Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/GSnpTe8Jtfj3GlzuFjSzhe1Y9IA.roa
File: GSnpTe8Jtfj3GlzuFjSzhe1Y9IA.roa (raw, json)
Hash identifier: qWZWPhixzAU14l3jNsckmpRZe6Ff/DDgYxXKJlVTNxA=
Subject key identifier: 19:29:E9:4D:EF:09:B5:F8:F7:1A:5C:EE:16:34:B3:85:ED:58:F4:80
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 1AC32A01
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/GSnpTe8Jtfj3GlzuFjSzhe1Y9IA.roa
Signing time: Fri 01 Apr 2022 05:42:14 +0000
ROA not before: Fri 01 Apr 2022 05:42:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2116
IP address blocks: 85.252.0.0/16 maxlen: 16
194.29.200.0/22 maxlen: 22
37.191.128.0/17 maxlen: 17
213.160.224.0/20 maxlen: 20
213.160.240.0/21 maxlen: 21
31.185.24.0/21 maxlen: 21
81.175.0.0/20 maxlen: 20
178.74.0.0/18 maxlen: 18
81.175.24.0/21 maxlen: 22
81.175.20.0/22 maxlen: 22
213.151.128.0/19 maxlen: 19
81.175.32.0/19 maxlen: 19
217.77.32.0/20 maxlen: 20
195.204.0.0/16 maxlen: 16
85.221.0.0/17 maxlen: 17
217.8.128.0/19 maxlen: 19
77.234.48.0/21 maxlen: 21
86.62.128.0/18 maxlen: 18
62.63.0.0/18 maxlen: 18
89.191.0.0/19 maxlen: 19
81.191.0.0/16 maxlen: 16
193.90.0.0/16 maxlen: 16
80.241.80.0/20 maxlen: 20
194.19.0.0/17 maxlen: 17
212.62.224.0/19 maxlen: 19
85.196.64.0/18 maxlen: 18
193.75.0.0/17 maxlen: 17
195.139.0.0/16 maxlen: 16
213.172.192.0/19 maxlen: 19
78.24.144.0/21 maxlen: 21
109.199.192.0/19 maxlen: 19
195.1.0.0/16 maxlen: 16
213.52.0.0/17 maxlen: 17
185.129.156.0/22 maxlen: 22
185.35.80.0/22 maxlen: 22
193.69.0.0/16 maxlen: 16
195.18.128.0/17 maxlen: 17
185.8.16.0/22 maxlen: 22
85.112.128.0/19 maxlen: 19
82.196.192.0/19 maxlen: 19
217.118.32.0/19 maxlen: 19
79.135.0.0/19 maxlen: 19
91.135.32.0/20 maxlen: 20
217.144.224.0/19 maxlen: 19
77.40.128.0/17 maxlen: 17
185.67.116.0/22 maxlen: 24
213.239.64.0/18 maxlen: 18
87.118.0.0/18 maxlen: 18
84.20.96.0/19 maxlen: 19
77.88.64.0/18 maxlen: 18
195.159.0.0/16 maxlen: 16
62.101.192.0/18 maxlen: 18
80.64.192.0/20 maxlen: 20
88.84.160.0/19 maxlen: 19
194.54.96.0/19 maxlen: 19
81.0.128.0/18 maxlen: 18
212.71.64.0/19 maxlen: 19
195.0.128.0/17 maxlen: 17
217.14.0.0/20 maxlen: 20
193.91.128.0/17 maxlen: 17
213.158.224.0/19 maxlen: 19
2a00:c440::/29 maxlen: 29
2a02:270::/32 maxlen: 32
2001:4dd8::/32 maxlen: 32
2001:840::/29 maxlen: 29
2a03:c000::/29 maxlen: 29
2001:8c0::/29 maxlen: 29
