Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GB6lYeLC4GZVWZZzgd_7V2wfpoU.roa
File: GB6lYeLC4GZVWZZzgd_7V2wfpoU.roa (raw, json)
Hash identifier: hpDvOy7uCmmjqsFKDh645SjnQng2q+oGEMuEanmZIlo=
Subject key identifier: 18:1E:A5:61:E2:C2:E0:66:55:59:96:73:81:DF:FB:57:6C:1F:A6:85
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243CD8DC47D3DBA413A26DC823FCA7E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GB6lYeLC4GZVWZZzgd_7V2wfpoU.roa
Signing time: Thu 08 Dec 2022 15:04:00 +0000
ROA not before: Thu 08 Dec 2022 15:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.224.0/24 maxlen: 24
178.176.226.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:cd:8d:c4:7d:3d:ba:41:3a:26:dc:82:3f:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=181ea561e2c2e0665559967381dffb576c1fa685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:9f:14:86:1e:eb:82:63:a1:20:4f:c8:e3:
42:49:1c:a1:bb:2c:91:73:af:32:7c:a3:7e:fb:53:
e0:aa:a6:0d:aa:cc:41:fc:56:e1:97:d4:96:8b:3d:
59:22:3c:aa:2d:72:2b:91:25:0f:7e:06:35:af:f5:
48:0b:59:5f:f9:ac:41:81:09:db:d2:0f:d7:79:2d:
ad:43:cf:33:b1:9f:1e:54:8b:5b:3d:04:c8:e5:dc:
80:21:1e:31:5f:ac:91:72:6c:93:ae:cc:87:df:2e:
98:80:e4:5c:3d:a5:9c:ff:dc:a8:6c:26:9d:85:58:
83:00:4d:ff:ae:7a:29:ed:94:33:fe:ba:55:4e:20:
f1:55:1c:f6:06:53:d4:b4:ea:eb:a5:df:41:41:9d:
67:91:58:1b:59:7e:9e:de:ad:1e:e6:bb:78:66:9b:
b8:2b:d3:9d:8c:12:9f:e7:65:18:e2:08:21:65:da:
75:68:79:25:01:29:69:0a:aa:fa:3d:2f:43:da:7f:
09:76:c3:e9:c8:60:54:ea:f0:ed:c2:90:9d:8e:67:
e7:bd:33:4b:2c:37:aa:37:ef:aa:a9:20:33:91:46:
d9:93:2f:18:bc:f0:9a:b1:99:6d:bc:d5:ca:ba:71:
41:62:b8:9a:0b:ac:60:2e:31:00:e9:a6:c6:4c:96:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:A5:61:E2:C2:E0:66:55:59:96:73:81:DF:FB:57:6C:1F:A6:85
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GB6lYeLC4GZVWZZzgd_7V2wfpoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.224.0-178.176.226.255
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:d9:25:fe:d7:23:91:d9:9b:4e:a4:a0:ed:85:ca:50:c0:8b:
eb:ec:20:40:e5:75:de:8b:a8:46:1f:aa:5d:f9:a6:9d:de:a6:
bd:e5:90:ab:3b:96:21:89:1b:e8:24:95:7f:60:0a:50:d1:88:
03:ff:fb:31:a9:e8:7d:eb:f7:77:0a:62:66:97:26:04:ff:12:
cc:31:45:6e:ef:94:bc:8c:bc:c0:fb:52:56:69:97:ac:eb:5d:
db:8b:57:05:25:e7:10:bd:22:92:3f:26:86:44:cd:53:f8:43:
ae:2d:73:5c:17:89:6b:d1:f9:63:98:75:f2:91:7a:29:bf:7b:
50:e3:6b:64:26:75:74:06:31:f2:bd:58:6c:66:18:53:75:c6:
a7:93:d4:c8:12:a0:04:12:ba:05:7a:6f:bb:70:7d:1a:1d:c9:
ed:88:56:7d:31:74:6d:14:d5:50:ad:0f:ab:16:6c:00:b1:ac:
bf:16:dc:9e:ce:01:17:42:a0:83:cb:87:1a:4b:76:6b:04:d4:
db:ba:f3:34:aa:d5:e4:96:f8:3b:d8:e2:53:e4:f3:5a:69:8f:
6e:3e:ca:1f:a9:07:7b:f6:af:dc:da:7b:fd:3c:26:00:b8:15:
ca:1d:2d:c7:31:6b:c6:a3:0b:12:91:51:ea:83:dd:c7:bd:35:
63:3d:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org