Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/GmXn15xvrN5zwKJ3gsaUWgHryxc.roa
File: GmXn15xvrN5zwKJ3gsaUWgHryxc.roa (raw, json)
Hash identifier: 4OWCjbJ/05WzdKrzKr9iOPDJMbW2ZUngUyHrINFHkRo=
Subject key identifier: 1A:65:E7:D7:9C:6F:AC:DE:73:C0:A2:77:82:C6:94:5A:01:EB:CB:17
Certificate issuer: /CN=c037958083b641b773123ceada7bef27558e5940
Certificate serial: 1A931597
Authority key identifier: C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/GmXn15xvrN5zwKJ3gsaUWgHryxc.roa
Signing time: Sat 01 Jan 2022 11:57:50 +0000
ROA not before: Sat 01 Jan 2022 11:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25435
IP address blocks: 185.166.192.0/24 maxlen: 24
185.166.194.0/24 maxlen: 24
185.166.195.0/24 maxlen: 24
185.166.193.0/24 maxlen: 24
62.121.229.0/24 maxlen: 24
62.121.230.0/24 maxlen: 24
62.121.228.0/24 maxlen: 24
62.121.233.0/24 maxlen: 24
62.121.231.0/24 maxlen: 24
62.121.232.0/24 maxlen: 24
62.121.227.0/24 maxlen: 24
62.121.236.0/24 maxlen: 24
62.121.237.0/24 maxlen: 24
62.121.235.0/24 maxlen: 24
62.121.240.0/24 maxlen: 24
62.121.238.0/24 maxlen: 24
62.121.239.0/24 maxlen: 24
62.121.234.0/24 maxlen: 24
62.121.243.0/24 maxlen: 24
62.121.244.0/24 maxlen: 24
62.121.242.0/24 maxlen: 24
62.121.245.0/24 maxlen: 24
62.121.246.0/24 maxlen: 24
62.121.241.0/24 maxlen: 24
62.121.247.0/24 maxlen: 24
62.121.248.0/24 maxlen: 24
62.121.250.0/24 maxlen: 24
62.121.251.0/24 maxlen: 24
62.121.249.0/24 maxlen: 24
62.121.252.0/24 maxlen: 24
62.121.253.0/24 maxlen: 24
62.121.254.0/24 maxlen: 24
62.121.255.0/24 maxlen: 24
62.121.192.0/24 maxlen: 24
62.121.192.0/20 maxlen: 24
62.121.195.0/24 maxlen: 24
62.121.193.0/24 maxlen: 24
62.121.194.0/24 maxlen: 24
62.121.198.0/24 maxlen: 24
62.121.199.0/24 maxlen: 24
62.121.196.0/24 maxlen: 24
62.121.197.0/24 maxlen: 24
62.121.202.0/24 maxlen: 24
62.121.200.0/24 maxlen: 24
62.121.201.0/24 maxlen: 24
62.121.205.0/24 maxlen: 24
62.121.206.0/24 maxlen: 24
62.121.203.0/24 maxlen: 24
62.121.204.0/24 maxlen: 24
62.121.209.0/24 maxlen: 24
62.121.207.0/24 maxlen: 24
62.121.208.0/24 maxlen: 24
62.121.212.0/24 maxlen: 24
62.121.213.0/24 maxlen: 24
62.121.210.0/24 maxlen: 24
62.121.211.0/24 maxlen: 24
62.121.216.0/24 maxlen: 24
62.121.214.0/24 maxlen: 24
62.121.215.0/24 maxlen: 24
62.121.219.0/24 maxlen: 24
62.121.217.0/24 maxlen: 24
62.121.218.0/24 maxlen: 24
62.121.220.0/24 maxlen: 24
62.121.222.0/24 maxlen: 24
62.121.223.0/24 maxlen: 24
62.121.221.0/24 maxlen: 24
