Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GZMImT2Q_mpswa1fV3Iace-MPLc.roa
File: GZMImT2Q_mpswa1fV3Iace-MPLc.roa (raw, json)
Hash identifier: XTg2Ea64/LRyROrs7xkOXcjVo/ujqLu4GpVpn5N353g=
Subject key identifier: 19:93:08:99:3D:90:FE:6A:6C:C1:AD:5F:57:72:1A:71:EF:8C:3C:B7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0183EEFF98C4E30C4BDED9D7544937F83511
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GZMImT2Q_mpswa1fV3Iace-MPLc.roa
Signing time: Wed 19 Oct 2022 06:47:51 +0000
ROA not before: Wed 19 Oct 2022 06:47:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.64.0/21 maxlen: 24
213.176.88.0/21 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/21 maxlen: 24
62.60.200.0/21 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.128.0/21 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:ff:98:c4:e3:0c:4b:de:d9:d7:54:49:37:f8:35:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 19 06:47:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=199308993d90fe6a6cc1ad5f57721a71ef8c3cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:eb:55:75:85:ab:98:26:b8:9b:39:e3:f4:
9c:18:d1:ab:f2:c2:8a:54:53:5b:54:e4:43:86:22:
7d:24:a3:ec:28:bb:71:fa:e3:a4:2d:8a:46:c5:74:
f9:b2:e4:f4:39:14:0e:7d:77:8e:cc:5e:02:6d:8e:
9b:59:bc:4c:14:c7:79:c5:e5:10:9a:79:a1:c6:de:
e6:ca:c3:e1:a8:5e:b8:1a:02:4c:63:25:28:81:f9:
e8:de:ea:b7:1b:a3:fd:a7:e4:89:ec:93:1d:26:26:
1d:de:88:54:0c:1a:d0:ae:0a:85:0e:ed:15:bd:eb:
8b:f6:26:bd:82:86:f4:7b:57:82:01:4a:5f:51:d6:
c9:db:0a:f6:f7:65:7c:df:2f:7d:94:14:a7:b9:c4:
b5:bf:ea:76:52:f8:ec:99:4d:ae:59:2b:b6:15:17:
25:d6:fd:39:c0:db:dc:45:d9:48:66:c2:0f:83:e8:
a6:00:6e:fb:7e:f6:fd:d1:39:75:82:e9:d9:e6:2b:
44:d3:9d:44:7c:30:50:f3:fc:62:50:7d:36:c2:7e:
55:a5:89:a5:26:49:50:7e:4f:92:a7:09:6c:54:28:
04:2d:68:7d:0e:73:fa:c8:9c:c2:58:ee:fb:b5:76:
7f:93:94:eb:90:7f:58:c0:ef:16:a0:83:02:c6:1d:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:08:99:3D:90:FE:6A:6C:C1:AD:5F:57:72:1A:71:EF:8C:3C:B7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GZMImT2Q_mpswa1fV3Iace-MPLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0-62.60.137.255
62.60.139.0-62.60.143.255
62.60.145.0/24
62.60.148.0-62.60.155.255
62.60.200.0-62.60.211.255
213.176.4.0/23
213.176.20.0-213.176.31.255
213.176.64.0/21
213.176.88.0-213.176.96.255
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
50:87:a5:ea:c1:81:5a:6f:fc:3b:5a:0c:7c:ba:d1:32:cb:bc:
c4:fa:f7:58:d2:2c:7f:dd:63:00:85:1d:bc:96:e7:50:cc:3a:
28:5f:ab:cd:be:c3:f9:99:81:f1:03:5d:ca:f1:40:9e:5f:37:
bd:ba:32:31:05:15:d2:c3:63:32:8e:f4:a2:1f:4e:c2:92:21:
8f:30:75:5d:ec:01:2f:db:b6:59:bd:fc:0d:5d:8f:de:57:8b:
a2:30:4d:7b:d1:cf:47:a2:11:ac:71:75:77:04:1d:ef:80:b7:
68:73:70:d5:48:19:cb:1c:2b:49:22:ac:09:32:3e:ff:a5:ff:
6f:74:7c:bb:9a:1c:3f:5a:b2:53:20:09:93:d4:41:25:8e:e3:
42:39:70:06:d8:68:4b:2f:9e:66:28:0f:89:9f:0e:0b:7b:b6:
2f:5e:62:9c:8c:96:fa:10:ee:7d:b2:f9:fb:bc:15:eb:c6:35:
f9:62:e3:3d:d2:8d:be:75:25:b6:a3:85:21:f0:39:bf:78:9f:
53:a8:00:c1:1e:04:b2:5d:4b:ac:26:c1:ed:81:99:2c:69:3a:
e4:67:11:fd:60:01:22:3e:1a:24:c5:0b:c5:27:54:cd:fb:c1:
14:49:cc:e1:ce:df:c6:03:e6:cb:58:18:d6:01:65:58:3e:7f:
f2:ee:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org