Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/GGMZYApwzz4bPcsWb--tIHhlbCM.roa
File: GGMZYApwzz4bPcsWb--tIHhlbCM.roa (raw, json)
Hash identifier: vSYN2XsLFvs9hJaDpHkjKIUN80On1N3Li/tWecMLUYk=
Subject key identifier: 18:63:19:60:0A:70:CF:3E:1B:3D:CB:16:6F:EF:AD:20:78:65:6C:23
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 095E81D4
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/GGMZYApwzz4bPcsWb--tIHhlbCM.roa
Signing time: Sat 01 Jan 2022 03:56:48 +0000
ROA not before: Sat 01 Jan 2022 03:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61194
IP address blocks: 46.245.208.0/21 maxlen: 21
5.159.40.0/21 maxlen: 21
185.61.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157188564 (0x95e81d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Jan 1 03:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186319600a70cf3e1b3dcb166fefad2078656c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:3a:5d:8e:3d:b8:ba:e3:cc:e3:0e:b8:a3:
f3:cc:5e:c1:4d:49:ab:c6:8a:8b:c8:0e:d4:1c:e9:
44:e1:09:a2:c5:21:d8:16:ee:2c:9f:ba:09:29:bb:
ff:a8:13:6f:4d:34:12:0f:a7:12:d7:20:bc:b6:44:
8b:f6:18:09:bb:e5:2e:a4:32:f5:b4:ad:cc:c8:e1:
cb:c1:99:99:08:63:06:c7:58:10:20:69:53:21:6b:
a2:95:36:f5:9a:80:40:9a:84:c2:62:19:9d:e2:1f:
6e:f3:90:7c:a2:c3:24:ae:22:70:16:2e:ae:3e:d2:
42:08:58:0d:3f:99:60:21:bf:62:7d:1b:3d:12:5d:
b3:36:6e:11:cc:da:90:83:54:0d:1d:85:1d:5d:22:
ae:f6:20:85:1d:45:f0:46:17:2f:7f:34:04:6b:2b:
57:6a:8d:b9:e7:c2:91:76:a8:db:e8:ed:bd:46:4d:
88:e6:68:12:f6:80:4d:d0:38:e4:ed:ed:b6:c5:b7:
9e:28:bb:3f:d7:47:80:a6:d1:70:4a:73:36:13:c9:
36:cb:2a:ef:d1:d7:3b:17:12:07:50:4f:69:c2:12:
e6:b2:40:3e:f5:7a:89:a6:a9:72:c4:c0:b4:a7:c6:
85:e0:1e:e8:b0:88:12:67:89:6e:44:0e:72:d8:1a:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:63:19:60:0A:70:CF:3E:1B:3D:CB:16:6F:EF:AD:20:78:65:6C:23
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/GGMZYApwzz4bPcsWb--tIHhlbCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.40.0/21
46.245.208.0/21
185.61.60.0/22
Signature Algorithm: sha256WithRSAEncryption
00:13:d6:68:33:eb:41:3c:df:fb:d6:2b:2e:64:e4:88:9b:4e:
6a:38:f6:10:31:93:93:0e:8f:76:8e:af:75:91:ec:56:5b:32:
4a:a8:63:b8:82:f1:82:09:7e:5c:c4:b6:6a:13:7e:bb:ea:70:
54:4e:a7:ca:d6:fd:fc:ad:0c:2d:e9:5a:dd:5c:58:49:88:d3:
9b:b8:2e:a4:00:3b:e3:9a:30:bb:4b:8f:f0:b6:2a:df:a0:89:
0a:6d:28:d8:8c:fe:f4:16:8f:a5:39:8a:85:e4:9a:5a:ec:46:
1d:0e:90:12:e6:25:80:14:e3:cc:1d:79:d9:59:1e:4f:7e:aa:
e7:97:bf:2f:8f:1e:2c:44:7a:ae:b7:18:58:04:03:fb:a9:f1:
02:fd:43:6e:ca:15:01:ca:3e:e8:fc:7e:07:fb:08:8f:a0:b1:
f2:a8:04:6c:7c:dd:de:16:4d:c4:79:06:33:de:b4:a2:70:6f:
39:77:f4:e1:50:6a:15:df:54:66:1d:11:10:c9:d3:12:96:82:
a7:1a:60:11:3c:ca:eb:0f:50:ee:5a:28:1e:78:e1:87:db:04:
6e:c0:3f:3c:71:7d:89:cc:d9:20:ad:4b:cd:3b:7c:13:b1:90:
3a:14:ae:c0:46:98:a9:5d:8d:0e:43:b0:b7:61:2c:52:a3:3e:
6a:5b:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:38 2025 by rpki-client