Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/GMh0lT-c4kai66_DNOj8jG0Y9kg.roa
File: GMh0lT-c4kai66_DNOj8jG0Y9kg.roa (raw, json)
Hash identifier: iC5pFPdi6p5y2uopVB7LN0lcJ/FBtB8SoDFXBwvwUy4=
Subject key identifier: 18:C8:74:95:3F:9C:E2:46:A2:EB:AF:C3:34:E8:FC:8C:6D:18:F6:48
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 015A735B
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/GMh0lT-c4kai66_DNOj8jG0Y9kg.roa
Signing time: Mon 28 Feb 2022 10:46:06 +0000
ROA not before: Mon 28 Feb 2022 10:46:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 95.210.192.0/20 maxlen: 20
5.61.192.0/21 maxlen: 21
95.210.0.0/22 maxlen: 22
95.210.0.0/16 maxlen: 16
88.202.121.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
176.227.128.0/20 maxlen: 20
88.202.66.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
88.202.0.0/17 maxlen: 17
95.210.110.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
95.210.36.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22704987 (0x15a735b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Feb 28 10:46:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18c874953f9ce246a2ebafc334e8fc8c6d18f648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:37:df:e8:bc:9a:2f:42:fa:35:14:4f:f8:
60:2f:78:ca:02:8d:83:61:7a:6b:64:d6:9e:e7:ed:
98:71:c3:90:b2:38:d7:5b:57:58:72:7c:37:af:04:
9a:ff:4e:3d:b1:bd:eb:3a:17:fb:61:8e:15:f1:57:
18:f1:10:c0:58:af:0a:32:bd:e6:a1:e6:26:0d:f8:
4a:d8:a3:6a:27:96:3b:50:26:3d:76:b8:bb:f0:f7:
b4:db:1a:f8:85:e7:e5:b3:71:47:50:04:24:d9:b2:
03:af:2a:ee:4a:dd:3e:42:3c:1e:76:69:f2:5a:32:
70:4f:e0:33:5b:d8:7b:c0:6c:c1:76:8c:cd:bc:65:
9c:fe:89:d1:28:8d:75:75:db:00:43:25:31:42:85:
cc:fd:a6:ea:07:56:e8:09:89:51:1e:d8:a6:23:c1:
2f:e9:6f:d5:b6:dd:12:3b:d0:b1:6d:b0:64:0e:95:
e9:71:1d:07:33:32:5a:41:c0:e6:e3:85:f5:7f:63:
d8:bc:cf:69:6e:71:0b:6d:7c:cc:a1:c2:a2:a1:7c:
37:2d:d1:eb:9a:96:b2:47:00:98:7d:c0:99:99:54:
5f:bd:22:f9:cc:4f:fe:5e:9a:3a:06:9f:fa:2a:e6:
3b:ee:43:33:4c:41:02:85:1f:97:39:7a:86:1a:11:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:74:95:3F:9C:E2:46:A2:EB:AF:C3:34:E8:FC:8C:6D:18:F6:48
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/GMh0lT-c4kai66_DNOj8jG0Y9kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:9d:17:aa:f7:3c:13:82:d6:94:8c:9e:d9:95:4c:13:53:fc:
d1:9a:cb:36:cc:60:8e:ca:9e:17:8c:73:55:62:74:f8:92:d8:
90:fa:1a:b0:3f:5c:0f:53:ac:d2:87:ab:64:10:53:f8:99:bc:
79:cd:51:0f:b2:4c:78:d3:ec:7a:95:d4:dc:1a:1e:d3:84:18:
47:88:20:42:67:a9:e8:a9:31:92:eb:e5:61:5e:bd:49:96:ab:
38:23:fc:51:09:12:3d:a1:37:99:8d:1e:e4:c5:98:d8:72:23:
33:da:ad:52:4c:c2:d3:6a:e9:57:c5:a3:ca:c6:19:8d:2c:4f:
f7:3f:d7:3c:9a:d5:d0:8a:b7:63:d6:3e:5f:7d:00:01:c8:59:
f1:8c:1b:2d:ee:b5:c2:35:ea:0a:0f:98:bc:ca:6f:b9:60:f7:
d7:47:5f:d9:d6:da:c2:6f:3c:6b:6d:42:f4:1e:89:0c:26:77:
d5:30:f1:41:3d:ba:25:b0:3c:72:8c:97:2c:96:07:5e:bc:8a:
97:f7:af:ee:58:bb:02:34:80:f0:85:4d:ba:28:33:8e:20:36:
5b:73:be:b6:42:ef:40:26:ea:0e:ea:0d:7d:0c:1e:b9:54:6f:
b7:78:22:3a:7e:cb:c1:4d:dc:e2:3e:15:97:57:75:87:b2:04:
35:b5:bd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:28 2025 by rpki-client