62.121.226.0/24 maxlen: 24
62.121.224.0/24 maxlen: 24
62.121.225.0/24 maxlen: 24
2a07:2d40::/48 maxlen: 48
2a07:2d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445846935 (0x1a931597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c037958083b641b773123ceada7bef27558e5940
Validity
Not Before: Jan 1 11:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a65e7d79c6facde73c0a27782c6945a01ebcb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9d:6f:30:25:aa:34:f7:51:85:62:f9:da:a3:
25:46:e0:62:af:47:0c:39:48:01:84:8e:5d:34:fe:
cc:56:cf:8a:84:64:59:c8:01:04:fe:85:11:dd:bd:
52:7d:77:4a:af:7a:e9:5d:07:90:37:19:61:ab:f4:
f3:6c:ac:11:16:33:32:4d:40:2d:46:25:b5:b2:bb:
89:90:f5:db:d6:92:43:75:d2:45:e3:d7:be:ea:8c:
bf:30:42:88:38:d7:35:d9:d9:f2:a7:c8:67:19:39:
9d:48:65:8d:31:2b:4f:51:95:06:4b:ed:0e:1d:65:
5c:3e:75:09:7c:20:94:54:d3:8c:6c:f4:8e:32:59:
33:9f:2b:c7:b6:3d:e7:12:bd:a6:84:22:07:23:1a:
dd:c7:ba:75:c6:11:8b:f8:52:74:65:08:1e:ef:94:
38:f2:0a:e9:6c:e9:98:9a:2c:c5:e6:c8:cb:11:c3:
5b:a4:1f:5c:24:1a:76:8c:c1:28:b9:43:13:ea:aa:
51:69:92:4d:e3:a3:3f:ff:f1:1c:94:c0:6d:51:1d:
78:43:ae:28:fd:51:8f:d3:c6:59:58:f8:2e:97:00:
c8:a9:d1:45:2f:1c:09:da:c6:ec:9f:55:98:91:e4:
62:68:1e:39:a7:fd:9d:1c:44:cf:d9:3f:4d:c3:23:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:E7:D7:9C:6F:AC:DE:73:C0:A2:77:82:C6:94:5A:01:EB:CB:17
X509v3 Authority Key Identifier:
keyid:C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/GmXn15xvrN5zwKJ3gsaUWgHryxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.121.192.0/18
185.166.192.0/22
IPv6:
2a07:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
6d:1c:33:5f:fa:d4:97:b7:6f:60:2a:ee:49:26:72:75:3d:52:
e7:05:96:83:4b:bf:59:4f:01:3a:0e:9b:42:d7:ca:1a:23:de:
d1:7d:60:aa:75:74:af:37:77:d8:51:a4:3a:93:0a:e0:4c:a8:
a0:dd:1f:43:48:52:9c:6b:a2:43:76:84:2d:c5:99:d0:6a:f4:
f0:31:00:65:09:76:f1:7c:be:61:9d:aa:cc:92:80:ae:d4:17:
4e:c4:b3:90:84:0c:ec:0d:3b:23:d0:ed:51:ee:0d:ab:ab:55:
45:56:7f:ed:d3:ad:52:09:73:10:5c:34:94:63:ec:f6:88:5b:
aa:da:9d:34:bb:7b:3e:90:e0:42:33:52:8a:0c:d2:40:b5:06:
88:18:0e:d1:13:1f:9f:f7:ed:40:86:7e:8d:60:15:7e:29:a5:
24:fc:60:2c:b1:49:a5:c7:c8:3a:6b:ac:1d:29:d3:da:84:98:
b3:71:a1:ee:cf:08:d8:46:8b:f8:f0:f4:9c:79:8a:bc:5d:6f:
ba:a1:c1:c9:19:2f:85:ea:3f:da:26:bc:3f:97:ab:f4:e6:ff:
42:22:3c:7d:96:25:83:85:53:6f:f1:7f:f3:f4:f5:0e:8c:cd:
95:af:d6:43:fb:35:d0:bc:92:51:46:68:16:f8:4f:f1:e7:41:
ab:93:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:05 2025 by rpki-client