Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/G4PZaJndoNkcPnCweZWubjwvxc0.roa
File: G4PZaJndoNkcPnCweZWubjwvxc0.roa (raw, json)
Hash identifier: /ZZxfpSd4aM1esoC6mlKZT4CjuLrksBb1aoHnP4WlYY=
Subject key identifier: 1B:83:D9:68:99:DD:A0:D9:1C:3E:70:B0:79:95:AE:6E:3C:2F:C5:CD
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 0183F9E53611E85D543E8D3E0185D4072C26
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/G4PZaJndoNkcPnCweZWubjwvxc0.roa
Signing time: Fri 21 Oct 2022 09:34:51 +0000
ROA not before: Fri 21 Oct 2022 09:34:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48854
IP address blocks: 185.134.28.0/22 maxlen: 22
195.178.14.0/23 maxlen: 23
80.70.0.0/23 maxlen: 23
185.21.40.0/22 maxlen: 22
212.97.132.0/22 maxlen: 22
212.97.140.0/22 maxlen: 22
94.143.8.0/21 maxlen: 21
93.191.152.0/21 maxlen: 21
93.191.152.0/22 maxlen: 22
217.61.236.0/22 maxlen: 22
93.191.156.0/24 maxlen: 24
93.191.158.0/24 maxlen: 24
93.191.157.0/24 maxlen: 24
89.188.72.0/21 maxlen: 21
185.25.141.0/24 maxlen: 24
185.25.143.0/24 maxlen: 24
94.231.96.0/20 maxlen: 20
94.231.103.0/24 maxlen: 24
185.223.24.0/22 maxlen: 22
185.221.36.0/22 maxlen: 22
212.237.248.0/23 maxlen: 23
194.150.112.0/22 maxlen: 22
185.20.204.0/22 maxlen: 22
185.20.205.0/24 maxlen: 24
185.20.206.0/23 maxlen: 23
2a06:eac0::/29 maxlen: 48
2a02:2338::/32 maxlen: 48
2a02:2339:4000::/34 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:e5:36:11:e8:5d:54:3e:8d:3e:01:85:d4:07:2c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Oct 21 09:34:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b83d96899dda0d91c3e70b07995ae6e3c2fc5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:bb:9c:63:c8:2e:2a:2f:68:d8:6b:3c:0d:
2a:1a:69:f5:5e:60:5f:78:3f:f5:5d:66:c4:2c:7a:
88:d8:71:97:bf:e2:8b:4f:d2:f3:35:5d:6a:c1:0f:
24:54:17:fd:22:c4:fc:b0:c6:d7:f1:42:8f:cc:7a:
8a:e5:14:f4:2d:cb:c1:a3:6f:be:92:40:22:a1:ed:
03:4d:42:40:4e:5f:4f:22:3d:41:b5:8c:74:e5:89:
6f:31:73:50:cf:81:57:23:cd:6b:64:15:6e:f9:17:
94:e7:7e:cd:6f:a9:33:e7:e4:33:23:6a:82:e7:03:
97:e2:ec:d1:f5:a2:67:24:ac:22:92:12:a9:49:76:
0e:e7:55:de:67:64:34:2d:ae:aa:51:78:30:5b:c8:
41:2b:60:b2:e0:3f:7c:64:f2:43:bf:35:21:5a:94:
49:e8:d2:11:7d:0f:2c:90:5d:57:be:6f:be:98:75:
cf:8c:cd:85:84:eb:a2:7b:ef:63:62:9d:0d:4b:90:
32:82:35:a0:58:19:a2:6f:77:fe:03:b4:17:f5:38:
32:b9:70:7e:e2:0d:1d:1d:db:df:9d:3e:7c:a2:96:
66:4f:11:a8:16:4c:44:5d:02:41:bb:22:e5:87:d2:
2f:f5:11:2a:51:a5:99:1e:1d:d2:8b:d7:30:96:91:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:83:D9:68:99:DD:A0:D9:1C:3E:70:B0:79:95:AE:6E:3C:2F:C5:CD
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/G4PZaJndoNkcPnCweZWubjwvxc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.0.0/23
89.188.72.0/21
93.191.152.0/21
94.143.8.0/21
94.231.96.0/20
185.20.204.0/22
185.21.40.0/22
185.25.141.0/24
185.25.143.0/24
185.134.28.0/22
185.221.36.0/22
185.223.24.0/22
194.150.112.0/22
195.178.14.0/23
212.97.132.0/22
212.97.140.0/22
212.237.248.0/23
217.61.236.0/22
IPv6:
2a02:2338::/32
2a02:2339:4000::/34
2a06:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
46:64:be:6c:ee:8b:00:d9:3f:c3:03:df:3b:d6:d5:56:97:01:
95:5b:31:82:9b:3c:a1:87:ed:74:9c:1b:ed:46:fb:50:e0:55:
bd:3e:83:67:ef:67:fb:72:dc:f2:f1:5f:56:f2:9d:04:2c:fa:
8a:cb:58:8c:05:c9:2b:af:ed:9a:ce:70:a3:41:01:d8:50:be:
8d:58:f3:be:4a:1a:44:06:71:31:11:e4:93:1d:24:d0:9f:68:
34:83:2e:af:da:82:fb:62:2e:36:a8:ae:0d:de:04:2a:18:1c:
fd:e5:79:a2:e5:f3:e6:39:a0:e4:5b:58:a6:e2:32:da:55:70:
b0:ec:4c:7f:18:f4:1e:07:6c:bc:3e:4b:c2:af:58:94:77:43:
43:91:ab:b6:7a:70:61:da:b8:f8:cc:0e:c2:99:8f:db:2e:7c:
ed:5d:10:e8:24:55:91:d5:cd:66:86:ca:30:eb:ab:5e:c7:62:
13:c1:72:59:ac:76:af:23:86:f5:93:34:d0:bc:a5:58:ac:77:
cf:fc:9e:0a:f0:be:f8:9d:ae:45:8c:96:c4:57:7d:a4:41:2b:
f6:a2:fc:b0:9f:91:c9:16:b7:23:57:eb:fa:f4:3c:e7:b5:65:
5e:28:ab:d5:fb:b0:e6:c2:5f:20:48:da:94:91:ef:25:5b:cb:
d4:ea:85:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:51 2024 by rpki-client on console-ams.rpki-client.org