Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/GJcUnuNnFqvHPcBSflU6_-Op_44.roa
File: GJcUnuNnFqvHPcBSflU6_-Op_44.roa (raw, json)
Hash identifier: s6/Foqvp2acOhS+NPv/S9ItWbAJgBsdY7S3yvucIJQY=
Subject key identifier: 18:97:14:9E:E3:67:16:AB:C7:3D:C0:52:7E:55:3A:FF:E3:A9:FF:8E
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 194A557D
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/GJcUnuNnFqvHPcBSflU6_-Op_44.roa
Signing time: Mon 18 Apr 2022 04:12:55 +0000
ROA not before: Mon 18 Apr 2022 04:12:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 89.148.0.0/18 maxlen: 18
185.165.176.0/22 maxlen: 22
88.201.37.0/24 maxlen: 24
84.255.128.0/18 maxlen: 18
77.69.128.0/17 maxlen: 17
82.194.32.0/19 maxlen: 19
77.69.148.0/24 maxlen: 24
88.201.99.0/24 maxlen: 24
88.201.0.0/17 maxlen: 17
193.188.96.0/19 maxlen: 19
217.17.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424301949 (0x194a557d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Apr 18 04:12:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1897149ee36716abc73dc0527e553affe3a9ff8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:8b:9b:1d:bb:cd:77:85:eb:4f:30:8d:a0:
ac:b5:67:6a:40:7c:1e:fd:1d:26:51:81:bc:30:70:
ec:3b:62:29:ae:37:63:6f:9e:f5:14:ea:7d:74:d4:
bd:d1:c8:10:96:63:33:f2:22:88:96:fa:ce:8e:3a:
6c:28:c7:69:00:62:c7:ea:48:f7:0d:81:bb:43:56:
53:d4:54:bd:32:f8:8a:04:34:52:f5:15:3f:93:af:
e5:47:86:9d:f7:b6:31:4d:58:d3:e1:d2:fe:31:dd:
dc:f8:82:4f:b1:df:79:5f:c6:d7:e9:62:bd:e8:fd:
84:be:00:bf:38:07:8d:d9:2e:b1:8b:e3:ec:b9:94:
d5:f0:73:f9:55:a2:66:06:40:10:ec:57:4b:78:d1:
df:9c:7e:d1:a6:f5:0c:22:22:24:20:ee:4b:d1:36:
47:12:b1:d3:fd:5e:20:d3:77:93:c6:ad:2a:e1:a1:
5e:09:65:83:40:c3:17:d4:21:dd:c1:1f:1e:e9:96:
a1:d3:48:8c:27:50:9c:a5:ed:d4:6c:74:71:1f:5b:
fd:13:69:9d:94:7e:e9:09:78:0f:f9:1f:12:52:1e:
ee:b6:fd:41:19:d8:8c:35:50:cb:7f:05:4e:cb:86:
48:da:35:31:ca:3f:63:63:8f:b3:fe:6c:12:b7:c2:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:14:9E:E3:67:16:AB:C7:3D:C0:52:7E:55:3A:FF:E3:A9:FF:8E
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/GJcUnuNnFqvHPcBSflU6_-Op_44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.69.128.0/17
82.194.32.0/19
84.255.128.0/18
88.201.0.0/17
89.148.0.0/18
185.165.176.0/22
193.188.96.0/19
217.17.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:35:45:7b:87:3d:04:80:83:de:aa:c7:68:cc:dd:fa:f8:ee:
fb:5a:46:9c:6b:b9:b7:6a:34:91:89:5d:b3:05:8e:9f:e8:27:
f4:d0:1c:70:ce:d9:bd:b3:dc:6c:12:f6:65:6c:1b:9c:12:b2:
d5:20:97:84:f9:96:6b:a8:1c:be:c9:4f:30:16:8a:68:4e:b3:
fd:3d:98:13:e4:7b:4b:71:b7:3d:dd:e1:35:82:9a:ba:72:bf:
b6:73:28:85:65:e4:d8:c5:4b:70:92:f8:b5:b7:69:6f:3b:1e:
fa:3c:21:8b:14:c4:06:2e:96:af:4c:c2:0c:88:a9:c2:da:da:
a2:6c:7b:c5:ec:91:68:0f:85:4f:7c:8c:f0:9a:e4:6d:a6:51:
1e:d6:03:eb:12:c1:9c:a5:7b:39:9d:2f:2e:a1:72:26:a4:a8:
e2:b7:3d:ab:bd:d8:92:00:4a:da:66:59:c7:81:02:5b:a5:51:
9a:54:43:c7:b8:53:0b:25:ad:45:0d:4a:f1:1a:98:3e:9f:51:
b3:15:af:13:c7:bd:5e:08:8c:7d:3f:07:7c:fa:3f:58:2e:a3:
f2:24:e9:f7:5d:01:cc:48:68:55:24:e2:70:db:06:47:13:5d:
5c:db:6e:56:3a:de:e7:df:f5:5d:b8:1e:36:79:86:6d:3e:88:
a2:a4:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:47 2023 by rpki-client on console-ams.rpki-client.org