Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/G8vFTwTHX090B8GK-pwyfeMd6Yk.roa
File: G8vFTwTHX090B8GK-pwyfeMd6Yk.roa (raw, json)
Hash identifier: AISaNXy+ucqXUpw0TU85XE4+jkx4/oa9oKZvLIE6Z/Q=
Subject key identifier: 1B:CB:C5:4F:04:C7:5F:4F:74:07:C1:8A:FA:9C:32:7D:E3:1D:E9:89
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 6210
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/G8vFTwTHX090B8GK-pwyfeMd6Yk.roa
Signing time: Mon 09 May 2022 11:00:02 +0000
ROA not before: Mon 09 May 2022 11:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60517
IP address blocks: 185.118.244.0/22 maxlen: 22
185.118.245.0/24 maxlen: 24
185.118.244.0/24 maxlen: 24
185.118.246.0/24 maxlen: 24
185.118.247.0/24 maxlen: 24
185.51.128.0/22 maxlen: 22
185.51.130.0/24 maxlen: 24
185.51.129.0/24 maxlen: 24
185.51.131.0/24 maxlen: 24
185.36.95.0/24 maxlen: 24
185.36.92.0/22 maxlen: 22
185.36.93.0/24 maxlen: 24
185.36.92.0/24 maxlen: 24
185.36.94.0/24 maxlen: 24
185.131.182.0/24 maxlen: 24
185.131.181.0/24 maxlen: 24
185.131.183.0/24 maxlen: 24
185.131.180.0/24 maxlen: 24
185.131.180.0/22 maxlen: 22
185.175.212.0/22 maxlen: 22
185.91.172.0/22 maxlen: 22
185.91.172.0/24 maxlen: 24
178.157.98.0/24 maxlen: 24
178.157.97.0/24 maxlen: 24
185.91.175.0/24 maxlen: 24
185.91.174.0/24 maxlen: 24
178.157.96.0/24 maxlen: 24
178.157.96.0/22 maxlen: 22
185.91.173.0/24 maxlen: 24
178.157.99.0/24 maxlen: 24
185.27.123.0/24 maxlen: 24
185.27.122.0/24 maxlen: 24
185.27.121.0/24 maxlen: 24
185.27.120.0/22 maxlen: 22
185.27.120.0/24 maxlen: 24
2a06:96c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25104 (0x6210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: May 9 11:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bcbc54f04c75f4f7407c18afa9c327de31de989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:c4:d6:2c:7a:c8:dc:9c:b9:03:23:07:16:
66:f7:3b:c7:9c:8c:6e:7b:a2:9d:b0:a3:55:e4:9d:
fc:e6:56:2b:56:87:da:d8:c6:45:89:e4:da:34:f5:
44:f1:70:0e:92:c9:ab:91:c6:b2:5f:14:ea:50:d2:
1a:ed:1a:8d:c2:3d:55:2c:c3:73:aa:05:7c:bb:b1:
2a:d4:40:94:03:fa:73:f4:2c:51:1a:bc:9d:49:09:
fc:7a:05:c8:43:7e:62:c9:27:d8:33:52:85:54:7a:
b2:c7:91:5c:8f:9a:e8:f1:af:a8:64:a4:a9:e6:55:
68:76:47:10:d7:08:8a:06:d4:0d:f2:aa:da:03:7e:
bd:08:14:4b:08:9b:f9:43:80:5b:02:b6:40:e1:b6:
8f:76:4b:72:dd:9d:7e:19:43:bc:75:3e:36:e2:98:
b3:4e:b6:ce:1e:c7:52:42:77:ba:b5:22:3a:d8:9d:
cd:00:a5:96:1a:73:2c:a5:47:b6:a8:a2:50:57:03:
51:27:f5:d0:99:00:66:dc:8b:3e:ce:3b:8c:e1:9a:
12:cc:d8:63:5e:da:a3:a8:0c:6b:1a:30:f1:e1:c9:
ec:f1:43:58:e0:1e:fe:7b:2c:46:25:71:d1:85:b6:
0d:95:88:19:2e:e7:c5:b6:03:5c:87:52:a6:41:3d:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CB:C5:4F:04:C7:5F:4F:74:07:C1:8A:FA:9C:32:7D:E3:1D:E9:89
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/G8vFTwTHX090B8GK-pwyfeMd6Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.96.0/22
185.27.120.0/22
185.36.92.0/22
185.51.128.0/22
185.91.172.0/22
185.118.244.0/22
185.131.180.0/22
185.175.212.0/22
IPv6:
2a06:96c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:8c:64:a5:02:c3:74:c4:42:5d:ba:28:63:10:77:d1:33:d7:
2f:c3:b8:e0:fb:ef:78:b9:be:a0:45:8d:4a:54:4f:c8:93:eb:
0f:41:0b:1b:ef:b9:95:b7:34:b4:b5:a9:52:c2:0f:7a:54:1a:
9f:bc:f1:ab:2e:de:ae:0c:13:da:71:e5:c4:ed:24:81:d3:ff:
45:f8:5b:40:3b:c2:63:25:8f:1e:ad:d8:0a:38:69:64:26:aa:
15:80:c1:f1:6a:cb:99:10:1d:99:5a:32:3a:46:e4:a4:24:25:
50:b6:3a:b7:aa:c0:ab:40:88:dd:5f:44:55:06:e0:0e:f2:22:
80:14:9d:d0:6e:0c:7f:29:65:26:b5:b8:1b:79:4e:c3:1c:84:
28:3d:74:65:25:05:46:c5:ad:dc:5d:26:f9:88:e3:7a:e7:c3:
d2:6d:6b:c3:e2:85:e9:71:dc:b1:63:9e:98:de:6f:b6:d0:0f:
f2:36:f0:16:56:34:56:fa:04:6c:37:6d:e6:21:7a:6c:e5:ff:
76:9f:00:ae:59:f1:22:65:13:48:ff:f6:05:e2:c3:8b:5e:e0:
d5:78:dd:34:0f:bf:3e:35:70:62:b9:0e:93:91:d8:3c:85:55:
a2:bf:34:1a:dc:ee:b2:ba:65:00:f4:96:e8:ed:13:fd:71:e4:
8a:d0:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:51 2024 by rpki-client on console-fra.rpki-client.org