Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/GbPWAj7kUPjPuMVV_K-vpkrZwv0.roa
File: GbPWAj7kUPjPuMVV_K-vpkrZwv0.roa (raw, json)
Hash identifier: ezg+dTYzKEWKu5sIDyyMW0Uiw0tkf0i6kk6HU3pj1vo=
Subject key identifier: 19:B3:D6:02:3E:E4:50:F8:CF:B8:C5:55:FC:AF:AF:A6:4A:D9:C2:FD
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 0C631EE8
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/GbPWAj7kUPjPuMVV_K-vpkrZwv0.roa
Signing time: Sat 01 Jan 2022 01:54:34 +0000
ROA not before: Sat 01 Jan 2022 01:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20495
IP address blocks: 84.244.128.0/18 maxlen: 18
84.244.128.0/19 maxlen: 32
92.48.224.0/20 maxlen: 32
92.48.224.0/19 maxlen: 19
92.48.240.0/20 maxlen: 32
92.48.192.0/20 maxlen: 32
92.48.192.0/19 maxlen: 19
92.48.192.0/18 maxlen: 18
92.48.208.0/20 maxlen: 32
84.244.160.0/19 maxlen: 32
217.148.160.0/20 maxlen: 32
217.148.160.0/19 maxlen: 19
217.148.176.0/20 maxlen: 32
2001:15c8::/32 maxlen: 32
2001:15c8:8000::/33 maxlen: 128
2001:15c8::/33 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207822568 (0xc631ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Jan 1 01:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19b3d6023ee450f8cfb8c555fcafafa64ad9c2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:7d:2d:19:1b:c1:a9:7a:30:1c:c6:c0:e5:
fa:54:b8:7a:46:7d:ac:54:ea:80:0e:a7:ad:16:cb:
3c:b5:60:1e:cf:89:7b:a2:26:82:7d:28:d4:e0:b2:
fb:77:17:b3:cb:f9:c5:6b:ea:db:4a:26:71:a4:f9:
71:7a:ca:44:1a:a7:02:c3:0a:9f:5c:49:86:15:2a:
b9:56:f6:bd:d4:3f:e9:e8:d8:ca:ea:28:77:47:bf:
87:cb:81:41:bc:79:39:a8:fc:14:03:52:2c:de:72:
dc:ed:6e:41:7c:e3:eb:33:c7:4a:89:7f:8f:55:c7:
74:d5:78:b1:13:84:f9:fc:fa:84:26:b2:fd:1c:72:
64:d6:82:52:73:8a:d8:3a:72:6e:dd:11:ed:2d:3f:
12:6f:a9:9f:9a:39:5f:d1:16:97:dc:86:f9:2d:3c:
d5:cf:16:e6:a1:eb:4b:20:cd:44:fe:e3:11:ef:d6:
65:ec:2a:09:47:2e:1a:d6:f5:dc:ec:49:b6:c2:62:
1b:f7:83:26:2e:80:b6:3c:25:3f:d4:1b:b8:8b:61:
6a:93:b3:9b:52:70:10:b9:ad:91:3e:8a:c5:57:6d:
21:bb:96:af:89:ca:b4:9f:d8:ab:57:6b:74:82:03:
11:ac:95:d6:74:13:10:ef:6b:07:99:30:a9:75:1a:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B3:D6:02:3E:E4:50:F8:CF:B8:C5:55:FC:AF:AF:A6:4A:D9:C2:FD
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/GbPWAj7kUPjPuMVV_K-vpkrZwv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.244.128.0/18
92.48.192.0/18
217.148.160.0/19
IPv6:
2001:15c8::/32
Signature Algorithm: sha256WithRSAEncryption
7f:40:fd:9f:f7:21:b8:3b:39:a5:59:8c:88:03:71:92:79:e4:
f1:de:9a:3e:7f:5b:0f:cf:38:61:a3:25:44:d0:f9:ce:a6:7b:
e3:7b:9d:b9:c5:cc:5a:af:4a:58:86:9a:6f:53:87:65:3b:b8:
c2:21:55:8a:50:0d:ee:ad:3b:ea:32:3b:aa:13:76:9c:e2:73:
82:e6:b7:dd:ef:99:e7:43:c4:9e:b8:9f:31:69:a2:01:5c:01:
0e:0c:a7:c4:6d:50:16:c3:f8:03:35:e0:b6:44:d1:ed:77:96:
af:b7:94:b8:ba:aa:41:c2:fe:93:59:db:7d:4a:b4:20:1e:c8:
22:31:d4:4d:b3:12:78:bc:a3:10:a2:b1:76:59:28:a7:9a:84:
f2:f9:41:85:39:1c:e1:4c:73:43:08:7e:99:4f:74:95:f3:db:
df:d7:06:6d:7c:5a:c3:8a:91:b3:f9:18:66:7d:e6:56:72:c3:
7c:8a:05:95:b7:82:72:5f:9c:13:18:5c:70:03:e2:63:5e:05:
09:f0:af:56:51:39:ef:60:88:f6:f4:12:78:48:b4:11:23:b8:
68:4a:ca:07:91:87:69:96:12:43:78:c8:9b:e4:f2:dd:7c:98:
b0:77:34:e6:32:00:b6:ce:a5:99:d9:f0:5d:7f:1d:0d:60:ab:
92:5e:3b:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:50 2025 by rpki-client