Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/gw7GMER8zTasWFp_TmH2np2PNT8.roa
File: gw7GMER8zTasWFp_TmH2np2PNT8.roa (raw, json)
Hash identifier: yXSSbbG0KmOeeRDd37P2RVyKtLnYodfFKU5zp5UBel0=
Subject key identifier: 83:0E:C6:30:44:7C:CD:36:AC:58:5A:7F:4E:61:F6:9E:9D:8F:35:3F
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17E713DB
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/gw7GMER8zTasWFp_TmH2np2PNT8.roa
Signing time: Sat 01 Jan 2022 03:59:54 +0000
ROA not before: Sat 01 Jan 2022 03:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31287
IP address blocks: 95.43.239.0/24 maxlen: 24
62.73.100.0/24 maxlen: 24
95.43.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401019867 (0x17e713db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 03:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=830ec630447ccd36ac585a7f4e61f69e9d8f353f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:ae:63:40:f0:63:52:9d:e1:a2:06:ff:17:
92:83:88:48:36:16:8b:b9:3e:1d:62:9e:61:ef:e0:
e2:71:40:fb:8c:c0:d7:c6:4a:59:57:33:d5:34:08:
e2:cf:1a:36:ad:7b:b2:8c:32:ac:76:f5:c2:11:e1:
e4:e9:fd:d6:f3:51:21:e7:c5:ab:8b:82:de:ab:6a:
64:40:9d:4d:16:df:1f:f5:d3:2b:de:17:ed:b4:d5:
7d:12:75:66:0a:3a:d9:fc:cd:95:b1:21:41:4e:9a:
8d:61:76:2b:b8:9d:e0:ff:24:f6:24:fb:49:87:17:
6f:2d:31:9c:3e:36:88:be:e8:73:38:84:f2:99:8d:
b0:45:b7:5c:43:6f:a4:4d:19:9f:eb:32:ce:f6:2d:
d6:1a:6b:c4:a0:fe:af:3c:79:c3:8d:cf:42:f0:f6:
8b:8a:58:f8:18:e5:72:46:86:4c:e4:24:30:a2:7d:
9d:ea:75:7a:3d:d0:06:a2:1a:d4:ac:d2:a1:a7:b5:
6f:25:20:75:20:60:bd:65:90:8c:27:13:a0:14:ac:
b3:9d:bb:3c:bc:4e:3a:ff:44:a6:81:b2:0b:de:4a:
60:d8:fa:83:dc:cb:27:0d:92:f0:a5:18:42:34:60:
35:36:66:13:59:94:e5:e6:14:a6:8a:62:66:9a:4e:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0E:C6:30:44:7C:CD:36:AC:58:5A:7F:4E:61:F6:9E:9D:8F:35:3F
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/gw7GMER8zTasWFp_TmH2np2PNT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.100.0/24
95.43.236.0/24
95.43.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ed:5e:d3:c9:c7:44:50:6d:60:a0:6b:10:46:94:09:17:8c:
49:fc:f2:7a:81:57:7b:47:21:d9:75:b5:f3:76:46:11:65:c0:
1b:d7:73:43:71:87:94:3d:c8:52:ac:5a:a0:8f:92:82:81:ab:
46:85:ad:92:23:58:4d:d7:f8:9d:63:16:59:9c:ae:f1:70:db:
de:b8:62:0c:ed:3c:9c:98:44:6f:91:14:d3:1e:6e:02:c8:d6:
04:8c:ed:bd:d9:a9:67:69:22:49:48:ab:9f:1a:c2:75:b8:7a:
b5:0f:7f:d1:50:a5:87:ed:49:57:97:2c:f3:9f:c2:4d:da:b1:
58:1a:4a:06:bf:fe:68:63:e5:96:7d:35:71:c3:b8:e2:7b:0e:
d8:d5:bd:0e:35:bb:fa:43:c5:47:4c:18:ec:01:79:68:c6:1c:
40:0e:3f:91:2d:ea:ff:95:41:db:a1:b5:62:f4:39:c8:c0:2c:
77:d4:13:c0:2e:56:4f:0c:d9:49:a3:a7:4e:9f:53:99:de:74:
2e:e5:64:ff:6b:26:17:43:85:dd:46:77:88:26:57:95:95:12:
1c:19:7e:2d:a0:7e:35:bc:4f:90:8d:01:09:05:b5:85:96:9f:
9e:b9:8b:a7:36:f6:65:6b:bc:5c:00:f7:e0:48:d2:62:32:8f:
78:63:55:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:10 2025 by rpki-client