Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/GzzaMFyRt-U2tR1sX2SRgIGhsz8.roa
File: GzzaMFyRt-U2tR1sX2SRgIGhsz8.roa (raw, json)
Hash identifier: zT5wVTac6YU2Ao284ENiryfAgI6aqoxGVNwpdFPRelg=
Subject key identifier: 1B:3C:DA:30:5C:91:B7:E5:36:B5:1D:6C:5F:64:91:80:81:A1:B3:3F
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 0184BE877BE54BAD304B8A7731E3F41FD859
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/GzzaMFyRt-U2tR1sX2SRgIGhsz8.roa
Signing time: Mon 28 Nov 2022 13:57:40 +0000
ROA not before: Mon 28 Nov 2022 13:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210756
IP address blocks: 5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:87:7b:e5:4b:ad:30:4b:8a:77:31:e3:f4:1f:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Nov 28 13:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b3cda305c91b7e536b51d6c5f64918081a1b33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:eb:c6:61:0a:ad:57:c0:82:15:2f:2c:cb:
d0:4c:f7:63:88:ea:9d:54:ea:2c:c3:45:5c:3c:66:
7c:b3:f2:55:42:9c:7f:e9:1f:5a:a7:7c:c2:4f:b6:
0f:da:54:54:f8:6b:2d:e2:97:11:b3:32:05:27:15:
1c:01:12:14:af:ce:c2:a1:4b:a9:a7:16:b1:91:0c:
32:9b:5b:d3:72:44:ff:9b:7d:7b:dd:e6:10:aa:49:
cf:d9:04:c3:0c:87:ce:66:b4:7f:28:b7:6b:4d:63:
bb:a2:25:8d:5c:8f:05:ae:62:2a:82:88:5c:98:a8:
70:07:87:05:77:ba:40:75:6e:5e:40:05:94:f6:a1:
23:7e:4b:ce:d2:a2:a2:41:de:06:dc:08:8e:6f:94:
28:9c:16:7f:2b:a4:91:c7:c4:f0:7a:72:31:ce:71:
8e:3d:85:2e:2b:7a:cf:de:dd:1c:ee:4f:cb:fc:33:
35:3a:a9:7e:68:c9:51:d2:93:56:c2:06:25:90:c4:
4c:52:69:94:04:e5:03:33:2a:06:f6:49:3c:ee:1b:
8f:4c:90:6d:2a:46:7b:ff:ce:2b:dd:ef:e4:f9:b3:
25:e9:0d:b0:ac:1a:b3:08:fa:af:50:a7:42:c7:ef:
9a:68:dd:82:ff:11:7a:5b:05:ee:6f:9b:a9:cd:15:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:DA:30:5C:91:B7:E5:36:B5:1D:6C:5F:64:91:80:81:A1:B3:3F
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/GzzaMFyRt-U2tR1sX2SRgIGhsz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.68.0-5.101.70.255
5.188.176.0/22
37.9.36.0/22
146.185.196.0/22
IPv6:
2a11:27c0:110::-2a11:27c0:12f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:7b:5b:25:c6:a1:b3:e4:c6:4c:ae:18:9c:c8:96:f1:da:9d:
b4:7d:0f:39:b9:e5:ac:2d:f0:4c:72:09:b0:4b:22:8e:1f:f4:
0f:1e:51:48:e8:89:8b:4e:82:0c:73:8b:08:8d:e0:62:df:c2:
0f:c4:83:56:38:dd:96:86:85:f8:05:91:b3:ee:84:16:d6:a7:
17:5b:20:73:03:45:bd:b3:ca:2b:79:9a:91:49:a8:75:05:1b:
f0:d5:57:a5:38:89:65:7a:32:3b:f7:ed:a4:c3:14:1a:f5:7d:
47:ca:61:1a:bc:c3:c1:c7:e1:b3:59:a8:1e:41:68:a9:6f:c6:
1a:85:06:97:eb:69:ec:50:e1:59:b2:d3:fa:c5:28:7c:15:6a:
d8:81:1d:c5:20:04:5c:ce:dc:f7:f1:24:a5:ac:ce:cf:4b:1d:
90:6a:92:e8:9b:13:2d:cb:5e:6b:08:bb:a8:7c:42:47:1d:df:
74:f4:7f:f3:c0:ee:10:8c:45:50:f0:76:e2:a0:e4:6e:cb:8a:
2a:ef:97:17:bd:5b:32:5d:51:74:8f:8f:7a:3f:a9:08:94:ea:
0b:a5:79:35:de:de:37:29:b9:7d:bf:68:bd:3f:e9:ac:a6:ce:
4a:b7:d8:05:0e:9a:b5:64:92:06:ed:76:21:98:0f:99:33:38:
9e:44:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:32 2025 by rpki-client