Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/gstjb9CCH-288QyqfTMuu2Og9dM.roa
File: gstjb9CCH-288QyqfTMuu2Og9dM.roa (raw, json)
Hash identifier: TAIHoSjvz4tn1WpXbJJfKmCHjWwuRrdO2yKU/fZWyrU=
Subject key identifier: 82:CB:63:6F:D0:82:1F:ED:BC:F1:0C:AA:7D:33:2E:BB:63:A0:F5:D3
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 44EF83A0
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/gstjb9CCH-288QyqfTMuu2Og9dM.roa
Signing time: Thu 26 May 2022 06:55:14 +0000
ROA not before: Thu 26 May 2022 06:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43754
IP address blocks: 46.245.64.0/18 maxlen: 32
46.245.68.0/22 maxlen: 32
46.245.72.0/22 maxlen: 32
46.245.76.0/22 maxlen: 32
46.245.80.0/22 maxlen: 32
46.245.84.0/22 maxlen: 32
185.147.160.0/24 maxlen: 32
185.147.161.0/24 maxlen: 32
185.147.162.0/24 maxlen: 32
185.147.163.0/24 maxlen: 32
46.245.88.0/22 maxlen: 32
46.245.92.0/22 maxlen: 32
46.245.96.0/22 maxlen: 32
46.245.100.0/22 maxlen: 32
46.245.104.0/22 maxlen: 32
46.245.108.0/22 maxlen: 32
46.245.112.0/22 maxlen: 32
46.245.116.0/22 maxlen: 32
77.238.104.0/22 maxlen: 32
77.238.104.0/21 maxlen: 32
77.238.110.0/24 maxlen: 24
77.238.111.0/24 maxlen: 24
77.238.108.0/24 maxlen: 24
77.238.109.0/24 maxlen: 24
77.238.120.0/22 maxlen: 32
46.245.64.0/22 maxlen: 32
193.151.128.0/20 maxlen: 32
193.151.128.0/19 maxlen: 32
193.151.144.0/20 maxlen: 32
46.245.120.0/22 maxlen: 32
46.245.124.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
31.25.128.0/21 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
176.65.255.0/24 maxlen: 32
128.65.176.0/20 maxlen: 32
79.127.0.0/17 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.49.84.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
178.22.120.0/21 maxlen: 32
37.156.8.0/21 maxlen: 32
37.156.8.0/22 maxlen: 32
37.156.15.0/24 maxlen: 24
37.156.13.0/24 maxlen: 24
37.156.14.0/24 maxlen: 24
37.156.12.0/24 maxlen: 24
188.0.240.0/23 maxlen: 32
185.112.32.0/21 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
46.143.0.0/17 maxlen: 32
109.122.224.0/20 maxlen: 32
37.156.144.0/22 maxlen: 32
178.216.251.0/24 maxlen: 32
178.216.248.0/22 maxlen: 32
178.216.248.0/24 maxlen: 32
178.216.249.0/24 maxlen: 32
178.216.250.0/24 maxlen: 32
185.141.212.0/24 maxlen: 32
185.141.213.0/24 maxlen: 32
185.141.214.0/24 maxlen: 32
185.141.215.0/24 maxlen: 32
5.134.192.0/21 maxlen: 32
212.33.192.0/22 maxlen: 32
212.33.196.0/22 maxlen: 32
212.33.204.0/22 maxlen: 32
212.33.200.0/22 maxlen: 32
185.141.168.0/24 maxlen: 32
185.141.169.0/24 maxlen: 32
185.141.170.0/24 maxlen: 32
185.141.171.0/24 maxlen: 32
185.98.112.0/22 maxlen: 32
89.41.40.0/22 maxlen: 32
93.118.180.0/24 maxlen: 24
93.118.180.0/22 maxlen: 32
31.7.64.0/20 maxlen: 32
31.7.64.0/21 maxlen: 32
