Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/2GFYENpZsN--JlVUQSRBhFuRCDk.roa
File: 2GFYENpZsN--JlVUQSRBhFuRCDk.roa (raw, json)
Hash identifier: 2NXue+qy7wkTsvDHibFUvyeJRig2eWupU+1gJ852VOA=
Subject key identifier: D8:61:58:10:DA:59:B0:DF:BE:26:55:54:41:24:41:84:5B:91:08:39
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 1BA557A0
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/2GFYENpZsN--JlVUQSRBhFuRCDk.roa
Signing time: Wed 18 May 2022 10:07:17 +0000
ROA not before: Wed 18 May 2022 10:07:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48544
IP address blocks: 83.174.144.0/22 maxlen: 24
194.145.248.0/22 maxlen: 23
78.159.144.0/22 maxlen: 24
93.189.136.0/21 maxlen: 24
91.231.172.0/23 maxlen: 24
185.29.145.0/24 maxlen: 24
185.29.144.0/24 maxlen: 24
185.29.146.0/24 maxlen: 24
31.185.17.0/24 maxlen: 24
31.185.16.0/24 maxlen: 24
87.252.106.0/23 maxlen: 24
188.116.11.0/24 maxlen: 24
188.116.10.0/24 maxlen: 24
188.116.8.0/23 maxlen: 23
188.116.32.0/23 maxlen: 24
185.164.185.0/24 maxlen: 24
185.164.186.0/23 maxlen: 24
46.102.112.0/24 maxlen: 24
46.102.114.0/24 maxlen: 24
46.102.113.0/24 maxlen: 24
46.102.115.0/24 maxlen: 24
89.36.206.0/24 maxlen: 24
89.36.205.0/24 maxlen: 24
89.36.204.0/24 maxlen: 24
89.36.207.0/24 maxlen: 24
185.39.24.0/23 maxlen: 24
185.39.27.0/24 maxlen: 24
185.39.26.0/24 maxlen: 24
188.116.56.0/23 maxlen: 24
188.116.60.0/23 maxlen: 23
188.116.63.0/24 maxlen: 24
188.116.62.0/24 maxlen: 24
185.84.84.0/22 maxlen: 24
45.10.72.0/22 maxlen: 22
217.20.250.0/23 maxlen: 24
217.20.248.0/23 maxlen: 24
212.69.137.0/24 maxlen: 24
212.69.136.0/24 maxlen: 24
212.69.139.0/24 maxlen: 24
212.69.138.0/24 maxlen: 24
212.69.143.0/24 maxlen: 24
212.69.142.0/24 maxlen: 24
212.69.141.0/24 maxlen: 24
212.69.140.0/24 maxlen: 24
89.32.159.0/24 maxlen: 24
89.32.158.0/24 maxlen: 24
89.32.157.0/24 maxlen: 24
89.32.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463820704 (0x1ba557a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: May 18 10:07:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8615810da59b0dfbe265554412441845b910839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:4c:82:1f:0d:d8:ef:1c:fb:7e:e6:b8:1b:
ab:2d:c6:09:93:fd:62:ac:79:7f:93:f5:96:1d:a3:
de:9f:a4:c7:9f:4d:c2:fb:48:ba:ad:7f:d2:55:ae:
1e:2e:86:22:5f:95:aa:b9:ae:b6:a9:46:45:41:f1:
5f:34:a7:ec:9e:db:ab:96:0d:41:bb:20:bb:b8:65:
c7:1e:84:be:2f:fa:0a:a2:2b:3b:fe:e6:20:b6:25:
2a:9c:09:83:7c:ed:1d:20:32:32:e8:24:d9:a9:f2:
c4:63:f3:c4:be:ae:dd:62:df:e9:36:96:c1:52:47:
05:d7:dc:4d:8e:38:d4:28:99:d3:f5:5c:6f:18:f9:
29:21:71:be:af:1f:d5:a3:7e:66:17:03:1e:fb:5e:
be:99:f0:2e:aa:3d:0a:48:7f:bb:54:e6:47:b2:3d:
b2:2a:c0:b7:1a:ec:0e:47:d7:fe:ff:c6:3e:23:df:
b8:7b:5c:67:72:de:a4:ce:f4:32:df:75:62:e5:65:
fc:f5:f8:a7:85:88:78:78:53:49:a3:47:96:11:cb:
0f:31:07:c2:4e:5f:30:27:ab:09:46:90:20:d8:c5:
3e:d2:67:c3:b6:f3:7e:8d:f7:04:42:c1:77:b7:37:
23:c3:c2:d8:30:d6:7a:b6:a6:96:2b:04:1a:94:55:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:61:58:10:DA:59:B0:DF:BE:26:55:54:41:24:41:84:5B:91:08:39
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/2GFYENpZsN--JlVUQSRBhFuRCDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.16.0/23
45.10.72.0/22
46.102.112.0/22
78.159.144.0/22
83.174.144.0/22
87.252.106.0/23
89.32.156.0/22
89.36.204.0/22
91.231.172.0/23
93.189.136.0/21
185.29.144.0-185.29.146.255
185.39.24.0/22
185.84.84.0/22
185.164.185.0-185.164.187.255
188.116.8.0/22
188.116.32.0/23
188.116.56.0/23
188.116.60.0/22
194.145.248.0/22
212.69.136.0/21
217.20.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:7c:2f:73:b8:95:45:24:88:8f:89:98:6e:33:7e:d4:11:a2:
0d:d9:32:84:3c:59:31:f4:60:76:8b:79:fa:db:c0:7a:c2:29:
bc:30:f8:d3:c9:ea:d9:13:dd:4d:22:35:79:ed:30:f5:03:38:
d3:4d:a9:46:12:24:61:c1:3a:90:9f:82:2a:89:4d:14:22:54:
92:34:47:16:fd:36:74:b1:c0:e3:e1:3c:72:da:bd:e1:60:c6:
f6:4a:7b:ad:5a:5e:39:dd:89:fd:7d:29:00:68:3a:4d:7a:ac:
8a:fc:88:a9:26:f6:96:88:44:c4:99:60:bc:7a:17:9f:e2:2e:
cd:da:b2:58:1d:b2:76:5e:b8:06:ee:6d:18:40:a5:fa:3b:8a:
64:96:f8:2c:89:56:a7:bb:d7:4e:e9:e2:1f:0a:c2:36:43:ec:
a0:b5:cb:35:8a:23:88:d4:f7:f9:db:56:23:04:c8:a6:80:7d:
c7:da:d9:d4:13:5c:5a:0c:b7:f1:f4:0b:29:02:2d:b5:ee:18:
57:1b:5b:c5:33:64:2e:66:fd:c1:12:f3:44:97:7e:9a:af:3c:
b1:91:d5:2e:38:ec:17:bb:6e:54:b1:15:ce:fd:2a:c2:fe:2c:
37:a9:03:76:c8:c0:bc:f0:e8:de:c9:d5:36:86:30:df:93:18:
3f:84:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org