Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/GeMijHuzbGBbLTpNJT3pst9CT3E.roa
File: GeMijHuzbGBbLTpNJT3pst9CT3E.roa (raw, json)
Hash identifier: lxRTfHb5lRvzCROF5olHyb5+RTLUEjFTaEa6CjNcfYA=
Subject key identifier: 19:E3:22:8C:7B:B3:6C:60:5B:2D:3A:4D:25:3D:E9:B2:DF:42:4F:71
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 0FF5A1C1
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/GeMijHuzbGBbLTpNJT3pst9CT3E.roa
Signing time: Tue 08 Feb 2022 21:04:34 +0000
ROA not before: Tue 08 Feb 2022 21:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41722
IP address blocks: 185.174.165.0/24 maxlen: 24
185.174.166.0/24 maxlen: 24
185.174.167.0/24 maxlen: 24
91.142.80.0/24 maxlen: 24
91.142.83.0/24 maxlen: 24
91.142.84.0/24 maxlen: 24
91.142.81.0/24 maxlen: 24
91.142.82.0/24 maxlen: 24
91.142.85.0/24 maxlen: 24
91.142.87.0/24 maxlen: 24
185.53.20.0/24 maxlen: 24
91.142.86.0/24 maxlen: 24
91.142.90.0/24 maxlen: 24
185.53.23.0/24 maxlen: 24
185.53.22.0/24 maxlen: 24
91.142.91.0/24 maxlen: 24
91.142.88.0/24 maxlen: 24
185.53.21.0/24 maxlen: 24
91.142.89.0/24 maxlen: 24
91.142.94.0/24 maxlen: 24
91.142.92.0/24 maxlen: 24
91.142.93.0/24 maxlen: 24
91.142.95.0/24 maxlen: 24
178.250.152.0/24 maxlen: 24
178.249.71.0/24 maxlen: 24
178.249.70.0/24 maxlen: 24
178.249.68.0/24 maxlen: 24
178.249.69.0/24 maxlen: 24
185.162.92.0/24 maxlen: 24
185.162.93.0/24 maxlen: 24
185.162.95.0/24 maxlen: 24
185.162.94.0/24 maxlen: 24
185.162.94.0/23 maxlen: 23
185.147.80.0/24 maxlen: 24
185.147.83.0/24 maxlen: 24
185.147.81.0/24 maxlen: 24
185.147.82.0/24 maxlen: 24
2a03:21c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267755969 (0xff5a1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Feb 8 21:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19e3228c7bb36c605b2d3a4d253de9b2df424f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:fd:e7:02:37:d9:5e:20:dc:fe:e9:0f:0a:
e2:1c:0d:ad:3e:93:5e:20:dd:d7:91:a6:81:71:6b:
99:c1:04:28:ed:bc:16:97:5f:6d:a7:67:ee:a1:30:
a6:a0:72:94:0b:84:ac:46:e9:c7:52:5f:b3:06:ab:
2f:42:ff:0e:99:f0:a4:2f:bb:ee:98:06:fa:b3:56:
81:f7:80:10:6d:77:27:92:db:ea:9c:b8:8f:6f:4f:
33:ba:7a:57:43:ec:e4:fc:8c:94:86:37:8b:15:f3:
3c:dc:4b:28:0d:f8:8f:1a:c0:25:47:30:b5:7b:6a:
c6:55:c3:df:7d:18:b8:b2:f1:4e:ff:84:03:94:e8:
a7:78:8b:76:c8:46:c5:84:12:c5:ad:c5:12:36:50:
34:64:68:54:de:f1:38:37:c2:13:17:e6:95:d4:c6:
4d:53:b8:ef:86:21:6a:5e:9c:70:c0:60:c4:7e:1a:
73:10:8b:fe:2a:ed:7a:40:e8:2c:d0:bf:bd:d6:ee:
34:ef:2e:7e:52:1a:b7:43:1c:b2:5e:bb:21:91:13:
35:6a:ae:38:6a:03:48:80:e9:4c:34:bc:6a:2e:54:
b0:11:12:c7:90:67:76:3c:05:a7:3a:45:11:1f:a8:
5c:bb:ac:90:d0:ff:9b:0c:2b:ff:d5:e9:02:86:20:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E3:22:8C:7B:B3:6C:60:5B:2D:3A:4D:25:3D:E9:B2:DF:42:4F:71
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/GeMijHuzbGBbLTpNJT3pst9CT3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.80.0/20
178.249.68.0/22
178.250.152.0/24
185.53.20.0/22
185.147.80.0/22
185.162.92.0/22
185.174.165.0-185.174.167.255
IPv6:
2a03:21c0::/32
Signature Algorithm: sha256WithRSAEncryption
60:d7:b5:6f:36:ea:ca:9a:b6:96:99:1c:ac:9a:79:75:27:f6:
d2:49:5c:8d:bb:c7:51:46:81:1b:f1:d9:fd:aa:47:ef:f1:56:
e1:30:fe:eb:bc:60:29:4d:6e:75:76:30:66:11:d0:7b:7c:28:
2c:56:9c:cc:e3:4f:52:de:17:11:4f:f5:5d:b7:4f:6e:a8:60:
85:0b:e1:81:e4:f8:7d:36:62:91:01:a9:ef:99:5a:98:fd:81:
2d:2a:35:4b:e7:97:5f:1d:60:ba:1b:7e:b0:31:a7:ac:c4:1e:
04:6b:a0:6e:74:10:03:81:6d:b0:6e:44:be:d8:88:a6:d1:20:
67:00:71:06:3a:49:42:5a:3b:17:48:3f:18:bd:37:f3:b5:a9:
06:65:b1:d0:27:13:f1:8e:2a:83:01:73:30:e4:bf:cc:c7:04:
15:9e:0a:5c:5c:e1:73:ce:2e:68:57:a3:e7:d6:fa:14:cc:5c:
e6:73:5b:8c:41:bc:54:3d:e4:6f:ad:52:1f:10:71:f6:b0:50:
47:92:dd:60:ad:67:98:f0:45:cd:69:89:93:1d:cf:42:3f:bf:
81:14:6c:6a:34:e4:ec:17:1c:5d:86:ce:b0:b5:e4:a1:56:91:
c3:fe:13:41:0c:0c:3b:8e:d9:95:6c:62:e3:94:b9:5c:99:66:
16:5c:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:34:56 2025 by rpki-client