Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/GGonFUfq1C3ivq6p3ZpQJoP6-WI.roa
File: GGonFUfq1C3ivq6p3ZpQJoP6-WI.roa (raw, json)
Hash identifier: QRRiKVqYMfpNQJzIVZ/kIq2ykCi1FX6LeJ+URaNoqZU=
Subject key identifier: 18:6A:27:15:47:EA:D4:2D:E2:BE:AE:A9:DD:9A:50:26:83:FA:F9:62
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0AC3DDD5
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/GGonFUfq1C3ivq6p3ZpQJoP6-WI.roa
Signing time: Tue 21 Jun 2022 12:47:46 +0000
ROA not before: Tue 21 Jun 2022 12:47:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8280
IP address blocks: 185.51.132.0/22 maxlen: 24
185.51.132.0/24 maxlen: 32
185.51.135.0/24 maxlen: 24
185.51.133.0/24 maxlen: 24
46.227.58.0/24 maxlen: 32
46.227.56.0/21 maxlen: 24
46.227.56.0/24 maxlen: 32
46.227.57.0/24 maxlen: 24
46.227.60.0/24 maxlen: 24
46.227.61.0/24 maxlen: 32
46.227.59.0/24 maxlen: 24
46.227.63.0/24 maxlen: 24
46.227.62.0/24 maxlen: 24
78.108.32.0/20 maxlen: 24
78.108.37.0/24 maxlen: 24
78.108.36.0/24 maxlen: 24
78.108.38.0/24 maxlen: 24
78.108.33.0/24 maxlen: 24
78.108.32.0/24 maxlen: 24
78.108.35.0/24 maxlen: 24
78.108.34.0/24 maxlen: 24
78.108.40.0/24 maxlen: 24
78.108.39.0/24 maxlen: 24
78.108.42.0/24 maxlen: 24
78.108.41.0/24 maxlen: 24
78.108.44.0/24 maxlen: 24
78.108.43.0/24 maxlen: 24
78.108.45.0/24 maxlen: 24
78.108.47.0/24 maxlen: 24
78.108.46.0/24 maxlen: 24
2001:1548:7006::/48 maxlen: 48
2001:1548:7001::/48 maxlen: 48
2001:1548::/29 maxlen: 29
2001:1548:7010::/48 maxlen: 48
2001:1548:7009::/48 maxlen: 48
2001:1548:7004::/48 maxlen: 48
2001:1548:7007::/48 maxlen: 48
2001:1548:7002::/48 maxlen: 48
2001:1548:7011::/48 maxlen: 48
2001:1548:7005::/48 maxlen: 48
2001:1548:7000::/48 maxlen: 48
2001:1548:7003::/48 maxlen: 48
2001:1548:7008::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180608469 (0xac3ddd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jun 21 12:47:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186a271547ead42de2beaea9dd9a502683faf962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:0b:a7:10:81:c6:ac:d4:3c:26:5d:09:6a:
da:27:6d:11:2b:67:c3:8c:26:42:5b:0a:11:84:57:
3c:1f:82:8c:f9:68:a6:5e:de:70:16:a3:67:ef:8b:
ec:c5:3d:e3:f8:86:e1:1c:a6:e3:a4:54:95:d3:ad:
2c:7c:dc:2d:85:3c:0d:d8:9c:40:00:7a:c2:8b:97:
7b:2a:1e:59:f5:aa:a2:56:8b:29:22:f2:b8:a7:bd:
30:b4:a2:7b:d8:e6:fc:cc:5a:58:c7:47:c4:a3:b1:
b5:ac:de:fa:ef:0d:d7:47:39:e5:7c:12:53:89:0a:
db:b4:27:8f:4f:0a:76:87:f6:a7:97:55:6c:39:5b:
d4:bd:17:f4:7f:5e:c1:d8:2d:f8:76:c5:e6:64:bc:
18:2d:af:cb:2a:a1:a7:ab:06:9e:48:db:ee:42:c9:
02:d0:f3:b5:f3:7d:4e:40:93:8c:29:21:03:3f:ba:
f9:03:42:fa:42:fd:82:35:17:6c:53:d0:d6:b3:c2:
4c:53:54:e0:9d:75:ae:8a:0c:be:f5:78:2c:5e:72:
be:3d:87:2e:bf:f8:57:a1:3e:9f:62:9c:74:0c:76:
d3:57:17:26:bf:0d:a6:c8:09:66:cd:ea:a4:13:3c:
3f:2d:28:3b:20:7d:e9:5c:18:71:f7:5a:5b:1d:21:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:27:15:47:EA:D4:2D:E2:BE:AE:A9:DD:9A:50:26:83:FA:F9:62
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/GGonFUfq1C3ivq6p3ZpQJoP6-WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.56.0/21
78.108.32.0/20
185.51.132.0/22
IPv6:
2001:1548::/29
Signature Algorithm: sha256WithRSAEncryption
58:fd:e7:10:c6:06:69:15:80:48:65:08:0c:5c:5e:25:7a:d2:
d9:04:a5:02:82:62:5a:0e:b6:f4:cc:8c:55:e9:c4:fa:56:5a:
14:ee:53:f2:26:5b:c3:df:af:c5:a7:5d:76:e8:26:c6:01:12:
fc:56:75:30:09:a1:9e:a3:72:93:86:50:b5:fe:da:3c:a9:b5:
c7:58:4c:95:3a:cb:3d:51:db:d5:04:32:76:25:8c:58:8b:4f:
b0:d9:ed:4b:69:1b:60:ea:16:10:e4:5d:6b:e0:ea:fc:26:45:
6a:e2:54:6d:03:3c:7c:af:bf:06:d6:30:74:b7:60:fe:28:bd:
c1:e2:7d:fb:13:4a:70:0d:e2:c0:4c:30:73:59:df:8b:78:e2:
58:36:f7:5a:f3:74:83:89:3b:8a:46:ab:d4:ac:9d:7e:cb:6a:
62:8f:bc:33:2e:48:54:82:33:c0:de:56:5a:7a:71:d3:19:ab:
ac:27:96:2e:d7:83:b4:61:20:6e:91:2b:3c:d3:61:c8:54:42:
54:47:06:25:b4:6f:c4:6d:85:f8:8d:70:0f:51:5b:65:3e:8d:
95:3d:17:de:ee:01:e5:bc:ec:ae:ff:cd:5f:3b:1f:1e:c0:92:
62:18:2a:fa:59:cc:36:1f:7d:bb:d2:f0:19:42:f2:d9:0d:67:
55:29:12:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org