Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kfJKjZhF047lsdQl4b-I1BG9Gwo.roa
File: kfJKjZhF047lsdQl4b-I1BG9Gwo.roa (raw, json)
Hash identifier: rj8DyB1LJ+AtJnh0zYlEFMvpcSclRAEm3ncSyZE5Iaw=
Subject key identifier: 91:F2:4A:8D:98:45:D3:8E:E5:B1:D4:25:E1:BF:88:D4:11:BD:1B:0A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018414096F7F2FFFDEA6F8FE692D0C82FEFC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kfJKjZhF047lsdQl4b-I1BG9Gwo.roa
Signing time: Wed 26 Oct 2022 11:24:33 +0000
ROA not before: Wed 26 Oct 2022 11:24:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
62.76.229.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:09:6f:7f:2f:ff:de:a6:f8:fe:69:2d:0c:82:fe:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 26 11:24:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91f24a8d9845d38ee5b1d425e1bf88d411bd1b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:89:83:9c:9c:4f:76:99:59:26:f2:dd:65:71:
6f:2d:ce:e6:e5:31:f0:79:f6:11:e6:56:4d:5c:be:
08:69:13:0c:1a:78:ce:6c:2b:75:6c:99:bf:69:96:
7d:fb:cf:79:c1:97:8e:24:71:4d:23:eb:e5:8e:7d:
04:86:fc:fa:fe:c6:b4:50:f5:0b:6b:e0:3c:74:01:
21:5f:11:f5:ee:9b:60:26:03:49:fc:c9:88:13:4b:
65:db:3b:ae:cb:90:2b:38:2d:ff:65:75:42:ce:dc:
56:d8:6c:77:f0:8f:f2:f6:c9:bd:fe:74:b8:01:62:
9f:be:6d:4a:e6:b4:f5:29:fa:71:a6:35:27:61:e7:
ba:5a:c6:9d:ae:2f:7f:de:e8:e2:2d:d1:59:25:b9:
42:65:77:0e:22:97:33:39:d5:54:89:e0:41:d6:c0:
23:8b:f5:af:72:1d:15:96:50:3c:a2:5d:39:22:28:
9c:e8:8e:50:b0:6b:5a:df:a0:92:94:89:f2:99:06:
2a:03:39:32:da:11:e0:f9:1a:37:39:bf:a1:29:f0:
02:58:24:71:00:2d:7f:ed:51:2a:28:d1:1e:63:18:
0d:56:50:97:a2:ec:fe:61:0a:27:3d:b9:c0:b2:b2:
37:6b:57:4d:60:2b:ad:cb:82:2b:5f:f6:aa:a7:d8:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F2:4A:8D:98:45:D3:8E:E5:B1:D4:25:E1:BF:88:D4:11:BD:1B:0A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kfJKjZhF047lsdQl4b-I1BG9Gwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
62.76.231.0/24
192.124.173.0/24
192.124.180.0/22
192.124.209.0/24
193.108.112.0/24
193.124.3.0/24
193.124.203.0/24
194.58.45.0/24
194.87.1.0/24
194.87.3.0/24
194.87.16.0/24
194.87.24.0/22
194.87.118.0/24
194.87.165.0/24
194.87.170.0/24
194.87.178.0/23
194.87.198.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.135.23.0/24
194.135.30.0/24
195.58.56.0/21
195.133.55.0/24
195.133.76.0/24
212.193.0.0/24
212.193.2.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b5:d4:72:9f:69:74:49:bb:6c:1f:c3:99:e5:f4:09:1d:75:
2f:4a:ea:b2:c9:95:8e:1f:4c:01:01:95:78:1f:1e:58:52:63:
26:30:17:c8:a3:fc:9d:90:22:5a:e1:ee:96:34:57:fd:6f:08:
ed:42:aa:58:05:0d:f3:2d:33:27:ce:ed:c4:c5:50:77:e6:6c:
10:ed:34:f7:7f:7b:0b:36:4f:6a:e8:3f:9d:fd:9f:12:8f:cb:
23:15:2a:0a:79:b1:29:dd:e1:7d:6a:03:21:f7:a0:ec:04:d4:
b4:bd:96:55:70:f5:24:da:df:4a:8c:5f:af:e3:f7:ab:8d:d1:
28:9b:33:df:84:33:26:2e:cd:42:a4:f2:a2:da:73:c4:c0:25:
d9:18:cd:5c:1e:19:c4:6c:cb:b1:be:66:9a:2c:20:87:62:5d:
69:d6:72:d0:f0:53:f3:33:8f:9b:94:17:d5:ca:5c:e4:6f:9f:
96:ce:6a:5c:19:f5:40:56:70:a1:0b:9c:f2:35:69:24:fd:1d:
db:43:0c:53:bd:92:38:83:ef:0c:6a:d1:5b:cd:a2:cf:d6:84:
ed:d2:dd:bf:60:49:43:7f:a0:c9:4d:8b:23:28:33:cd:a6:dc:
f7:a5:fb:a1:71:5a:0f:f8:71:50:39:28:75:9a:b8:92:26:73:
ee:c5:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:44 2024 by rpki-client on console-ams.rpki-client.org