Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/GW5Kryb6j80HE4mJx_0xaQu5Wy8.roa
File: GW5Kryb6j80HE4mJx_0xaQu5Wy8.roa (raw, json)
Hash identifier: 6kx95Y7zBLy4GOrmBuqLeggXh2Gvtzp2WBhG18r0pgU=
Subject key identifier: 19:6E:4A:AF:26:FA:8F:CD:07:13:89:89:C7:FD:31:69:0B:B9:5B:2F
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 328CFE13
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/GW5Kryb6j80HE4mJx_0xaQu5Wy8.roa
Signing time: Mon 03 Jan 2022 23:24:14 +0000
ROA not before: Mon 03 Jan 2022 23:24:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29075
IP address blocks: 91.109.176.0/20 maxlen: 20
128.204.224.0/20 maxlen: 20
85.118.32.0/19 maxlen: 19
141.255.144.0/20 maxlen: 20
185.118.0.0/22 maxlen: 22
185.123.24.0/22 maxlen: 22
45.94.124.0/22 maxlen: 22
178.20.48.0/21 maxlen: 21
212.85.144.0/20 maxlen: 20
188.121.224.0/19 maxlen: 19
2a02:2178::/29 maxlen: 29
2a00:1b88::/32 maxlen: 32
2a02:2178::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848100883 (0x328cfe13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 3 23:24:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=196e4aaf26fa8fcd07138989c7fd31690bb95b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:1d:89:1f:c3:8b:81:2f:ed:c6:15:ed:50:
03:bb:3d:e3:ed:04:2e:28:af:47:6a:fb:fa:7c:89:
f9:36:8b:c0:ba:6f:50:cc:b6:2f:05:50:dc:a7:13:
6b:2d:29:9a:6d:98:aa:7c:d6:a1:f6:25:e9:1f:b5:
fd:17:a1:bd:b3:6f:54:60:38:ac:50:dd:10:97:f9:
2d:9e:15:c6:c0:6e:24:81:44:28:6d:8d:67:cc:73:
dc:95:e0:38:c5:9a:d8:56:ad:e6:bf:e7:30:29:d4:
3d:f9:3a:2f:a6:2d:b4:88:ca:e4:72:61:60:f0:a2:
b7:22:bf:10:ca:02:f3:32:a0:c9:c9:11:71:74:74:
22:b6:45:6b:f4:28:57:0c:9b:51:ea:d4:5d:f9:dc:
12:a7:27:23:d8:19:52:43:95:3a:7c:9d:01:bf:22:
50:30:ed:18:3f:23:e4:77:48:69:0a:ea:43:c2:15:
ac:c6:f0:91:7d:d1:c7:c9:34:eb:3f:f7:41:5c:00:
e4:a9:10:3a:54:71:4e:f3:56:68:03:67:01:9b:5a:
da:a4:34:57:85:d4:bb:20:14:be:5a:c1:e2:03:1e:
96:94:aa:59:76:ac:54:dd:49:b4:7a:69:76:4d:23:
75:20:87:c2:6a:de:ea:ed:10:2b:b4:27:92:9a:ae:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:4A:AF:26:FA:8F:CD:07:13:89:89:C7:FD:31:69:0B:B9:5B:2F
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/GW5Kryb6j80HE4mJx_0xaQu5Wy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.124.0/22
85.118.32.0/19
91.109.176.0/20
128.204.224.0/20
141.255.144.0/20
178.20.48.0/21
185.118.0.0/22
185.123.24.0/22
188.121.224.0/19
212.85.144.0/20
IPv6:
2a00:1b88::/32
2a02:2178::/29
Signature Algorithm: sha256WithRSAEncryption
75:45:8e:58:3d:88:0d:a0:1c:94:7c:f0:86:3e:94:cb:c5:3e:
b0:1c:e5:2f:ff:ad:21:38:9d:f3:50:9c:0e:ae:03:7e:26:86:
5b:c5:8f:f2:df:ce:da:18:9e:eb:22:a2:08:63:81:e8:78:28:
2f:82:28:7e:fc:da:51:06:93:0a:ee:f9:17:3f:aa:59:f1:ac:
2b:8e:cb:fc:e1:4f:93:2c:2e:73:67:77:39:e9:86:2c:a3:be:
d6:67:85:dd:65:c3:4b:8a:3d:66:ac:73:f3:e9:aa:b9:2e:7d:
c6:bd:bf:12:99:51:3d:30:aa:89:25:e0:9e:16:ef:4d:9f:2c:
02:2a:82:68:41:06:f6:59:e5:a3:87:27:5c:dc:77:2f:f0:98:
f8:22:18:27:40:87:5a:1d:c9:7e:eb:3e:61:6d:20:04:86:50:
cf:10:6f:28:db:22:f7:b7:0e:d4:24:c9:f3:33:d3:cc:56:9b:
7f:60:5f:7b:17:41:69:f8:f5:40:5a:44:01:d3:cf:5c:7c:ff:
d8:ee:ac:22:f7:90:00:4d:f6:71:ab:2a:29:5c:53:89:d8:ac:
a0:47:c2:6f:f6:0e:d2:3d:9f:f0:5d:e0:4b:0d:4a:a1:8e:16:
f7:ff:f4:5a:e8:fa:22:ba:86:28:52:f6:c7:68:30:5b:a7:5b:
b4:d7:64:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:47 2024 by rpki-client on console-ams.rpki-client.org