Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1d902-b45d-412e-b246-35f0e176ea82/1/GZZ1EJ-NVNpg_8ZXGE4LfvM9_3Y.roa
File: GZZ1EJ-NVNpg_8ZXGE4LfvM9_3Y.roa (raw, json)
Hash identifier: cubWKmpx0FACpQjW9uIfvvPxhozvX4+NytB+1LS+f1U=
Subject key identifier: 19:96:75:10:9F:8D:54:DA:60:FF:C6:57:18:4E:0B:7E:F3:3D:FF:76
Certificate issuer: /CN=541d6a9e7a0236dfceeb5505a8a9644f6242e667
Certificate serial: 19B71BDA
Authority key identifier: 54:1D:6A:9E:7A:02:36:DF:CE:EB:55:05:A8:A9:64:4F:62:42:E6:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB1qnnoCNt_O61UFqKlkT2JC5mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1d902-b45d-412e-b246-35f0e176ea82/1/GZZ1EJ-NVNpg_8ZXGE4LfvM9_3Y.roa
Signing time: Sat 01 Jan 2022 16:03:33 +0000
ROA not before: Sat 01 Jan 2022 16:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3212
IP address blocks: 185.72.60.0/24 maxlen: 24
185.72.60.0/22 maxlen: 22
86.58.0.0/17 maxlen: 17
82.149.0.0/19 maxlen: 19
194.152.0.0/19 maxlen: 19
178.79.64.0/18 maxlen: 18
213.161.0.0/19 maxlen: 19
2001:1688::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431430618 (0x19b71bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541d6a9e7a0236dfceeb5505a8a9644f6242e667
Validity
Not Before: Jan 1 16:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=199675109f8d54da60ffc657184e0b7ef33dff76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:05:ed:6f:14:15:20:a6:bd:1c:c2:4b:20:
34:fd:dc:0d:9b:25:8a:52:af:e9:dd:40:4b:75:03:
5d:f7:04:c3:49:56:91:2d:a4:34:d6:71:3e:f3:50:
a3:53:1a:ad:d8:35:f6:ef:96:65:1e:5c:cd:11:40:
10:90:62:87:f5:95:5a:a9:b4:fe:82:e3:94:e9:85:
26:0f:b0:a3:8f:d2:2f:33:fb:39:86:df:41:84:05:
f2:da:77:3b:5a:7e:70:e0:87:87:48:17:b3:f4:19:
1e:f4:a5:6a:65:32:59:9d:1a:02:1d:6d:6d:f2:15:
99:49:13:0c:f6:73:9d:1d:b4:a7:68:57:bd:38:55:
9f:71:c3:a2:c4:b5:99:3c:41:bf:76:5f:4b:a3:54:
d9:f1:cc:37:e4:bb:57:2a:49:e5:63:f3:0d:8f:80:
89:71:ed:8d:2a:a7:6f:26:db:ea:af:be:23:20:0f:
e5:26:cb:7f:d6:0f:1a:aa:b7:2f:6c:5e:9f:58:28:
6e:23:91:42:3b:b7:99:9e:4a:ab:74:2e:5b:12:3a:
02:5e:e8:ad:aa:b1:71:f8:f2:1e:2a:46:13:57:7b:
c8:a3:01:7d:2d:aa:41:05:e2:b1:8c:da:71:42:0e:
7b:4d:cc:2e:2b:0c:06:72:2f:4c:92:ca:10:9f:63:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:75:10:9F:8D:54:DA:60:FF:C6:57:18:4E:0B:7E:F3:3D:FF:76
X509v3 Authority Key Identifier:
keyid:54:1D:6A:9E:7A:02:36:DF:CE:EB:55:05:A8:A9:64:4F:62:42:E6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB1qnnoCNt_O61UFqKlkT2JC5mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1d902-b45d-412e-b246-35f0e176ea82/1/GZZ1EJ-NVNpg_8ZXGE4LfvM9_3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1d902-b45d-412e-b246-35f0e176ea82/1/VB1qnnoCNt_O61UFqKlkT2JC5mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.0.0/19
86.58.0.0/17
178.79.64.0/18
185.72.60.0/22
194.152.0.0/19
213.161.0.0/19
IPv6:
2001:1688::/29
Signature Algorithm: sha256WithRSAEncryption
80:f5:06:d4:5d:ea:c2:e1:bf:5d:16:48:90:ba:c4:ce:a1:1e:
0a:c8:1f:51:e5:83:9b:31:42:11:24:a3:ce:5d:40:61:38:a5:
4d:9c:a0:2c:fd:e8:81:4a:10:e9:e4:30:06:d1:65:55:89:6b:
b6:fd:7c:85:f3:6b:6e:36:43:1e:c9:0f:44:1d:e8:e3:ea:7f:
27:98:47:e7:e8:33:a1:ab:81:79:f6:26:99:2c:ad:f0:49:da:
95:bf:4d:65:3d:3f:af:f7:d6:68:88:2d:66:56:02:c7:cc:c3:
54:8d:3e:c3:b7:8a:42:3e:41:31:5c:b2:48:4b:3c:20:e8:d5:
2d:69:a7:fd:a9:da:26:e8:c4:fc:fd:ee:b7:2d:c4:81:15:21:
69:d4:25:c0:28:61:4e:54:cd:aa:4c:5e:6f:2f:15:c9:3f:3b:
12:96:ba:df:03:86:cf:20:d5:64:e2:8b:6b:86:44:92:58:d2:
cb:ac:80:1b:f2:cc:80:e7:7e:7c:69:44:7f:40:aa:0a:6e:16:
ce:84:6b:56:05:af:bd:65:a2:ab:e5:56:9c:19:7c:81:c9:a4:
15:8a:04:cf:57:99:1d:7d:71:4c:00:64:59:96:dc:0a:31:ba:
e0:07:f0:bd:eb:22:f7:9c:ae:72:60:f9:ef:25:41:aa:dd:21:
92:42:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:38 2024 by rpki-client on console-ams.rpki-client.org