Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/ggPThckycM2rqyePB5Z13D4Cezk.roa
File: ggPThckycM2rqyePB5Z13D4Cezk.roa (raw, json)
Hash identifier: tmFCjTmmaO4ebcofYFtT9+yPmV1pPafRkNBxYzq/280=
Subject key identifier: 82:03:D3:85:C9:32:70:CD:AB:AB:27:8F:07:96:75:DC:3E:02:7B:39
Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial: 0EF84F3A
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/ggPThckycM2rqyePB5Z13D4Cezk.roa
Signing time: Sat 01 Jan 2022 15:57:00 +0000
ROA not before: Sat 01 Jan 2022 15:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59847
IP address blocks: 5.149.89.0/24 maxlen: 24
5.149.88.0/23 maxlen: 23
5.149.88.0/24 maxlen: 24
5.149.91.0/24 maxlen: 24
5.149.90.0/23 maxlen: 23
5.149.90.0/24 maxlen: 24
185.69.28.0/22 maxlen: 22
185.69.28.0/24 maxlen: 24
185.69.30.0/24 maxlen: 24
185.69.29.0/24 maxlen: 24
185.69.31.0/24 maxlen: 24
109.94.104.0/24 maxlen: 24
109.94.105.0/24 maxlen: 24
109.94.107.0/24 maxlen: 24
109.94.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251154234 (0xef84f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Validity
Not Before: Jan 1 15:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8203d385c93270cdabab278f079675dc3e027b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:74:f6:ea:bf:74:03:78:ee:76:f3:c0:da:
60:86:6d:c1:5c:19:05:03:42:e2:61:14:5a:0f:b8:
33:de:5b:f6:2d:08:f4:b6:c5:ed:30:86:94:a6:d3:
95:b1:cf:5b:40:f2:c3:7c:98:ce:a3:49:f6:98:a7:
3e:be:44:f9:33:d1:45:03:de:54:75:39:d6:5b:c7:
e1:3a:ec:75:2e:ba:20:e9:47:ea:df:63:56:5a:c7:
f7:6f:d2:60:41:5c:0e:1e:a4:86:98:0e:12:91:99:
cb:f5:b1:de:97:9e:7e:3c:b6:56:4e:b2:87:e2:26:
3e:f2:d2:e8:05:5d:60:75:49:67:73:9c:14:a8:18:
ee:23:e0:14:4f:cc:63:4c:30:6b:11:d5:26:30:ce:
c1:6c:bb:af:23:e1:48:35:71:08:7e:48:2a:f3:3d:
7d:d9:da:69:f6:be:19:6a:6a:3c:99:38:39:8a:b4:
3b:7e:73:aa:02:68:8f:8a:a3:7f:51:5a:f7:e5:c0:
47:91:ca:dc:84:9b:1d:88:92:64:b9:00:bc:f3:ed:
7a:b5:f8:74:bb:4a:10:ec:4d:6e:0d:d8:d8:5f:e0:
68:c0:db:e9:3f:b8:b2:d2:3b:d2:b7:4a:c9:b1:bd:
92:c9:fe:a1:60:98:24:82:08:b5:a5:53:73:d9:2e:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:D3:85:C9:32:70:CD:AB:AB:27:8F:07:96:75:DC:3E:02:7B:39
X509v3 Authority Key Identifier:
keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/ggPThckycM2rqyePB5Z13D4Cezk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.88.0/22
109.94.104.0/22
185.69.28.0/22
Signature Algorithm: sha256WithRSAEncryption
82:2e:23:b0:4b:37:a8:1c:f8:b9:eb:b6:13:eb:47:77:08:0c:
ae:b7:f2:5d:38:73:14:40:05:96:05:e6:ae:36:25:ba:25:e0:
6d:f9:cf:09:8f:8a:b5:b4:e5:13:13:8c:fd:8d:80:9e:63:14:
be:0f:65:9a:21:ad:b8:29:20:51:27:af:a4:4b:f6:b3:d8:e1:
69:c6:e7:87:8d:90:13:7c:20:44:57:f9:a0:b8:a8:72:b6:3b:
55:ce:db:08:31:4a:77:ee:70:f6:3d:14:2a:60:94:2f:f5:12:
6c:14:5f:a1:3f:47:ec:98:7e:81:6d:c5:17:2a:ac:a3:6a:84:
9e:18:05:eb:29:10:f0:e3:a5:9c:10:e9:39:e3:b6:7c:ed:e9:
6a:e8:0d:9f:c4:6d:c6:76:91:58:7b:60:32:15:68:1a:bd:bb:
c8:a0:20:3c:d6:77:55:06:f7:6d:5a:33:3e:58:61:e2:e0:2e:
9e:87:71:34:30:41:5f:26:49:60:68:a2:b8:74:ca:e9:45:32:
ed:1e:23:0d:4c:05:1b:9e:0e:0d:b6:bd:fd:fa:fb:e9:b3:f1:
14:f5:2e:8a:64:cd:21:58:72:29:a6:af:1d:48:98:60:44:a0:
cd:38:f6:c9:5f:3c:27:47:f6:94:15:22:25:6e:72:22:69:9d:
70:28:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:23 2025 by rpki-client