2a01:520::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448997889 (0x1ac32a01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Apr 1 05:42:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1929e94def09b5f8f71a5cee1634b385ed58f480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:44:36:aa:f3:c2:cf:6a:c1:5b:37:ff:5a:
36:4d:ea:a7:7f:38:88:2b:17:9e:e8:40:a2:33:eb:
ae:fb:a4:0e:05:69:27:5c:5e:05:8e:bb:3a:77:3a:
03:2c:ac:a5:89:72:01:1d:fa:79:23:78:07:0f:cd:
ff:c4:36:0a:d3:3b:03:04:1d:79:8b:9a:d7:7f:28:
23:a4:44:fe:5d:b5:85:d6:9e:2e:65:79:31:19:d3:
b7:cf:40:70:b7:33:39:11:cd:f3:d2:c8:af:2a:41:
9d:c3:b9:ba:86:ca:42:93:81:d7:ef:41:37:d9:a0:
dd:06:0a:b8:40:e0:8a:c9:8c:ce:1a:6d:d7:19:e7:
b9:2e:26:ba:81:d9:81:8b:11:27:f5:37:76:22:25:
d6:e3:de:7c:50:2f:be:f1:54:6c:05:71:28:9f:04:
eb:7c:73:bb:42:7f:a4:a7:d2:eb:a5:3a:19:ba:f5:
a7:49:e0:2b:50:31:89:91:75:45:85:06:c6:3f:6b:
09:a0:40:10:a6:1b:00:e0:10:63:bf:a7:e0:69:23:
ff:41:a0:2d:d6:47:b5:ff:4c:9d:6f:f7:e9:4f:40:
2a:bd:64:09:64:6f:70:c5:d7:a2:e5:7e:53:46:ac:
f6:3b:67:37:fc:eb:70:3d:af:b8:42:23:ec:42:5a:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:E9:4D:EF:09:B5:F8:F7:1A:5C:EE:16:34:B3:85:ED:58:F4:80
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/GSnpTe8Jtfj3GlzuFjSzhe1Y9IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
62.63.0.0/18
62.101.192.0/18
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
91.135.32.0/20
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.35.80.0/22
185.67.116.0/22
185.129.156.0/22
193.69.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2001:4dd8::/32
2a00:c440::/29
2a01:520::/32
2a02:270::/32
2a03:c000::/29
Signature Algorithm: sha256WithRSAEncryption
5d:57:de:9c:81:c1:24:0a:45:ab:b0:f1:bf:ab:8c:98:e2:a3:
72:e3:6f:c9:bb:fd:82:fb:07:5b:ce:06:08:45:8f:ab:43:31:
f3:e7:0f:7f:4b:00:3e:4d:03:70:62:de:24:8e:ea:53:e8:a2:
a1:4a:22:b1:f4:0a:0c:79:39:58:9a:46:dd:04:9c:2f:87:7a:
91:7f:48:3c:c7:bd:e7:25:28:5a:e5:d3:da:d2:d2:ec:c4:b8:
4f:9f:40:e6:13:30:0d:3c:88:07:6e:72:91:8f:12:39:37:60:
dd:e5:80:af:16:82:25:ff:17:d3:d6:00:6c:da:af:2b:65:b0:
63:f3:cf:60:71:b4:e2:12:68:f0:51:0b:9a:fe:2b:3e:db:e9:
bd:9d:e9:46:85:17:9a:fe:96:ae:e6:21:e1:ae:6f:dd:38:0d:
fc:23:7e:89:73:72:04:41:5b:ef:31:8a:14:d3:8c:f3:8d:9b:
43:2e:38:95:6e:2a:20:d1:9d:14:aa:21:07:03:bc:4f:48:9b:
ac:f8:20:80:ea:5d:00:96:8f:8f:4c:31:09:6c:20:04:2d:d0:
a3:51:a0:96:f2:4c:3b:6d:dd:d6:dc:27:67:f5:ea:5d:01:c5:
16:20:72:27:78:cb:09:d9:e7:ff:0f:7d:69:ab:5b:82:61:d7:
3d:22:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:25 2024 by rpki-client on console-ams.rpki-client.org