Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GmacQg4GOKv3v6feQ4UMRH4Dj8g.roa
File: GmacQg4GOKv3v6feQ4UMRH4Dj8g.roa (raw, json)
Hash identifier: 5NsiL0ntcTlTmUguuNmGb/KP1hC3ehpL3Z1CHKIeo1Q=
Subject key identifier: 1A:66:9C:42:0E:06:38:AB:F7:BF:A7:DE:43:85:0C:44:7E:03:8F:C8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B6D8F0F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GmacQg4GOKv3v6feQ4UMRH4Dj8g.roa
Signing time: Wed 01 Jun 2022 14:25:20 +0000
ROA not before: Wed 01 Jun 2022 14:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 217.156.14.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.227.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.187.0/24 maxlen: 24
193.231.188.0/24 maxlen: 24
193.231.189.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.82.0/24 maxlen: 24
80.96.12.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460164879 (0x1b6d8f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 1 14:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a669c420e0638abf7bfa7de43850c447e038fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:10:92:c6:64:be:35:18:6b:e3:8d:46:a0:
e6:8c:84:0c:50:d9:5a:67:4a:32:0e:87:46:43:b4:
94:2c:76:0a:83:5c:e6:70:7c:1b:7e:a1:f4:68:ba:
7e:e4:89:b5:ca:87:e3:e4:b2:62:66:7a:0f:69:26:
47:9e:82:bf:7a:fd:71:f4:23:d9:41:bb:58:48:a0:
1b:44:5f:58:1b:bc:92:65:98:5f:e5:da:c6:78:d4:
34:a9:20:da:2f:54:8a:56:2f:b5:af:bf:a9:3b:d7:
82:c8:5b:3b:c9:9d:41:a8:a2:60:ee:20:1d:4a:d7:
2c:79:8e:e1:b1:0c:1b:8f:f9:74:8e:06:8a:ee:f5:
6b:06:ef:a5:53:09:52:64:a9:3e:44:3e:a4:64:bc:
40:31:81:81:36:03:08:c9:46:9b:15:0a:76:3c:e9:
38:ac:ee:a0:00:22:42:e4:ed:b6:3c:80:ca:e3:76:
3b:2e:53:00:9e:8b:bb:ea:64:d5:06:36:98:21:65:
80:f7:9e:3c:28:48:ff:91:b1:c7:15:0f:92:d6:52:
cb:7b:6b:7c:e5:0a:a7:4f:d8:56:0f:6d:26:19:a6:
db:1a:e5:13:8d:80:dc:02:60:7b:8d:e0:39:8c:04:
01:78:ee:77:65:93:83:55:93:fe:0a:73:dc:29:13:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:66:9C:42:0E:06:38:AB:F7:BF:A7:DE:43:85:0C:44:7E:03:8F:C8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GmacQg4GOKv3v6feQ4UMRH4Dj8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.72.0/23
80.96.79.0/24
80.96.82.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.217.0/24
193.230.229.0/24
193.231.108.0/24
193.231.184.0/24
193.231.187.0-193.231.189.255
193.231.226.0/23
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:bf:cc:41:68:9a:6b:f2:e7:c2:cb:d7:31:86:47:6b:96:b5:
a9:de:bb:33:cd:45:72:c4:55:03:af:20:47:67:c0:a3:d9:85:
f6:5d:26:9c:3c:d9:f8:4d:fb:a0:40:d9:7c:fc:dd:07:c0:8c:
1f:ae:32:44:31:97:79:4f:fb:11:36:46:46:de:fb:86:e5:f1:
79:65:bd:8e:54:53:b5:c3:f1:8d:f2:cb:8f:0f:16:44:9b:f8:
64:c6:b9:c9:ff:13:5c:01:75:d3:a3:81:e7:19:1a:0d:64:18:
6f:af:df:cb:58:74:5c:4e:27:05:1c:b7:f6:38:c0:71:26:b8:
c5:57:5b:90:ed:7f:42:70:b7:c7:60:d5:f4:d2:bb:bf:51:66:
96:e0:20:f5:97:2b:59:16:e1:f9:ab:a5:60:6c:08:37:bc:97:
37:1f:fc:f5:ff:7a:ad:ea:90:dd:68:6c:f8:ee:b8:6d:60:2f:
b8:a2:73:cb:29:88:5a:e4:33:d1:69:ee:c7:c2:19:16:2e:19:
7d:10:a8:21:62:2f:a1:cc:f7:70:4f:41:cf:e7:2e:45:60:76:
b7:0a:b4:9e:98:c2:8d:2c:3b:cc:2f:39:ab:ce:3d:d1:02:80:
ec:6d:a1:c5:ba:67:9c:c9:ce:8d:bc:3d:a8:70:89:2f:75:34:
3c:4c:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org