Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/ggjjCaH5DKj0mj3II1LRp6Y3dIY.roa
File: ggjjCaH5DKj0mj3II1LRp6Y3dIY.roa (raw, json)
Hash identifier: OBc+dNWxlCN+pF84wdzbOM0KmHutNOhgsc+ldRFvVBg=
Subject key identifier: 82:08:E3:09:A1:F9:0C:A8:F4:9A:3D:C8:23:52:D1:A7:A6:37:74:86
Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial: 0184619991DF96BA6F030D7CF3447723A927
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/ggjjCaH5DKj0mj3II1LRp6Y3dIY.roa
Signing time: Thu 10 Nov 2022 12:52:45 +0000
ROA not before: Thu 10 Nov 2022 12:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12975
IP address blocks: 199.204.215.0/24 maxlen: 24
94.26.112.0/20 maxlen: 20
217.66.224.0/19 maxlen: 24
82.205.0.0/17 maxlen: 21
82.205.0.0/20 maxlen: 20
217.66.233.0/24 maxlen: 24
217.66.237.0/24 maxlen: 24
217.66.234.0/23 maxlen: 23
86.107.16.0/22 maxlen: 22
87.252.108.0/22 maxlen: 22
188.215.100.0/22 maxlen: 22
82.205.96.0/20 maxlen: 20
82.205.104.0/21 maxlen: 21
89.239.32.0/20 maxlen: 20
82.205.16.0/20 maxlen: 20
217.66.240.0/20 maxlen: 20
82.205.27.0/24 maxlen: 24
212.33.96.0/19 maxlen: 20
185.171.132.0/22 maxlen: 22
82.102.240.0/20 maxlen: 20
82.102.192.0/20 maxlen: 20
82.102.192.0/18 maxlen: 24
82.102.208.0/21 maxlen: 21
82.102.218.0/23 maxlen: 23
82.102.224.0/20 maxlen: 20
82.102.220.0/22 maxlen: 22
212.106.64.0/19 maxlen: 20
85.113.96.0/19 maxlen: 20
176.65.12.0/22 maxlen: 22
194.169.123.0/24 maxlen: 24
194.169.122.0/23 maxlen: 23
194.169.122.0/24 maxlen: 24
147.189.176.0/20 maxlen: 20
194.169.121.0/24 maxlen: 24
199.250.128.0/19 maxlen: 21
217.21.14.0/23 maxlen: 23
217.21.12.0/23 maxlen: 23
188.209.208.0/22 maxlen: 22
37.8.0.0/17 maxlen: 20
37.8.0.0/20 maxlen: 20
37.8.16.0/20 maxlen: 20
37.8.32.0/20 maxlen: 20
37.8.48.0/20 maxlen: 20
109.232.163.0/24 maxlen: 24
109.232.162.0/24 maxlen: 24
109.232.162.0/23 maxlen: 23
185.40.192.0/22 maxlen: 22
185.138.132.0/22 maxlen: 22
185.90.242.0/24 maxlen: 24
82.205.120.0/21 maxlen: 21
217.78.48.0/21 maxlen: 21
217.78.48.0/20 maxlen: 20
217.78.60.0/22 maxlen: 22
217.21.4.0/24 maxlen: 24
217.21.3.0/24 maxlen: 24
217.21.2.0/24 maxlen: 24
217.21.0.0/20 maxlen: 20
217.21.10.0/23 maxlen: 23
217.21.8.0/23 maxlen: 23
217.21.6.0/23 maxlen: 23
217.21.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:99:91:df:96:ba:6f:03:0d:7c:f3:44:77:23:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Validity
