Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mwH2wcmU6cZkx6tMkfGZwLe2bNs.roa
File: mwH2wcmU6cZkx6tMkfGZwLe2bNs.roa (raw, json)
Hash identifier: JOu1Web30U3/WITjzxOQqMHwefMjvUNGam0ibxfwg+4=
Subject key identifier: 9B:01:F6:C1:C9:94:E9:C6:64:C7:AB:4C:91:F1:99:C0:B7:B6:6C:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018568E391BE3A61CEE75E2DD8BF338647BD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mwH2wcmU6cZkx6tMkfGZwLe2bNs.roa
Signing time: Sat 31 Dec 2022 15:53:42 +0000
ROA not before: Sat 31 Dec 2022 15:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:68:e3:91:be:3a:61:ce:e7:5e:2d:d8:bf:33:86:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 31 15:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b01f6c1c994e9c664c7ab4c91f199c0b7b66cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:93:57:c3:bc:10:4a:0b:ff:61:67:37:5a:
d2:fb:e0:d4:23:94:03:00:e9:ea:c2:6e:11:a1:dc:
9e:49:7a:57:c6:e2:7a:a2:53:6c:8a:27:e9:21:d7:
d4:97:5e:7a:6c:9b:9d:51:c3:f3:bd:c5:20:c2:99:
ab:28:39:2a:7f:fe:2e:a3:3a:17:66:75:70:88:29:
a6:24:6b:53:cf:2b:46:a3:43:1c:dd:6c:31:de:f3:
f7:14:b0:11:9b:b0:3b:23:6b:50:76:92:9a:a3:00:
b5:c5:af:5e:58:41:e7:d0:77:d1:68:84:86:d7:ed:
04:59:9b:eb:84:69:a1:67:51:60:fb:53:58:1f:df:
87:98:eb:95:22:01:18:b1:9e:ea:fe:42:ea:ba:f5:
97:84:83:f0:d9:77:12:44:bf:28:aa:4e:76:22:16:
56:e6:55:3f:10:cb:9e:96:a6:0e:6b:48:7d:8a:a1:
e3:bd:0f:b3:7b:e2:f9:11:e5:8f:ac:8d:54:a7:ce:
67:62:e2:ef:63:ce:12:ef:0b:8b:3f:b0:a0:1c:05:
6d:7c:97:14:8a:c5:4b:51:91:9d:d3:83:78:32:19:
0f:1c:f9:0a:37:42:53:a7:20:0e:59:c5:5c:27:d4:
c5:94:5a:79:ce:0e:40:6d:e1:ef:3e:c6:bc:dd:d3:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:01:F6:C1:C9:94:E9:C6:64:C7:AB:4C:91:F1:99:C0:B7:B6:6C:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mwH2wcmU6cZkx6tMkfGZwLe2bNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.116.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.195.0/24
212.192.0.0/23
212.192.10.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
84:36:e8:65:2e:1e:99:8d:dc:84:60:ae:1e:e3:e3:a2:11:ca:
2c:c4:ac:71:d3:0b:ad:3e:9a:5d:b7:f4:6a:76:34:91:a5:04:
52:85:82:1b:35:2c:43:30:cc:c1:00:6a:00:86:4e:f1:2a:9b:
6b:14:4c:20:ae:04:ef:d9:77:c3:af:ba:85:ae:19:e1:81:7a:
9d:08:db:b9:e6:37:77:25:4d:df:dc:02:e3:35:f3:87:b6:73:
3a:5c:b5:2d:f0:39:e1:3d:d7:fe:e3:61:66:5f:5a:e0:b0:f2:
90:8b:ef:a0:32:2f:63:b8:da:ba:78:31:73:86:a8:b4:42:3b:
b1:62:b3:38:df:27:54:6a:5d:96:10:5d:68:ea:d8:84:59:42:
42:93:d4:8f:a6:ec:a9:27:ae:36:f8:3d:76:07:8a:97:a5:96:
4e:d6:4a:0c:ee:68:9d:9b:52:9e:72:7d:57:78:29:a0:92:b8:
98:e1:d1:15:a9:59:6e:a6:38:a3:15:c5:ba:9e:fb:45:3c:dd:
a3:f4:da:d5:bd:70:84:31:da:90:b9:70:5b:42:13:a6:b5:07:
d4:8b:06:c3:b5:1d:f5:7b:ef:ea:78:69:35:e6:1f:c3:0a:c7:
07:96:7b:19:6c:c5:e0:12:06:d2:23:d0:ed:97:43:ee:92:37:
a9:2f:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-ams.rpki-client.org