Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/GMcsE7wFGz1eLOVi9gUYi4rew8U.roa
File: GMcsE7wFGz1eLOVi9gUYi4rew8U.roa (raw, json)
Hash identifier: NgkstHEJ5qBMvr+p4t/NrVUCMTwMWEjPa2J9teB4oqI=
Subject key identifier: 18:C7:2C:13:BC:05:1B:3D:5E:2C:E5:62:F6:05:18:8B:8A:DE:C3:C5
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 07D3D47D
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/GMcsE7wFGz1eLOVi9gUYi4rew8U.roa
Signing time: Wed 04 May 2022 16:50:49 +0000
ROA not before: Wed 04 May 2022 16:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.145.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.157.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131323005 (0x7d3d47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 4 16:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18c72c13bc051b3d5e2ce562f605188b8adec3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:a4:f1:a6:52:f7:4c:cc:3d:ee:b3:0c:2b:
28:b5:22:49:49:5c:e2:78:89:34:be:ce:b9:23:f9:
8b:8e:60:ca:6a:c8:d3:b5:5e:30:ba:18:0b:61:a5:
c4:b0:69:9d:62:a0:74:f1:ec:05:46:e0:11:6e:89:
51:46:a7:6b:b4:a2:ef:d2:d1:f6:6f:1a:2e:ce:9e:
00:d2:6b:15:77:e9:75:6c:dd:d1:a2:a2:ec:18:eb:
68:d5:49:30:21:32:24:9f:39:f1:1d:52:3e:b4:82:
c9:45:5c:cc:2a:ab:fd:bb:f7:7e:8b:cc:4c:a0:d2:
5b:df:91:85:df:ef:e3:d0:a9:24:46:92:a4:9e:91:
f7:e1:de:e0:e5:44:15:22:72:05:db:ba:ac:8d:24:
30:a9:a1:f1:e4:da:43:b9:b2:23:6d:63:7b:ad:f4:
d7:45:30:ab:3c:47:e9:d1:89:40:1c:28:35:2c:de:
bd:30:df:74:43:10:f5:9d:e2:40:bb:81:4b:55:ee:
3c:e7:f8:9b:95:94:7a:dd:14:f3:d9:41:73:71:f0:
70:ee:be:dd:1b:bb:2a:73:ee:e6:19:20:01:7b:08:
b7:53:c2:f9:7d:d1:6d:06:e2:c4:ea:36:46:ec:1f:
b9:81:fe:df:a5:b1:2c:77:6a:e0:5b:9c:a6:52:70:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:2C:13:BC:05:1B:3D:5E:2C:E5:62:F6:05:18:8B:8A:DE:C3:C5
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/GMcsE7wFGz1eLOVi9gUYi4rew8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.140.0/24
94.74.145.0/24
94.74.147.0/24
94.74.156.0/22
94.74.164.0/24
94.74.168.0/24
94.74.171.0/24
94.74.173.0/24
94.74.182.0/24
94.74.187.0/24
94.74.191.0/24
Signature Algorithm: sha256WithRSAEncryption
95:39:8b:78:45:a0:f7:84:b5:1c:fa:c1:94:28:a9:06:49:72:
30:8b:df:0f:39:01:f6:21:41:06:19:22:0d:2c:48:f0:35:9f:
e2:d3:62:b9:dd:f9:d3:07:54:93:10:c7:42:ea:d9:9b:cf:53:
cd:ae:11:24:a3:ec:d3:f3:83:6a:6e:6e:d0:5b:b1:f6:f3:13:
1c:cd:83:32:4c:a2:06:86:f5:1f:a9:87:6f:5e:88:ba:4b:e2:
d9:17:cb:75:7a:94:42:fb:e3:44:65:7a:89:6f:bf:a9:05:35:
c2:2b:68:81:ad:bb:f3:17:8a:f9:b7:50:bf:0c:ab:a5:ce:7e:
13:0e:1f:f4:a6:24:f8:a0:a6:5c:a3:06:7d:a8:93:47:d6:ef:
54:e2:42:05:08:a5:13:4c:6d:48:b8:d6:cd:dc:b6:e3:08:17:
f7:a4:0a:ca:0a:a6:eb:00:2e:b1:19:37:2e:9f:d1:6d:33:75:
94:de:8f:f7:0e:28:6f:29:47:f8:58:4d:ca:33:e2:2a:a6:14:
f8:61:4a:35:9c:5c:3d:9e:1c:9f:3f:35:77:4b:6e:13:41:74:
bd:7f:a5:54:85:2a:e6:fd:07:9e:c5:a6:b7:2c:dd:56:27:f8:
91:14:4f:1b:67:ed:c2:44:66:2d:6a:3a:69:f4:eb:18:af:65:
51:1b:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:36 2025 by rpki-client