31.7.72.0/21 maxlen: 32
2a06:5484::/30 maxlen: 128
2a05:1a00::/26 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156547488 (0x44ef83a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: May 26 06:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82cb636fd0821fedbcf10caa7d332ebb63a0f5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:13:27:86:8a:39:41:2f:f9:49:11:fe:0c:
db:ee:4c:86:38:22:0f:10:24:fa:08:c6:3a:f6:84:
71:87:5c:81:14:6a:fd:79:f7:08:91:38:a6:54:d6:
2c:59:e9:4b:bb:54:03:b7:4e:f1:63:cc:0b:f0:e0:
14:4b:1d:5d:4d:88:d0:62:d7:2a:3c:7e:c3:77:dd:
ca:7b:ff:5e:60:59:21:b4:dc:01:17:b1:55:6f:fe:
ff:30:ec:a0:60:61:40:70:7f:03:46:a3:fc:9f:7c:
1a:7e:9d:b5:b9:e3:cd:19:47:ec:df:26:fd:d8:8f:
ce:30:51:f0:55:e4:f3:24:c9:cc:4e:a0:cc:58:f3:
6b:01:90:79:1c:76:17:b9:7c:6c:08:f0:3e:db:9e:
7f:6a:00:34:a3:c8:f0:df:dc:cb:01:28:56:16:85:
21:cc:89:6c:b5:5a:87:2b:cc:92:76:18:43:8b:04:
fc:0a:cb:bf:c3:c9:1d:f2:f7:4e:5a:32:59:b0:91:
4a:eb:16:9f:2e:c0:04:8e:40:6a:c2:13:fb:07:2e:
f3:f0:2f:74:09:e3:01:a7:7b:4c:e9:a6:79:e8:cc:
5d:cf:86:21:68:6a:18:93:17:bc:7a:55:51:14:47:
57:51:d4:4c:95:64:1e:04:7d:eb:94:c9:f8:40:df:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CB:63:6F:D0:82:1F:ED:BC:F1:0C:AA:7D:33:2E:BB:63:A0:F5:D3
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/gstjb9CCH-288QyqfTMuu2Og9dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
31.7.64.0/20
31.25.128.0/21
37.156.8.0/21
37.156.144.0/22
46.143.0.0/17
46.245.64.0/18
77.238.104.0/21
77.238.120.0/22
79.127.0.0/17
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
109.122.224.0/20
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
178.216.248.0/22
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
185.141.168.0/22
185.141.212.0/22
185.147.160.0/22
188.0.240.0/23
193.151.128.0/19
212.33.192.0/20
IPv6:
2a05:1a00::/26
2a06:5484::/30
Signature Algorithm: sha256WithRSAEncryption
bb:b0:a6:b2:3b:8d:48:4b:af:40:a8:8d:4c:6f:ee:b0:76:89:
9d:2d:81:e8:c4:93:d3:45:3e:a1:48:21:8c:3e:39:06:c7:be:
92:83:e7:f0:5d:b8:46:d8:26:28:80:0d:8d:ab:2f:a1:87:5c:
b6:96:b9:5e:27:01:77:c0:81:73:95:81:0e:28:dc:58:64:8b:
48:5a:ae:66:89:a0:33:60:7d:88:77:bd:3d:7f:f2:e1:d6:e6:
b4:20:59:ab:12:a8:92:fc:de:13:66:4a:50:a3:0a:71:c9:ee:
2b:fd:90:ed:55:83:06:95:32:61:d1:a6:ad:61:36:34:00:f6:
52:59:98:76:3d:0b:cc:83:5d:39:32:98:47:e2:49:db:d0:b5:
77:f5:b3:e2:d2:88:1b:18:b0:1a:c7:f0:4f:1d:1a:f9:57:92:
bb:57:be:63:87:b4:ae:76:38:86:3a:57:8e:7f:1f:a9:69:f6:
5e:b6:06:c4:d1:2d:eb:3d:11:c6:74:db:a2:15:e2:e7:ac:46:
32:81:20:cc:77:82:30:7a:2b:7b:b1:30:5e:56:79:ea:ef:dd:
16:5e:9f:0b:3d:07:a7:60:48:87:31:c3:f0:fd:40:f0:90:93:
03:b8:6f:be:3e:63:7f:ac:cd:e1:ff:b1:14:21:86:4a:60:54:
56:db:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:49 2025 by rpki-client