Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/GpqZk0c7mAnnVQZ9lPM0J5NEggo.roa
File: GpqZk0c7mAnnVQZ9lPM0J5NEggo.roa (raw, json)
Hash identifier: IQerFQviw2hznHK7n2Oj0gd7sW2B2SfzeGJjpD8u/6s=
Subject key identifier: 1A:9A:99:93:47:3B:98:09:E7:55:06:7D:94:F3:34:27:93:44:82:0A
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 194B803F
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/GpqZk0c7mAnnVQZ9lPM0J5NEggo.roa
Signing time: Sat 01 Jan 2022 05:05:55 +0000
ROA not before: Sat 01 Jan 2022 05:05:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48252
IP address blocks: 185.21.212.0/22 maxlen: 22
185.21.212.0/24 maxlen: 24
185.21.213.0/24 maxlen: 24
185.21.214.0/24 maxlen: 24
185.21.215.0/24 maxlen: 24
94.198.179.0/24 maxlen: 24
94.198.177.0/24 maxlen: 24
94.198.178.0/24 maxlen: 24
94.198.176.0/21 maxlen: 21
94.198.176.0/24 maxlen: 24
94.198.181.0/24 maxlen: 24
94.198.180.0/24 maxlen: 24
94.198.182.0/24 maxlen: 24
94.198.183.0/24 maxlen: 24
2a04:11c0::/29 maxlen: 29
2a04:11c1::/32 maxlen: 32
2a04:11c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424378431 (0x194b803f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Jan 1 05:05:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a9a9993473b9809e755067d94f334279344820a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:07:ce:6f:b5:8b:7f:d1:0a:74:0e:d1:85:
39:15:b1:39:06:00:de:f3:6c:56:2d:26:b4:74:4e:
69:da:53:b3:ce:c2:ce:0d:97:de:e2:4c:fa:a1:82:
fa:de:07:e8:05:0c:e1:31:1d:7f:d8:0a:df:ba:68:
d8:e4:82:67:0f:5c:7e:b0:82:1e:8b:e5:4d:a4:9f:
fc:af:9b:c6:69:29:12:e7:21:60:25:b3:b3:4b:13:
e3:48:8a:57:43:16:74:e9:ad:8f:7e:23:64:ac:0e:
34:cc:aa:3b:10:9b:19:91:5e:a3:60:29:8f:f5:0c:
e8:10:15:f4:f5:c3:2e:13:28:33:02:d2:05:10:c8:
48:ad:2d:08:fb:f2:98:35:cf:03:0a:7a:8b:70:27:
65:38:9c:af:84:04:fc:3e:c6:4d:2d:ab:0d:c0:45:
b1:e1:03:72:fd:d6:38:a8:8b:f6:85:eb:04:b0:f1:
f4:d0:b8:33:36:17:35:67:fd:91:c5:8c:2e:dd:d7:
9c:9e:ed:d2:43:a9:70:45:90:26:2c:a4:f6:0e:e8:
16:29:29:fb:7e:42:1f:7a:de:2e:58:bb:f9:24:3f:
f9:a2:7d:3d:1f:44:f6:42:52:b7:8f:e8:16:a7:b4:
91:38:50:85:52:20:09:35:9d:03:02:36:78:fd:09:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9A:99:93:47:3B:98:09:E7:55:06:7D:94:F3:34:27:93:44:82:0A
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/GpqZk0c7mAnnVQZ9lPM0J5NEggo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.176.0/21
185.21.212.0/22
IPv6:
2a04:11c0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:6b:99:bd:00:6e:0c:94:ec:59:98:ec:f3:5a:8d:ab:a5:b3:
ce:24:6e:23:1b:8c:80:cd:f6:84:a0:7c:2e:b3:3f:35:c8:62:
9c:e0:03:61:2c:18:c5:31:c1:cf:e6:a1:4e:4d:50:f9:ce:85:
5a:e4:33:35:98:bc:0c:05:4c:68:d7:98:93:3d:5c:f6:2d:97:
f8:a8:6a:74:ea:d4:78:09:79:e1:66:2a:65:c4:91:20:43:a7:
9f:39:cb:25:de:65:6a:44:df:75:0b:e0:d5:fd:86:f7:9f:b5:
8d:e0:f8:a5:63:c5:2c:ad:09:64:68:2f:40:52:d4:ff:f5:ba:
4c:9b:48:57:74:ee:39:f3:5b:63:22:17:ab:08:e7:f0:62:c3:
1c:bc:a2:f3:f8:d1:a0:17:c1:40:a1:e2:e1:95:9c:ca:be:c4:
c9:7d:b2:74:21:9c:e3:b1:75:1a:c6:7a:8b:09:43:49:c9:b9:
75:47:d8:35:f9:cb:a2:75:dd:e3:5e:0e:a6:75:e1:90:59:34:
40:ee:35:64:9e:63:83:21:c6:45:d9:5d:ab:0f:84:25:6e:d3:
4c:04:41:64:27:0e:3f:6f:f8:8d:a9:ed:cc:c5:14:3f:d3:f0:
1e:c0:ab:99:7e:c8:f2:69:8c:4e:45:d7:9b:a4:99:46:41:e6:
ba:83:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:44 2024 by rpki-client on console-ams.rpki-client.org