Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GBN39lbpJtOMEIFNyM995DhTfII.roa
File: GBN39lbpJtOMEIFNyM995DhTfII.roa (raw, json)
Hash identifier: XSkntWXQXVM47oqiuB1As6IsE7eJdVtdwbgoGvAZ7g8=
Subject key identifier: 18:13:77:F6:56:E9:26:D3:8C:10:81:4D:C8:CF:7D:E4:38:53:7C:82
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189793868BE09AA4D6C356A37805455C6D6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GBN39lbpJtOMEIFNyM995DhTfII.roa
Signing time: Fri 21 Jul 2023 16:11:27 +0000
ROA not before: Fri 21 Jul 2023 16:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
82.152.111.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
89.213.131.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:38:68:be:09:aa:4d:6c:35:6a:37:80:54:55:c6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 21 16:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=181377f656e926d38c10814dc8cf7de438537c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:a4:67:53:e9:b4:c1:20:c9:80:74:a8:5a:
3f:94:dc:cf:26:eb:e0:8b:4c:bd:a5:00:e6:ab:ef:
aa:ad:22:05:be:88:2a:b6:ba:83:67:36:42:f8:67:
98:bf:e9:19:c8:67:4c:b2:6d:2e:63:10:e2:33:6d:
1f:0d:11:b5:bf:2a:92:aa:05:00:eb:4d:bf:f2:9b:
f2:73:e5:e7:e8:3c:0a:a8:80:c9:f4:3b:bc:36:6d:
69:ad:05:23:31:8d:c1:07:da:1d:fc:3e:49:79:83:
68:4c:bc:41:1e:0c:03:04:ee:10:bb:3e:06:19:c6:
b9:5f:95:91:1e:67:d4:ea:5a:d9:f6:f1:48:2e:3e:
cd:f4:20:aa:d9:03:35:a5:4f:d5:ed:60:04:42:15:
1d:24:85:73:82:8a:72:cf:22:3a:21:0a:85:44:a3:
08:17:04:b8:ff:19:32:88:4f:c6:c7:15:10:46:a1:
f1:ec:a7:da:b2:9a:71:18:3c:c4:c1:00:d1:5c:4d:
81:c9:e4:61:95:85:ff:12:82:6f:29:25:94:56:c3:
f4:83:98:a0:ac:d7:6d:ff:23:2c:25:74:e1:d7:44:
5f:f3:0c:04:a0:48:28:79:96:c5:40:c9:8c:99:f6:
07:01:d8:4a:34:9d:8a:0f:1f:4c:dd:4d:61:47:7f:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:13:77:F6:56:E9:26:D3:8C:10:81:4D:C8:CF:7D:E4:38:53:7C:82
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GBN39lbpJtOMEIFNyM995DhTfII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0/22
82.153.223.0/24
82.153.249.0/24
89.213.131.0/24
89.213.191.0/24
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f2:97:9e:ef:2c:76:1f:26:50:9c:7d:ba:fc:3b:d5:5e:23:
8e:64:8a:d0:5f:4d:23:fd:e8:3a:26:19:ce:41:50:86:e8:2a:
f1:49:98:06:60:88:db:45:50:d8:e1:b4:1c:4b:25:bb:99:89:
84:f6:2b:72:ce:78:6d:e4:b3:52:2b:bf:09:42:02:49:d8:cb:
a9:12:22:72:ec:4f:25:0c:11:e6:a8:75:01:76:df:a3:ff:3a:
e9:d8:9f:6f:47:d0:a7:0c:b0:3b:69:6a:70:a2:81:5f:b3:5b:
5c:c4:d1:2d:78:70:51:a1:e8:af:7a:48:e7:31:b6:5a:1c:85:
d4:a4:19:5a:46:ed:3b:2c:de:10:5a:0c:0d:1f:6a:04:74:b0:
69:27:d9:f5:ee:3f:42:ff:da:0b:aa:f0:ca:24:12:90:a2:16:
4b:94:21:5b:ed:a0:d0:24:d4:57:af:c9:e5:80:bc:ce:14:41:
e0:e4:2f:88:f3:e5:2b:79:7b:38:84:00:4d:ad:6a:b0:3e:8a:
c5:2b:e4:29:c2:55:00:c9:fd:57:bd:45:e9:06:9b:c8:8d:d8:
5c:9e:24:21:07:13:b2:74:ed:72:4f:e0:6c:91:6f:28:ed:aa:
b9:11:0a:db:b7:1f:c1:1f:62:be:76:9e:15:1c:f7:12:9b:7d:
ea:18:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:14:43 2025 by rpki-client