Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/GxouLYuQZOyxcacgpzADZKuiQC0.roa
File: GxouLYuQZOyxcacgpzADZKuiQC0.roa (raw, json)
Hash identifier: TL6pAVbYdqn8Hw4/YKAiz3x1Cz+pjb27eLn1XZYvJHo=
Subject key identifier: 1B:1A:2E:2D:8B:90:64:EC:B1:71:A7:20:A7:30:03:64:AB:A2:40:2D
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0CCF87B4
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/GxouLYuQZOyxcacgpzADZKuiQC0.roa
Signing time: Tue 12 Apr 2022 12:55:39 +0000
ROA not before: Tue 12 Apr 2022 12:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214927284 (0xccf87b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Apr 12 12:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b1a2e2d8b9064ecb171a720a7300364aba2402d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:0a:ef:29:6b:9e:cb:10:6d:9c:c5:ee:99:
a6:6b:3d:43:65:3e:64:69:f5:99:d7:b4:3d:31:69:
3e:f4:c9:1e:5e:e9:a3:bb:12:33:1a:f8:9a:62:8e:
a8:91:36:72:55:9c:23:9b:14:87:05:9b:4c:49:e2:
21:0a:a5:22:db:a7:e5:c1:f0:f7:d5:71:bf:5f:17:
97:08:45:b3:48:2c:ce:75:93:8a:8b:74:dd:c6:cf:
09:54:89:fa:73:37:6e:36:96:97:95:07:e2:a7:b7:
f4:d5:c5:6d:45:3d:95:a7:47:34:24:97:40:e9:f9:
e1:89:c5:f3:bd:fe:b8:1b:a0:0a:94:d3:a5:c1:bd:
6f:62:69:2b:b2:9c:4f:0d:bd:f8:ef:0b:91:e3:1f:
3b:b1:b6:54:b5:52:d6:39:ec:40:a0:e0:7c:46:1a:
5d:4b:96:f8:b8:04:3e:0d:8c:ed:34:84:33:58:c9:
64:fe:72:5c:e6:bb:74:0c:0f:e6:c0:6d:e3:b9:d0:
01:e7:23:5e:6f:28:7f:e5:a4:40:63:27:25:93:63:
89:1f:67:0d:7d:8b:d0:8d:b2:ec:ec:9f:ac:9b:b8:
eb:01:80:d9:7c:b5:71:72:31:a2:a5:34:31:e9:06:
32:70:ea:22:ae:19:8d:a0:22:63:db:4d:33:4c:80:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:2E:2D:8B:90:64:EC:B1:71:A7:20:A7:30:03:64:AB:A2:40:2D
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/GxouLYuQZOyxcacgpzADZKuiQC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
a2:6b:9d:bd:e5:bb:06:42:3c:f4:35:d3:a2:bf:92:6b:40:bd:
30:26:8d:0e:c6:81:88:63:79:46:d1:e0:d8:ab:67:51:95:90:
e0:e5:5d:e4:29:0b:3c:23:6f:47:12:64:1c:7d:f9:13:26:e8:
55:2f:cb:35:e0:69:ec:8b:06:8e:11:f0:c3:21:aa:ab:5e:f0:
a9:8b:21:50:c8:76:ed:47:c3:ca:44:09:ec:5d:62:a2:1b:72:
98:5a:9a:a3:e0:b4:0e:0a:6f:63:31:14:d9:1e:e6:bc:a3:1e:
7b:36:43:28:d8:5f:da:c6:a9:07:fb:6d:6f:06:d7:fe:c5:e7:
8b:e9:b9:e5:fb:09:22:50:f4:82:e8:25:66:49:bf:30:4d:ee:
a5:b3:d2:04:f4:1f:11:f3:11:eb:6e:b6:70:30:0c:cb:20:1d:
ed:ef:99:88:4e:6f:91:7e:e6:ff:0a:e7:f0:47:d7:56:11:8b:
f1:1d:20:7a:89:5b:17:99:a6:0c:f1:bb:3a:d3:53:0f:89:c8:
87:4c:04:83:b6:bc:54:3c:4f:2a:24:00:f9:d2:48:50:22:4f:
00:aa:05:5b:ff:f8:32:e4:8b:fe:c7:7f:9a:8f:89:0b:f7:25:
12:55:e4:f6:f1:86:c7:94:a3:1a:d0:83:96:ee:36:bd:bc:55:
18:d8:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org