Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/GJmxEtMZTedegCw5t-G0bdvpQ9Y.roa
File: GJmxEtMZTedegCw5t-G0bdvpQ9Y.roa (raw, json)
Hash identifier: Ek6FHnMp+OsPTMIUAHPBt4U94iIp4QhJ/jbQudsRtHQ=
Subject key identifier: 18:99:B1:12:D3:19:4D:E7:5E:80:2C:39:B7:E1:B4:6D:DB:E9:43:D6
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 01832269D0A009F0F8A3EA5957CA2AF96527
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/GJmxEtMZTedegCw5t-G0bdvpQ9Y.roa
Signing time: Fri 09 Sep 2022 13:21:43 +0000
ROA not before: Fri 09 Sep 2022 13:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41960
IP address blocks: 195.140.240.0/22 maxlen: 24
185.238.52.0/22 maxlen: 24
185.17.60.0/22 maxlen: 24
193.221.114.0/24 maxlen: 24
185.241.76.0/22 maxlen: 24
2a03:e0c0::/32 maxlen: 48
2a0c:2680::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:69:d0:a0:09:f0:f8:a3:ea:59:57:ca:2a:f9:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Sep 9 13:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1899b112d3194de75e802c39b7e1b46ddbe943d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:c4:f3:0d:ce:f3:c6:1c:7f:65:43:ab:42:
54:b6:a5:52:dd:98:3c:2e:67:ca:bd:41:c2:98:f4:
64:65:ae:92:8c:9e:ea:c1:c8:35:02:6c:58:0a:89:
69:ed:c9:b8:4e:9d:52:61:98:3e:eb:c8:97:51:6e:
31:a2:96:f3:9c:e9:14:19:25:15:8a:7f:99:e9:23:
8f:f1:01:aa:bb:d5:57:6f:a3:10:4c:ff:97:03:92:
e2:3f:bc:94:70:10:f3:8e:97:a3:5f:85:38:fe:62:
00:10:2a:13:ea:0c:31:c8:40:1a:38:f0:ac:8c:76:
f9:24:f2:b0:79:85:a5:69:d0:ba:77:69:64:0d:da:
6d:ff:bb:76:f8:b2:93:2c:ec:18:ba:67:ca:b5:15:
d2:2c:cc:d1:bf:e7:f4:38:89:4d:af:47:0d:30:11:
e3:ea:7b:e7:81:10:2e:0e:ea:d4:b9:dd:c9:c9:91:
86:1a:3d:81:df:88:9b:01:74:a3:01:b9:56:7e:fc:
5d:f5:af:79:0f:55:cc:14:e9:4c:39:fd:05:70:c6:
e2:91:c2:c1:50:30:26:20:c5:b7:48:6c:76:4f:b3:
05:ff:03:59:d0:ae:7c:c3:31:1f:99:36:45:b7:b3:
2a:08:51:b0:06:da:91:bb:dc:45:c1:b7:60:0a:f0:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:B1:12:D3:19:4D:E7:5E:80:2C:39:B7:E1:B4:6D:DB:E9:43:D6
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/GJmxEtMZTedegCw5t-G0bdvpQ9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.60.0/22
185.238.52.0/22
185.241.76.0/22
193.221.114.0/24
195.140.240.0/22
IPv6:
2a03:e0c0::/32
2a0c:2680::/29
Signature Algorithm: sha256WithRSAEncryption
a4:a2:ce:70:a5:9e:4f:63:b0:b0:9c:f1:f0:5e:4d:72:04:ca:
27:e0:79:0b:e2:58:3f:77:db:64:d9:e4:19:30:e9:7e:45:a5:
23:0c:6a:66:59:93:2f:52:a2:aa:64:ad:1b:57:b7:92:a7:cf:
ed:ab:86:b4:0d:0b:4b:91:ea:7c:12:a5:c4:d3:96:8d:d5:32:
de:6d:3c:1d:13:b4:a7:04:b9:1a:6c:0b:22:b1:21:a9:50:3c:
64:42:3d:99:06:f7:02:b4:db:69:9e:b8:dd:d7:66:b7:d0:7d:
25:67:6b:dd:fc:35:fa:4a:70:d4:7f:6f:fd:ea:3a:53:9d:e6:
60:ff:5b:5f:3f:9c:f4:23:51:ab:10:24:5b:ee:e9:34:dd:e5:
e0:96:8a:a6:7d:1e:8e:d5:5c:96:95:57:35:4f:1c:b4:c1:1b:
aa:85:65:b5:08:34:f4:89:dd:61:66:32:eb:ce:fc:c8:41:4e:
04:aa:37:c5:b2:8c:c8:63:70:23:11:a2:61:b1:13:86:49:ae:
4a:e1:0c:ab:0f:2c:e5:75:51:18:04:08:25:4d:55:31:55:10:
99:24:3d:23:d5:f4:6f:91:a8:71:7d:55:3c:c3:ec:4b:78:2f:
30:0c:b4:19:8e:cd:35:bb:d4:5b:3d:c4:cc:1e:eb:c1:0e:fb:
37:e8:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:46:55 2025 by rpki-client