Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/gpnjNW4pNEoQArWgIKzdWsq7NhE.roa
File: gpnjNW4pNEoQArWgIKzdWsq7NhE.roa (raw, json)
Hash identifier: nGBpp+C3SKScx04Ws/Xbce5F/k4K0aFen5qKh8vysy0=
Subject key identifier: 82:99:E3:35:6E:29:34:4A:10:02:B5:A0:20:AC:DD:5A:CA:BB:36:11
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0A52677F
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/gpnjNW4pNEoQArWgIKzdWsq7NhE.roa
Signing time: Thu 12 May 2022 09:33:02 +0000
ROA not before: Thu 12 May 2022 09:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8280
IP address blocks: 185.51.132.0/22 maxlen: 24
185.51.135.0/24 maxlen: 24
185.51.133.0/24 maxlen: 24
46.227.58.0/24 maxlen: 32
46.227.56.0/21 maxlen: 24
46.227.57.0/24 maxlen: 24
46.227.60.0/24 maxlen: 24
46.227.61.0/24 maxlen: 32
46.227.59.0/24 maxlen: 24
46.227.63.0/24 maxlen: 24
46.227.62.0/24 maxlen: 24
78.108.32.0/20 maxlen: 24
78.108.37.0/24 maxlen: 24
78.108.36.0/24 maxlen: 24
78.108.38.0/24 maxlen: 24
78.108.33.0/24 maxlen: 24
78.108.32.0/24 maxlen: 24
78.108.35.0/24 maxlen: 24
78.108.34.0/24 maxlen: 24
78.108.40.0/24 maxlen: 24
78.108.39.0/24 maxlen: 24
78.108.42.0/24 maxlen: 24
78.108.41.0/24 maxlen: 24
78.108.44.0/24 maxlen: 24
78.108.43.0/24 maxlen: 24
78.108.45.0/24 maxlen: 24
78.108.47.0/24 maxlen: 24
78.108.46.0/24 maxlen: 24
2001:1548:7006::/48 maxlen: 48
2001:1548:7001::/48 maxlen: 48
2001:1548::/29 maxlen: 29
2001:1548:7010::/48 maxlen: 48
2001:1548:7009::/48 maxlen: 48
2001:1548:7004::/48 maxlen: 48
2001:1548:7007::/48 maxlen: 48
2001:1548:7002::/48 maxlen: 48
2001:1548:7011::/48 maxlen: 48
2001:1548:7005::/48 maxlen: 48
2001:1548:7000::/48 maxlen: 48
2001:1548:7003::/48 maxlen: 48
2001:1548:7008::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173172607 (0xa52677f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: May 12 09:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8299e3356e29344a1002b5a020acdd5acabb3611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:cd:2c:24:bd:30:e7:df:0b:68:18:47:ea:
8d:c7:cc:8d:7f:92:0a:9f:cb:0a:aa:f6:3e:77:17:
ae:d1:3f:0e:41:26:4a:d0:54:a7:4c:4b:75:20:f8:
fc:a9:42:cc:e8:5c:30:f9:61:be:fa:1e:25:8c:c8:
9a:e4:98:ef:e5:e2:95:f6:10:fd:b5:ba:a8:27:b9:
8b:07:55:9b:c8:fd:6f:c2:4e:d1:53:f1:77:d9:0a:
bd:2c:cf:6e:b5:6a:46:32:62:1d:00:fe:6f:38:fb:
b6:b3:c2:07:5d:8d:d5:01:75:65:82:17:c3:61:34:
e0:66:ba:04:83:42:a3:dc:c3:a5:28:fe:53:9b:2a:
3c:e9:63:6e:4b:75:60:03:44:02:ef:21:06:92:94:
0c:21:eb:86:e7:d1:6c:a8:01:70:cc:1b:19:24:b0:
dd:f8:5e:49:8f:79:c3:da:b2:e6:a7:66:a9:ec:f2:
4c:ae:4d:be:46:1c:2a:86:5f:3e:03:47:d6:ee:c8:
dd:ce:69:d3:bf:d7:37:d9:d9:13:c9:ea:1c:26:4d:
ed:30:a9:97:30:16:7d:1f:45:6a:41:7b:f5:5e:df:
65:c9:ec:ac:5c:49:9d:68:3e:0f:6a:e4:3c:c8:41:
e0:db:fb:46:77:01:0a:b1:cd:52:7f:18:a1:ea:17:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:99:E3:35:6E:29:34:4A:10:02:B5:A0:20:AC:DD:5A:CA:BB:36:11