Not Before: Nov 10 12:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8208e309a1f90ca8f49a3dc82352d1a7a6377486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:3d:8b:56:0c:3b:2b:db:1e:5d:a5:82:b3:
1a:f0:1e:4e:9b:d0:73:91:4b:d1:8d:3f:6d:65:8c:
93:02:a5:97:cb:8b:70:c8:4b:bf:b0:a0:aa:71:0d:
34:c2:54:ab:f0:c7:ba:48:9d:29:a3:10:16:bd:c2:
48:93:61:51:50:9e:c5:4b:bb:08:c6:50:d0:a5:5b:
2f:1d:d8:17:da:79:cf:67:5a:75:d9:29:c6:fe:12:
7d:6c:df:50:16:af:e8:75:33:e5:83:7f:91:13:c9:
e4:cb:28:b5:89:95:bd:4e:1a:1b:8f:12:74:25:53:
2a:58:3a:fa:30:cd:5d:01:eb:62:ad:a6:c5:8e:b1:
43:40:16:4a:98:0f:1c:56:d0:8f:ca:ca:e6:33:01:
94:c9:e8:40:09:33:b4:07:a6:2d:a4:77:21:d9:75:
4e:84:82:32:d9:3c:90:ce:20:0d:32:c2:3a:1e:81:
60:93:cb:20:fc:21:4f:c7:e7:0a:c4:cd:88:7f:40:
88:9e:26:f8:85:00:5f:ae:bd:12:cd:17:4c:b1:2e:
45:4b:4c:21:b3:ea:f6:61:e0:ec:f0:7f:7d:99:95:
8f:c3:db:21:11:77:00:ae:1f:31:d9:ce:70:a5:15:
2d:31:d4:24:95:6f:15:44:7b:78:74:ef:4d:61:28:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:08:E3:09:A1:F9:0C:A8:F4:9A:3D:C8:23:52:D1:A7:A6:37:74:86
X509v3 Authority Key Identifier:
keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/ggjjCaH5DKj0mj3II1LRp6Y3dIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.8.0.0/17
82.102.192.0/18
82.205.0.0/17
85.113.96.0/19
86.107.16.0/22
87.252.108.0/22
89.239.32.0/20
94.26.112.0/20
109.232.162.0/23
147.189.176.0/20
176.65.12.0/22
185.40.192.0/22
185.90.242.0/24
185.138.132.0/22
185.171.132.0/22
188.209.208.0/22
188.215.100.0/22
194.169.121.0-194.169.123.255
199.204.215.0/24
199.250.128.0/19
212.33.96.0/19
212.106.64.0/19
217.21.0.0/20
217.66.224.0/19
217.78.48.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:4f:44:41:3a:8a:db:d0:30:31:cb:cb:4c:56:26:be:82:a4:
3b:b3:6b:aa:0b:f2:f2:93:3c:91:e7:4d:5e:a3:2c:0e:f4:66:
08:2f:2b:cf:14:20:1f:b1:17:e5:ac:71:c1:b5:43:98:af:9d:
67:83:ab:2b:f0:f5:2a:85:5e:1c:25:fd:25:d4:2c:65:4e:44:
f5:32:f0:59:95:ce:10:aa:9b:d7:21:5b:08:54:c9:90:0f:be:
af:f4:55:5f:83:35:4a:d8:a8:fd:77:8b:a8:07:d9:fd:47:42:
22:05:9e:58:71:a0:02:5d:ee:39:1e:6f:07:7b:c8:ec:30:3a:
a8:5a:3e:04:5e:d3:33:cb:80:03:68:74:56:c3:c7:92:82:be:
f4:23:e1:2f:8d:13:62:c6:1d:ac:64:2c:ec:e5:b8:36:e1:6e:
57:aa:80:8c:d7:32:3a:14:17:bb:57:cd:e8:35:96:29:22:c6:
1b:80:28:b9:78:e7:ae:f6:97:c1:f3:39:d8:b7:25:33:7e:98:
a8:90:cc:b3:90:ff:6c:94:c4:f1:c3:26:38:98:ee:c8:ed:9c:
ad:36:4e:09:f2:c7:67:5b:d4:29:7f:19:ab:d0:b5:e6:d2:1d:
41:3a:46:a8:0b:e7:ea:a0:76:53:2d:79:e3:7f:72:68:03:db:
2a:d7:d0:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:32 2023 by rpki-client on console-fra.rpki-client.org