Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/GJYn7Bbx5-ByE1SHTpX_GxLH7wc.roa
File: GJYn7Bbx5-ByE1SHTpX_GxLH7wc.roa (raw, json)
Hash identifier: Bc5BxMYpTfxXUo34ngD5Tw3MZ6P91qwl6BRkgXhgSJA=
Subject key identifier: 18:96:27:EC:16:F1:E7:E0:72:13:54:87:4E:95:FF:1B:12:C7:EF:07
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 079A4E28
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/GJYn7Bbx5-ByE1SHTpX_GxLH7wc.roa
Signing time: Sat 01 Jan 2022 15:06:08 +0000
ROA not before: Sat 01 Jan 2022 15:06:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31263
IP address blocks: 195.182.242.0/23 maxlen: 23
195.182.241.0/24 maxlen: 24
195.182.240.0/20 maxlen: 20
195.182.244.0/22 maxlen: 22
195.182.248.0/21 maxlen: 21
88.214.44.0/22 maxlen: 22
195.182.226.0/24 maxlen: 24
195.182.225.0/24 maxlen: 24
195.182.229.0/24 maxlen: 24
195.182.228.0/24 maxlen: 24
195.182.227.0/24 maxlen: 24
195.182.232.0/21 maxlen: 21
195.182.231.0/24 maxlen: 24
195.182.230.0/24 maxlen: 24
195.182.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127553064 (0x79a4e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Jan 1 15:06:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=189627ec16f1e7e0721354874e95ff1b12c7ef07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:be:ce:b3:8c:42:41:5b:b7:93:5e:28:97:
91:85:d6:88:a3:3a:d1:45:cf:08:d8:7a:f7:26:a6:
ff:6e:9d:67:62:f2:ca:f2:23:58:4b:cb:af:03:4a:
13:d0:7d:b9:98:6e:b7:c2:e5:e8:5f:98:34:ec:7c:
77:2e:bf:57:0f:24:7e:05:86:d1:2d:e2:8a:1d:63:
41:54:9e:26:5c:7a:35:e5:5c:79:ce:39:07:29:6c:
88:46:79:d3:4d:70:f6:4b:8c:20:4b:a1:ec:fe:09:
46:3d:00:18:20:3d:d4:12:7b:93:72:42:7c:75:b1:
e2:74:3f:e8:a4:8d:21:e7:47:88:59:35:52:aa:d2:
6a:63:62:b2:0d:56:a8:ce:ba:b8:8b:53:2f:23:55:
14:f7:21:0b:0a:d6:45:bb:2a:1e:22:e7:40:44:5c:
e7:26:ae:26:ae:52:38:ec:ee:96:0f:1a:12:73:79:
2d:30:58:dc:10:ee:84:a8:25:8d:2f:24:12:b0:a3:
25:f0:c7:34:d6:c8:5b:14:12:89:23:b8:59:ac:e0:
37:80:a0:0f:36:fe:46:0e:6b:4f:68:94:30:bd:e1:
b2:af:1c:ed:9f:c7:12:c2:a2:77:65:0c:48:2e:24:
22:74:b7:8e:15:4b:61:7e:61:fe:62:fc:71:f6:63:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:96:27:EC:16:F1:E7:E0:72:13:54:87:4E:95:FF:1B:12:C7:EF:07
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/GJYn7Bbx5-ByE1SHTpX_GxLH7wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.44.0/22
195.182.225.0-195.182.255.255
Signature Algorithm: sha256WithRSAEncryption
ab:c9:89:17:19:3a:88:0e:96:69:9b:6c:93:1f:2d:b9:71:11:
73:26:49:53:fc:a2:51:86:2f:d8:0d:fb:96:3e:ca:40:a9:f3:
d2:44:56:b3:f8:76:4d:7f:15:04:f8:86:07:10:71:dd:6c:6a:
05:b1:11:93:67:55:09:d7:21:e9:92:a3:c1:25:b9:45:c8:00:
79:eb:9f:91:b9:02:ac:13:db:45:81:30:3b:d3:69:97:c3:15:
7c:98:a4:eb:56:30:6e:e1:f7:48:77:83:06:fb:c4:1a:fc:20:
d4:05:85:79:df:bc:85:8c:62:f5:89:2d:b5:00:45:1a:ff:02:
5c:50:a8:3b:a9:b4:c9:52:84:bc:d7:f9:bf:44:6d:6b:f4:c1:
49:6b:54:0c:2b:5e:42:7a:59:62:50:38:ab:07:48:a8:d9:a1:
b0:22:31:35:05:c1:32:31:9a:30:50:11:8e:af:11:6f:ac:8a:
e5:db:f0:fe:b1:25:ee:3f:fc:d8:ba:38:f8:b3:e2:ac:3f:6c:
e7:92:96:30:f1:b3:f9:12:e3:5b:2d:fb:75:8f:9e:0b:16:bd:
da:fd:8d:c4:c7:d6:bf:1c:f2:4c:5a:24:c7:c0:60:70:d9:32:
0b:7e:43:36:33:72:9a:9d:3d:64:12:24:96:82:04:a1:31:ee:
40:03:9a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:04 2023 by rpki-client on console-ams.rpki-client.org