Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Gd_zgV94Pqtu3yOg3VqWHSDYpZA.roa
File: Gd_zgV94Pqtu3yOg3VqWHSDYpZA.roa (raw, json)
Hash identifier: XSKSAsXJSmi5RGI9qZMjBo2vMQKtvXtUlvwFWhKyt4o=
Subject key identifier: 19:DF:F3:81:5F:78:3E:AB:6E:DF:23:A0:DD:5A:96:1D:20:D8:A5:90
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 01856F5DA594E5A8C72262DE013DEC130E03
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Gd_zgV94Pqtu3yOg3VqWHSDYpZA.roa
Signing time: Sun 01 Jan 2023 22:04:45 +0000
ROA not before: Sun 01 Jan 2023 22:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 193.197.70.0/24 maxlen: 24
193.197.68.0/23 maxlen: 23
193.197.85.0/24 maxlen: 24
193.197.80.0/22 maxlen: 22
193.197.86.0/23 maxlen: 23
193.197.94.0/24 maxlen: 24
193.197.112.0/22 maxlen: 22
193.197.20.0/23 maxlen: 23
193.197.28.0/22 maxlen: 22
193.197.32.0/19 maxlen: 19
193.197.64.0/22 maxlen: 22
193.197.180.0/22 maxlen: 22
193.197.200.0/21 maxlen: 21
193.197.212.0/24 maxlen: 24
193.197.224.0/19 maxlen: 19
193.197.120.0/21 maxlen: 21
193.197.132.0/22 maxlen: 22
193.197.130.0/24 maxlen: 24
193.197.136.0/21 maxlen: 21
193.197.152.0/22 maxlen: 22
193.197.149.0/24 maxlen: 24
193.197.157.0/24 maxlen: 24
193.197.160.0/22 maxlen: 22
193.197.160.0/23 maxlen: 23
193.197.168.0/21 maxlen: 21
193.196.130.0/23 maxlen: 23
193.196.132.0/22 maxlen: 22
193.196.129.0/24 maxlen: 24
193.196.136.0/21 maxlen: 21
193.196.144.0/21 maxlen: 21
193.196.152.0/24 maxlen: 24
193.196.154.0/23 maxlen: 23
193.196.156.0/22 maxlen: 22
193.196.64.0/18 maxlen: 18
129.143.0.0/16 maxlen: 16
193.197.4.0/23 maxlen: 23
193.197.0.0/24 maxlen: 24
193.197.8.0/22 maxlen: 22
193.196.165.0/24 maxlen: 24
193.196.160.0/22 maxlen: 22
193.196.166.0/23 maxlen: 23
193.196.168.0/21 maxlen: 21
193.196.176.0/20 maxlen: 20
193.196.192.0/18 maxlen: 18
192.67.189.0/24 maxlen: 24
193.196.0.0/21 maxlen: 21
193.196.9.0/24 maxlen: 24
193.196.16.0/20 maxlen: 20
193.196.13.0/24 maxlen: 24
193.196.0.0/15 maxlen: 15
192.67.208.0/24 maxlen: 24
2001:7c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:a5:94:e5:a8:c7:22:62:de:01:3d:ec:13:0e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jan 1 22:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19dff3815f783eab6edf23a0dd5a961d20d8a590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:00:3f:90:6f:c0:af:3a:db:92:39:0e:0d:
d3:a1:0d:14:13:72:67:6d:8c:d0:89:01:85:82:e5:
ab:0e:e0:94:e8:ac:fd:de:ca:d7:1f:7d:08:ab:05:
38:41:95:d5:cb:b4:e6:66:59:6b:ca:3e:4e:82:64:
4d:58:07:dd:ec:19:80:ac:78:e3:00:b2:7a:9d:26:
bf:36:09:8a:51:d3:f9:c4:f2:2e:b0:74:63:1a:77:
ee:40:5b:c6:12:c9:1b:3f:3e:b7:a3:b5:00:33:8f:
60:58:df:23:fb:c6:f3:a1:60:68:af:e6:27:4c:1e:
7c:0a:a2:7b:2d:11:3e:91:c5:74:df:8d:1c:61:0f:
ed:c4:d1:fb:9d:6a:7f:8f:7b:04:76:93:87:3d:37:
7e:2d:6a:c1:93:68:3f:81:25:3c:bc:52:bd:e0:12:
33:aa:b8:4c:64:7d:d2:e1:6e:38:25:3d:5e:a7:98:
70:6e:ce:0f:e7:ff:b2:89:40:32:a1:22:a3:08:db:
b6:1b:f8:22:6f:4c:cb:ef:87:1a:87:35:c0:e3:eb:
1c:0c:bc:6e:09:b0:d5:d8:c2:5f:12:d5:98:d5:4d:
ef:24:7f:2c:d8:35:60:f6:ec:7c:56:03:56:47:b2:
a6:5a:1b:f7:57:a8:d0:0f:fc:11:a6:e7:e4:13:10:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:F3:81:5F:78:3E:AB:6E:DF:23:A0:DD:5A:96:1D:20:D8:A5:90
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Gd_zgV94Pqtu3yOg3VqWHSDYpZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.143.0.0/16
192.67.189.0/24
192.67.208.0/24
193.196.0.0/15
IPv6:
2001:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:64:fc:08:ac:76:7f:c7:5c:3c:63:c9:4c:de:11:e3:3f:fe:
cb:81:98:60:95:83:be:3d:2a:16:f5:f4:a4:d6:ac:ad:15:1b:
2f:5f:b5:c5:9c:bc:2f:89:10:38:ac:9b:31:21:1f:e5:54:98:
75:fd:b1:90:a8:8b:c2:e3:86:cd:af:92:32:b1:c1:93:6f:68:
62:d3:e0:37:02:4a:df:04:93:79:16:48:04:fe:f3:bd:29:ba:
bc:c1:ca:d8:26:26:f8:4f:d1:04:58:a1:d3:22:9b:6f:e4:74:
55:89:65:ab:58:c9:e4:9b:7b:76:2c:0f:ff:ca:2f:c9:c4:21:
fd:ec:28:70:74:09:68:14:5c:10:1e:8b:a4:66:f4:6b:20:92:
04:57:c9:0b:6d:d0:7f:59:6f:d3:19:44:98:98:fb:af:8f:ff:
a2:55:72:22:7b:4b:60:aa:6c:de:dc:67:66:ac:3a:c0:c3:03:
9b:86:a2:45:44:91:f5:5e:53:85:d9:8c:85:87:84:27:12:e1:
ac:f9:86:4f:df:e2:11:bd:11:89:5f:3c:f0:ff:1a:93:76:4e:
cc:47:1a:6c:86:f1:57:2a:77:31:9c:75:9c:2b:b9:40:30:4e:
4b:43:de:d5:b3:38:bb:2e:be:12:d0:6c:60:83:ba:1c:02:48:
93:ca:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:40 2025 by rpki-client