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/gpnjNW4pNEoQArWgIKzdWsq7NhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.56.0/21
78.108.32.0/20
185.51.132.0/22
IPv6:
2001:1548::/29
Signature Algorithm: sha256WithRSAEncryption
48:17:50:36:d9:1a:23:af:72:37:90:e0:1b:d5:9d:b7:de:4b:
27:12:1d:04:f4:66:1e:eb:f9:0b:46:ee:9d:d5:4b:ea:e8:61:
ed:57:b7:96:d9:dc:f7:68:3f:36:3a:22:1a:43:98:67:89:84:
a1:52:48:8f:ef:e2:d2:16:f3:5e:a8:95:3d:e9:69:58:53:68:
0a:be:56:6f:d9:ce:c0:9d:a0:0c:23:e1:08:5d:87:83:40:cc:
b9:97:f1:0f:57:01:dd:7f:3b:62:65:ed:2a:b4:ed:c6:50:6a:
29:50:bb:a5:6e:13:e4:43:6a:bd:59:62:0f:b0:ba:11:88:1b:
78:00:c3:d5:69:84:d3:cd:6a:dd:c2:93:03:9d:0f:4e:9a:c9:
ab:4a:b5:fb:ff:a3:46:d3:80:5a:b7:a3:e4:3c:0b:96:93:22:
7c:c7:d1:fa:91:43:3a:e3:49:5f:ae:61:77:44:1d:5e:8e:5a:
61:79:3a:9e:ad:95:e2:a7:4a:e5:cf:74:5b:40:c6:f4:1e:2a:
eb:e1:8a:a1:fc:c4:24:7a:04:e7:78:f6:9d:09:5c:4e:c4:68:
c7:31:a7:cf:7d:2d:7a:34:c4:92:56:de:ca:9c:52:11:03:6a:
ff:2c:8f:ed:cf:cb:bd:62:43:7e:9d:20:62:6d:60:d2:d6:fa:
e2:20:15:c9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEClJnfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZjQwZmRkODJhMGZkZjNiNzBiZTE4MjIxZWViYTYwZDgwMWVkN2JmMB4XDTIyMDUx
MjA5MzMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODI5OWUzMzU2ZTI5
MzQ0YTEwMDJiNWEwMjBhY2RkNWFjYWJiMzYxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL96zSwkvTDn3wtoGEfqjcfMjX+SCp/LCqr2PncXrtE/DkEm
StBUp0xLdSD4/KlCzOhcMPlhvvoeJYzImuSY7+XilfYQ/bW6qCe5iwdVm8j9b8JO
0VPxd9kKvSzPbrVqRjJiHQD+bzj7trPCB12N1QF1ZYIXw2E04Ga6BINCo9zDpSj+
U5sqPOljbkt1YANEAu8hBpKUDCHrhufRbKgBcMwbGSSw3fheSY95w9qy5qdmqezy
TK5NvkYcKoZfPgNH1u7I3c5p07/XN9nZE8nqHCZN7TCplzAWfR9FakF79V7fZcns
rFxJnWg+D2rkPMhB4Nv7RncBCrHNUn8YoeoXRr8CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSCmeM1bik0ShACtaAgrN1ayrs2ETAfBgNVHSMEGDAWgBTPQP3YKg/fO3C+
GCIe66YNgB7XvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3owRDkyQ29QM3p0d3ZoZ2lIdXVtRFlBZTE3OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNzkyNzM3LTZhMDItNDI0Yi04MmNiLWEyOWNlN2RhMTBmZC8x
L2dwbmpOVzRwTkVvUUFyV2dJS3pkV3NxN05oRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NzkyNzM3LTZhMDItNDI0Yi04MmNiLWEyOWNlN2RhMTBmZC8xL3owRDkyQ29QM3p0
d3ZoZ2lIdXVtRFlBZTE3OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAy7jOAMEBE5sIAMEArkzhDANBAIA
AjAHAwUDIAEVSDANBgkqhkiG9w0BAQsFAAOCAQEASBdQNtkaI69yN5DgG9Wdt95L
JxIdBPRmHuv5C0bundVL6uhh7Ve3ltnc92g/NjoiGkOYZ4mEoVJIj+/i0hbzXqiV
PelpWFNoCr5Wb9nOwJ2gDCPhCF2Hg0DMuZfxD1cB3X87YmXtKrTtxlBqKVC7pW4T
5ENqvVliD7C6EYgbeADD1WmE081q3cKTA50PTprJq0q1+/+jRtOAWrej5DwLlpMi
fMfR+pFDOuNJX65hd0QdXo5aYXk6nq2V4qdK5c90W0DG9B4q6+GKofzEJHoE53j2
nQlcTsRoxzGnz30tejTEklbeypxSEQNq/yyP7c/LvWJDfp0gYm1g0tb64iAVyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org