77:09:31:13:b7:b4:b1:2c:
84:1a:48:c3:4f:5f:ad:f6:c9:ff:1b:5d:36:9e:47:10:3f:d6:
ab:d1:ec:d1:58:f7:6a:7a:1f:f9:48:65:22:9d:73:9c:9d:ef:
3c:d4:49:0e:6e:39:69:4a:ae:4f:4f:18:e2:e8:c2:19:e9:d4:
34:25:88:00:cb:bd:3c:9d:79:4f:e6:67:5e:72:e6:79:7b:fe:
3c:3c:3c:54:7e:a6:90:d0:f3:cd:43:e1:41:cd:20:81:5b:20:
3f:da:f2:ca:2e:b9:02:95:da:15:93:e9:c3:16:8e:02:e8:83:
7b:5f:6d:f0:d5:f5:17:d2:03:4c:c2:9f:e5:dc:44:36:ae:61:
8d:ca:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org