Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/ggp9nPhGk00JqB_rEUQEup9aixM.roa
File: ggp9nPhGk00JqB_rEUQEup9aixM.roa (raw, json)
Hash identifier: hPf1mw1KH5PlHyrZxT9RUiZx/sWvkBxvlHNXH2cJ/Zs=
Subject key identifier: 82:0A:7D:9C:F8:46:93:4D:09:A8:1F:EB:11:44:04:BA:9F:5A:8B:13
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 01861B18B5EA7F40BF64B89213A4238E3925
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/ggp9nPhGk00JqB_rEUQEup9aixM.roa
Signing time: Sat 04 Feb 2023 06:24:09 +0000
ROA not before: Sat 04 Feb 2023 06:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12993
IP address blocks: 37.203.39.0/24 maxlen: 24
185.34.24.0/22 maxlen: 22
185.34.24.0/23 maxlen: 23
178.16.16.0/20 maxlen: 20
193.108.185.0/24 maxlen: 24
37.203.32.0/21 maxlen: 21
37.203.32.0/23 maxlen: 23
185.219.156.0/22 maxlen: 22
89.111.0.0/18 maxlen: 18
193.108.144.0/22 maxlen: 24
193.108.144.0/23 maxlen: 23
89.111.38.0/24 maxlen: 24
194.9.175.0/24 maxlen: 24
185.34.26.0/23 maxlen: 23
81.94.224.0/20 maxlen: 20
81.94.229.0/24 maxlen: 24
2a00:17c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1b:18:b5:ea:7f:40:bf:64:b8:92:13:a4:23:8e:39:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Feb 4 06:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=820a7d9cf846934d09a81feb114404ba9f5a8b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:0d:32:9f:47:3f:d5:b6:36:64:e3:4d:92:
0e:e5:d7:cd:eb:12:28:cf:ac:a0:82:65:e6:50:09:
6e:72:09:d6:0d:4c:f5:fe:80:fb:e7:fa:5d:89:78:
52:0b:57:87:a9:5a:36:91:08:55:08:a0:1f:e0:de:
22:b9:86:fb:09:87:f6:1a:ec:78:ac:16:20:d6:d9:
47:c9:4b:51:49:62:54:2b:6d:51:4a:0c:4e:81:8b:
09:6c:df:7b:54:d2:3b:62:fe:13:16:42:28:c4:07:
3b:c6:e4:0e:2a:20:4e:0e:73:bf:63:61:aa:3c:da:
71:12:b6:4b:7b:f0:44:5e:6d:15:23:d0:f9:69:b2:
e2:2e:5b:1d:f7:ea:a7:3e:76:c5:b7:b8:c3:97:f9:
86:b5:31:9f:04:05:4c:c6:bd:7d:41:01:e0:55:ab:
6d:fa:c7:f0:3e:b4:d1:ee:5f:31:fa:f9:d6:4f:99:
7a:48:71:cf:02:ee:44:71:ea:d6:2b:87:52:f2:9f:
7a:d2:09:d8:cc:ed:36:f1:b9:6a:ef:dd:57:c0:f5:
e3:4f:82:e2:a7:a7:ae:dd:9f:1e:ef:93:fe:ae:7b:
89:7a:0d:51:61:0b:22:56:de:0f:77:0a:06:ba:ad:
e4:7b:8e:2b:1c:8f:52:a5:44:16:d7:f8:b6:81:eb:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:7D:9C:F8:46:93:4D:09:A8:1F:EB:11:44:04:BA:9F:5A:8B:13
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/ggp9nPhGk00JqB_rEUQEup9aixM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.32.0/21
81.94.224.0/20
89.111.0.0/18
178.16.16.0/20
185.34.24.0/22
185.219.156.0/22
193.108.144.0/22
193.108.185.0/24
194.9.175.0/24
IPv6:
2a00:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
92:1a:39:ea:0c:c9:18:ba:1b:8f:30:a7:25:ca:76:e7:32:52:
75:c6:dd:c2:6d:12:f4:f3:6d:af:2c:bc:1f:00:fb:dd:14:70:
e7:cf:dc:4a:8d:2a:58:28:f3:17:0c:be:0a:2b:e4:65:ea:ee:
ff:05:15:08:e3:c7:72:57:a1:ed:b7:b4:1b:c6:bb:c6:78:0f:
e1:a6:64:96:01:15:36:63:eb:7b:f1:a6:b3:7a:9a:06:77:2b:
5d:c7:3d:25:44:10:0d:4c:df:98:eb:00:43:fa:c7:ac:71:74:
f8:79:47:12:7d:5e:13:2c:e7:6a:03:ec:93:6e:c4:ff:99:d7:
a0:79:6e:3e:33:eb:65:7a:eb:b8:a6:aa:9e:70:fd:45:60:32:
3c:7f:a2:17:e5:21:b8:95:fc:6d:b5:05:b9:b4:2b:24:9f:21:
b4:e7:03:02:78:38:c3:83:2e:68:87:dd:9d:88:6d:62:e7:e2:
88:4d:e8:9c:9f:fe:a5:8f:4b:84:f9:05:40:e2:31:7e:15:8d:
f6:fd:31:89:ad:e0:12:de:5a:08:1a:c1:04:50:61:a4:5b:cf:
b4:81:e1:5d:fa:7d:09:9e:31:e9:e7:3b:7f:7d:a5:15:7e:97:
d0:e4:cd:7e:2e:54:a0:3a:db:bb:f4:82:0a:e4:a3:e5:9f:e0:
0f:2d:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:53 2025 by rpki-client