Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/gKH2sGViSe-5KQeEl1L1zKl9BrY.roa
File: gKH2sGViSe-5KQeEl1L1zKl9BrY.roa (raw, json)
Hash identifier: zIATFVXGNmGRlts4AwIajWRV5S3SdTpb+erqxgsdWRE=
Subject key identifier: 80:A1:F6:B0:65:62:49:EF:B9:29:07:84:97:52:F5:CC:A9:7D:06:B6
Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial: 040A663E
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/gKH2sGViSe-5KQeEl1L1zKl9BrY.roa
Signing time: Sat 01 Jan 2022 15:03:32 +0000
ROA not before: Sat 01 Jan 2022 15:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 193.58.80.0/21 maxlen: 24
160.92.0.0/16 maxlen: 24
193.16.186.0/23 maxlen: 24
193.16.188.0/22 maxlen: 24
193.201.76.0/23 maxlen: 24
192.136.30.0/24 maxlen: 24
89.106.184.0/21 maxlen: 24
193.56.46.0/24 maxlen: 24
2a01:20:6::/48 maxlen: 48
2a01:20:4::/48 maxlen: 48
2a01:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67790398 (0x40a663e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Validity
Not Before: Jan 1 15:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80a1f6b0656249efb92907849752f5cca97d06b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:5d:7f:13:72:d7:8b:62:9e:05:9a:5a:b0:
c3:2c:e7:1c:54:cb:8f:9d:0e:1a:b2:39:af:be:1f:
62:43:50:9a:5d:39:4f:32:e0:72:ae:5a:ed:d2:82:
cf:c6:1e:9d:44:67:f9:b6:81:7e:8f:f3:84:d7:6c:
4e:90:c7:ff:4d:c0:34:2b:05:ea:41:b1:aa:23:57:
68:58:8f:79:8f:12:41:98:91:50:2d:19:03:e8:21:
ac:4d:2d:61:dc:90:e0:ca:12:a6:dc:86:cd:1e:e2:
30:a3:c3:ae:62:fe:bd:82:3b:0d:7e:3c:82:0e:84:
93:9f:72:af:31:30:d0:cf:21:a0:8e:41:70:0b:cd:
3c:e4:ad:63:8d:fc:62:74:7b:5a:9e:23:d9:5f:b3:
fc:83:26:1b:d8:b3:18:e9:88:ad:3f:20:23:41:bb:
21:64:2e:8d:11:44:4b:94:45:a9:c1:7b:65:27:98:
bc:bb:e2:96:9f:bb:99:e1:7a:bd:a0:c6:1a:09:47:
c8:da:90:89:38:95:fa:d4:00:13:79:e7:b6:c4:ec:
80:83:29:bd:d8:2d:0e:4c:02:5d:37:db:fd:b8:5c:
78:96:b9:0d:99:91:3a:34:ef:7c:02:0a:44:80:c4:
0c:c0:34:a2:ee:63:a9:48:b9:14:00:dc:ee:9b:9e:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A1:F6:B0:65:62:49:EF:B9:29:07:84:97:52:F5:CC:A9:7D:06:B6
X509v3 Authority Key Identifier:
keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/gKH2sGViSe-5KQeEl1L1zKl9BrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.184.0/21
160.92.0.0/16
192.136.30.0/24
193.16.186.0-193.16.191.255
193.56.46.0/24
193.58.80.0/21
193.201.76.0/23
IPv6:
2a01:20::/48
2a01:20:4::/48
2a01:20:6::/48
Signature Algorithm: sha256WithRSAEncryption
c3:24:26:16:f9:43:55:fa:8f:a3:fc:2a:02:ba:24:25:37:dc:
f9:bb:cb:cf:63:7e:5c:55:f6:a1:50:ac:39:2b:88:ba:42:13:
48:b5:55:93:2b:5f:c3:1a:d0:08:cb:46:cd:90:39:7f:7c:b0:
a1:3a:e5:60:d2:bf:14:62:a5:8f:82:49:bb:c1:9b:9b:a1:21:
2d:ad:16:8e:b2:5c:27:25:85:e7:c8:a0:a8:6f:81:df:af:af:
06:15:41:5a:47:93:a3:17:f9:cc:a3:37:56:1f:20:c3:53:96:
2b:cb:4f:31:db:32:e7:67:2f:f1:54:5d:bb:57:5e:81:0f:0d:
00:a9:e8:99:98:3a:f7:5d:3e:ec:f7:0b:6f:24:3e:44:27:f6:
18:02:d1:ab:ed:13:53:b5:b2:a7:02:1c:fa:cb:8b:5d:ff:e0:
60:a3:89:db:e9:d4:28:00:a3:58:52:3d:6a:f1:de:7d:40:c9:
74:37:0c:46:6a:9f:19:91:e4:1e:1f:ac:5c:ae:9d:47:4c:c6:
ec:66:cf:a3:c9:98:7f:5c:33:5d:f3:0b:fe:2b:bb:bb:a9:06:
1c:44:37:9a:de:cd:5e:38:c4:b0:48:3f:8f:fd:a4:7c:2f:74:
a3:77:ad:c2:5d:2c:e0:e2:7f:e4:bd:2b:1d:77:a0:d9:98:df:
96:43:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:17 2023 by rpki-client on console-fra.rpki-client.org