Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_GCMLWUXEZ84TxvbEpLVtVjeNxM.roa
File: _GCMLWUXEZ84TxvbEpLVtVjeNxM.roa (raw, json)
Hash identifier: +gluUiySzOQqVhVHpnFj7Y5K4i6qg9YlqJJb8JJm80Q=
Subject key identifier: FC:60:8C:2D:65:17:11:9F:38:4F:1B:DB:12:92:D5:B5:58:DE:37:13
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1D552B0E
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_GCMLWUXEZ84TxvbEpLVtVjeNxM.roa
Signing time: Fri 20 May 2022 11:06:33 +0000
ROA not before: Fri 20 May 2022 11:06:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57217
IP address blocks: 193.36.216.0/22 maxlen: 22
176.116.224.0/22 maxlen: 22
176.107.64.0/21 maxlen: 21
91.237.91.0/24 maxlen: 24
176.121.32.0/21 maxlen: 21
176.121.40.0/21 maxlen: 21
46.174.200.0/22 maxlen: 22
91.232.19.0/24 maxlen: 24
176.121.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492120846 (0x1d552b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 20 11:06:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc608c2d6517119f384f1bdb1292d5b558de3713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:89:ea:56:bb:74:ac:a3:4a:10:cb:13:b3:
04:78:9e:47:45:2a:a3:27:e6:bb:24:27:1d:78:e9:
57:79:40:ad:86:4e:27:b2:8f:24:f7:1c:cf:46:e8:
16:d5:a7:40:d7:f5:31:8d:91:bd:f0:67:e9:c3:a5:
fb:f8:ed:d3:37:d9:a2:b8:fd:93:b4:4d:21:48:67:
84:00:42:4b:3f:7a:fb:a4:5b:f4:75:3d:6f:26:46:
ae:e2:d1:56:4b:ca:01:7b:80:74:43:84:6d:7e:f9:
e7:c8:be:4e:fe:82:fa:9e:4f:cc:9d:46:68:7d:45:
dd:5f:56:07:36:58:5c:8a:d8:5c:59:9b:da:33:f8:
49:bb:66:dc:8e:bc:f8:d4:cc:a5:ef:42:9d:e0:4b:
14:d6:71:3b:bf:1a:33:46:ce:d0:ed:86:e5:c4:8b:
2e:9d:d8:4d:1f:d6:9a:1d:33:a7:92:7a:44:94:3f:
6e:42:b5:7b:a2:03:db:87:82:bd:5d:5b:35:9b:8f:
2d:5d:8a:34:54:86:d2:e4:ba:d3:85:b1:2d:37:f6:
75:36:c7:9a:22:50:fa:05:03:05:eb:57:56:46:c1:
ef:9c:19:cf:b8:0f:4d:17:67:da:91:1f:3a:28:a9:
69:2d:bc:3d:7b:f2:81:3c:5a:ed:d9:88:6d:64:61:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:60:8C:2D:65:17:11:9F:38:4F:1B:DB:12:92:D5:B5:58:DE:37:13
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_GCMLWUXEZ84TxvbEpLVtVjeNxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.200.0/22
91.232.19.0/24
91.237.91.0/24
176.107.64.0/21
176.116.224.0/22
176.121.32.0/20
176.121.104.0/22
193.36.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:9d:62:63:1d:0b:02:2d:9c:cc:bb:54:23:bf:74:05:3f:92:
71:4f:bd:cf:95:f1:33:a2:cd:63:72:21:7f:ea:a9:bd:49:f8:
10:39:32:37:f7:1e:ea:20:28:a6:b6:6c:39:c9:97:fd:89:9a:
c8:c8:24:cd:8a:65:a2:80:cf:ce:0e:28:18:8a:64:6f:53:91:
93:40:ec:1e:d8:1d:07:9f:e4:45:5b:a2:65:76:8a:78:42:0b:
ed:0b:6e:33:1a:19:52:33:d0:51:89:94:74:6f:aa:ff:f7:22:
1b:b6:a7:c6:8d:a9:19:32:4e:1b:91:d0:d9:e0:3f:03:1b:03:
30:f4:44:8d:23:4e:74:d6:fa:15:ac:8a:fd:e2:29:19:5d:ca:
8e:f0:1d:f9:99:40:94:eb:74:1f:f6:4b:84:35:3c:f4:55:62:
fe:57:da:3a:0a:8f:90:b1:a1:2f:68:e7:6e:e6:40:2e:b0:b7:
dc:00:2b:a3:30:17:6c:7c:aa:71:45:f6:b7:61:69:08:0e:16:
8c:7c:56:1c:ae:90:c6:56:ec:d9:b3:d2:41:77:6a:97:f2:a8:
97:33:db:41:b7:7b:71:b9:c2:ea:3e:8d:48:98:11:40:84:30:
d6:89:f8:95:24:2c:d8:cf:01:6f:f6:98:f5:af:c6:2f:90:9a:
6c:7c:63:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org