Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/GPMC8bIVMHMvqhmPEjHmfC4499w.roa
File: GPMC8bIVMHMvqhmPEjHmfC4499w.roa (raw, json)
Hash identifier: q5ZDHp88+wxV+OLJUPvOepfbgGfQMVwmJ/dQEyj9akI=
Subject key identifier: 18:F3:02:F1:B2:15:30:73:2F:AA:19:8F:12:31:E6:7C:2E:38:F7:DC
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 0187504DE4042090C2ED9C51AF5349255481
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/GPMC8bIVMHMvqhmPEjHmfC4499w.roa
Signing time: Wed 05 Apr 2023 07:24:54 +0000
ROA not before: Wed 05 Apr 2023 07:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 206.204.0.0/20 maxlen: 32
206.204.16.0/20 maxlen: 32
43.252.28.0/22 maxlen: 32
103.211.184.0/23 maxlen: 32
206.204.32.0/20 maxlen: 32
203.78.168.0/21 maxlen: 32
206.204.48.0/20 maxlen: 32
37.61.226.0/24 maxlen: 32
94.176.48.0/20 maxlen: 32
92.255.86.0/23 maxlen: 32
216.194.80.0/20 maxlen: 32
103.225.128.0/22 maxlen: 32
89.223.14.0/23 maxlen: 32
89.223.18.0/23 maxlen: 32
45.130.120.0/22 maxlen: 32
92.255.32.0/21 maxlen: 32
103.207.152.0/23 maxlen: 32
213.188.64.0/22 maxlen: 32
193.151.52.0/22 maxlen: 32
116.212.188.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
213.188.80.0/20 maxlen: 32
85.208.148.0/22 maxlen: 32
103.30.12.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:4d:e4:04:20:90:c2:ed:9c:51:af:53:49:25:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Apr 5 07:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18f302f1b21530732faa198f1231e67c2e38f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:de:e4:10:8e:b0:c3:f1:c7:5e:9a:db:05:
50:ad:b1:e3:91:fd:22:ab:b8:9c:1d:9e:9e:10:49:
28:37:5f:d3:80:bd:68:33:88:2a:ee:dc:16:8d:b6:
a5:96:23:cf:40:2b:e6:e2:4b:d6:55:12:7e:01:84:
b7:14:e9:0f:3a:05:e1:76:10:03:59:a4:18:76:b0:
88:0b:da:29:6b:be:e0:8c:71:98:f4:f9:c3:50:d4:
36:7c:96:6a:60:52:30:46:57:2c:0e:dd:5a:70:3c:
85:23:d7:59:df:86:aa:b6:70:61:6a:30:93:c0:dd:
d5:fd:bc:d1:86:00:ac:68:cb:85:c6:bf:c2:1e:83:
53:d8:23:d2:9a:7b:4d:d3:8c:27:07:7a:07:da:e3:
0c:25:0a:4a:41:b9:71:e7:9e:5b:7c:9f:d4:f7:2a:
b5:50:d4:fc:3c:07:e4:3d:d6:b8:77:c5:89:a1:26:
24:6d:eb:46:f0:ef:e1:82:25:37:9c:ce:cd:4f:66:
d3:d0:e5:8f:f8:67:95:2d:44:88:c8:54:5d:69:04:
47:4c:8d:7d:2a:7a:17:ec:c4:39:b1:aa:eb:90:66:
ba:56:b5:1d:a8:68:cb:a9:41:6a:1b:d6:5e:d7:52:
cf:76:00:43:a5:eb:42:49:5b:8d:d9:a9:71:a2:cc:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F3:02:F1:B2:15:30:73:2F:AA:19:8F:12:31:E6:7C:2E:38:F7:DC
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/GPMC8bIVMHMvqhmPEjHmfC4499w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
45.130.120.0/22
85.208.148.0/22
89.223.14.0/23
89.223.18.0/23
92.255.32.0/21
92.255.86.0/23
94.176.48.0/20
103.30.12.0/22
103.207.152.0/23
103.211.184.0/23
103.225.128.0/22
116.212.188.0/22
180.94.216.0/22
193.151.52.0/22
203.78.168.0/21
206.204.0.0/18
213.188.64.0/22
213.188.80.0/20
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:88:65:95:9b:61:eb:76:21:04:c3:ef:2d:a3:96:73:09:d9:
63:3f:dd:bd:04:0b:6e:1b:6d:a1:02:de:02:60:bf:95:63:33:
ce:e3:44:bb:06:3f:fe:e9:39:b0:68:26:27:b6:54:9c:8e:13:
ae:ca:fa:a3:50:e0:cd:ec:00:4e:6d:4c:0c:de:0d:f6:29:27:
25:3d:ed:ab:15:26:79:ec:9f:b3:80:94:49:d0:44:92:c4:f7:
b5:91:81:6e:15:2b:6a:63:8a:90:17:6e:06:ab:4e:4c:c0:d8:
79:14:a5:69:27:b9:38:83:44:4f:c7:64:9b:5b:6c:21:16:57:
6b:cc:39:9d:12:68:8f:0b:5f:c2:0a:30:58:da:ba:b4:a6:f7:
03:67:5b:56:39:f2:5e:3f:ad:f4:9f:12:46:f3:4a:5e:52:ea:
88:b5:11:bf:39:63:10:5b:15:e5:1a:1f:6f:b3:11:1a:ef:ed:
c6:56:85:03:f2:6c:78:d8:b7:86:bb:46:87:ed:43:bc:76:95:
07:e6:59:96:73:3d:72:68:25:b9:23:4e:35:85:cb:ef:76:f8:
34:db:ab:c0:0e:6c:b2:71:b5:50:81:be:8a:67:43:88:f7:a4:
6c:e7:d2:cd:01:db:a0:3e:fd:1f:8f:05:cb:8a:df:5a:ff:eb:
7b:e6:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:12 2025 by rpki-client