Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/gjeVN--coGjdiSHf9_sGFtZJsNY.roa
File: gjeVN--coGjdiSHf9_sGFtZJsNY.roa (raw, json)
Hash identifier: jP7EjgoZk89xFBsKKo9l3K7awsi1KurGYgipVaQlCxs=
Subject key identifier: 82:37:95:37:EF:9C:A0:68:DD:89:21:DF:F7:FB:06:16:D6:49:B0:D6
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 055E05C2
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/gjeVN--coGjdiSHf9_sGFtZJsNY.roa
Signing time: Sat 01 Jan 2022 16:06:49 +0000
ROA not before: Sat 01 Jan 2022 16:06:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25106
IP address blocks: 176.60.4.0/22 maxlen: 22
176.60.0.0/18 maxlen: 24
176.60.44.0/22 maxlen: 22
176.60.40.0/22 maxlen: 22
46.56.114.0/23 maxlen: 23
46.56.125.0/24 maxlen: 24
176.60.128.0/18 maxlen: 24
176.60.132.0/22 maxlen: 22
176.60.64.0/18 maxlen: 24
176.60.80.0/23 maxlen: 23
46.56.56.0/22 maxlen: 24
46.56.60.0/23 maxlen: 23
46.56.62.0/23 maxlen: 23
46.56.64.0/19 maxlen: 24
46.56.96.0/19 maxlen: 24
46.56.40.0/24 maxlen: 24
46.56.41.0/24 maxlen: 24
46.56.42.0/24 maxlen: 24
46.56.40.0/21 maxlen: 21
46.216.184.0/21 maxlen: 21
46.216.192.0/21 maxlen: 21
46.216.192.0/18 maxlen: 24
46.216.128.0/18 maxlen: 24
46.216.144.0/21 maxlen: 21
134.17.208.0/22 maxlen: 24
134.17.208.0/20 maxlen: 24
46.216.152.0/21 maxlen: 21
134.17.224.0/20 maxlen: 24
46.216.246.0/24 maxlen: 24
134.17.16.0/21 maxlen: 21
134.17.17.0/24 maxlen: 24
185.20.112.0/23 maxlen: 23
178.168.160.0/21 maxlen: 21
185.20.114.0/23 maxlen: 23
178.168.168.0/21 maxlen: 24
134.17.24.0/21 maxlen: 21
134.17.24.0/22 maxlen: 22
134.17.28.0/24 maxlen: 24
134.17.32.0/19 maxlen: 19
134.17.32.0/22 maxlen: 22
178.168.180.0/22 maxlen: 22
178.168.192.0/19 maxlen: 24
134.17.64.0/20 maxlen: 20
176.60.176.0/23 maxlen: 23
178.168.128.0/18 maxlen: 24
176.60.184.0/22 maxlen: 22
176.60.192.0/20 maxlen: 20
178.168.144.0/23 maxlen: 23
176.60.192.0/18 maxlen: 24
134.17.0.0/20 maxlen: 24
176.60.208.0/23 maxlen: 23
134.17.124.0/24 maxlen: 24
134.17.128.0/19 maxlen: 19
134.17.128.0/21 maxlen: 21
134.17.136.0/21 maxlen: 21
134.17.144.0/20 maxlen: 20
134.17.160.0/19 maxlen: 19
46.216.0.0/17 maxlen: 24
178.168.220.0/22 maxlen: 22
178.168.224.0/19 maxlen: 24
134.17.79.0/24 maxlen: 24
134.17.80.0/21 maxlen: 21
134.17.80.0/22 maxlen: 22
134.17.88.0/21 maxlen: 24
134.17.89.0/24 maxlen: 24
178.168.242.0/23 maxlen: 23
134.17.96.0/19 maxlen: 19
178.168.253.0/24 maxlen: 24
2a02:bf0:3000::/36 maxlen: 36
2a02:bf0:7000::/36 maxlen: 36
2a02:bf0:6000::/36 maxlen: 36
2a02:bf0:5000::/36 maxlen: 36
2a02:bf0:4000::/36 maxlen: 36
2a02:bf0:1000::/36 maxlen: 36
2a02:bf0::/32 maxlen: 32
2a02:bf0:27::/48 maxlen: 48
2a02:bf0:1002::/48 maxlen: 48
2a02:bf0:2::/48 maxlen: 48
2a02:bf0:26::/48 maxlen: 48
2a02:bf0:29::/48 maxlen: 48
2a02:bf0:10::/44 maxlen: 44
2a02:bf0:1::/48 maxlen: 48
2a02:bf0:25::/48 maxlen: 48
2a02:bf0::/48 maxlen: 48
2a02:bf0:7::/48 maxlen: 48
2a02:bf0:6::/48 maxlen: 48
2a02:bf0:28::/48 maxlen: 48
2a02:bf0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90047938 (0x55e05c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Jan 1 16:06:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82379537ef9ca068dd8921dff7fb0616d649b0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:3f:f1:bb:f7:46:92:41:6c:fc:7a:b5:05:
37:70:70:ec:96:4d:d4:05:af:e5:03:d5:38:37:31:
3a:8e:af:71:89:44:03:25:e5:89:9e:af:24:aa:51:
64:da:1f:79:4b:6a:09:16:e3:98:73:0b:9b:70:58:
de:dd:6e:28:81:8a:97:4c:3a:d4:17:2b:ef:5f:9e:
4f:6a:68:9b:ec:79:8a:46:af:e3:97:1f:70:ff:2f:
10:ed:4b:97:a4:8a:da:4f:2c:33:cb:78:1a:e9:37:
52:11:7c:ff:3e:3c:b7:72:6b:a5:54:b6:f9:5e:b7:
c0:0b:21:32:ca:e2:31:ad:74:ee:3f:7e:05:6a:3f:
cd:fe:68:42:f0:84:4c:01:d2:0e:bf:61:0a:99:e5:
cf:7f:40:2c:f8:d6:4e:72:5d:ce:d6:f4:70:30:c8:
f8:ba:1f:94:a7:e8:04:5d:76:bc:ab:44:73:fb:94:
b9:87:47:ed:a2:56:f5:c7:4c:f8:cf:34:87:e6:ed:
13:31:87:3f:d1:c5:66:82:4b:81:97:b5:57:f8:98:
13:e9:94:71:47:a5:1e:ec:9a:76:5c:ea:6c:5a:2c:
40:c5:d2:5f:d3:71:89:15:41:6d:70:ec:74:4e:e3:
9a:07:8b:56:82:87:a1:42:6b:ee:09:3a:ba:35:d7:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:95:37:EF:9C:A0:68:DD:89:21:DF:F7:FB:06:16:D6:49:B0:D6
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/gjeVN--coGjdiSHf9_sGFtZJsNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.40.0/21
46.56.56.0-46.56.127.255
46.216.0.0/16
134.17.0.0-134.17.191.255
134.17.208.0-134.17.239.255
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
27:d4:c8:cc:3a:52:55:57:5d:cc:7a:da:df:59:92:ef:1b:ff:
d4:23:de:0b:d6:1f:c2:a6:ba:db:2e:df:6e:b4:7e:c2:9c:30:
e6:34:c3:b5:35:73:e8:2b:ac:34:bb:39:ca:d9:69:cb:53:63:
22:0d:c0:25:26:3d:79:25:16:bd:f4:57:a9:fc:8e:b8:94:b5:
54:fb:76:68:07:01:51:0c:06:ef:b3:19:3c:e5:da:46:e8:86:
e3:94:95:d8:d8:e3:52:6e:8c:37:76:9d:d2:c8:ac:60:65:03:
dc:83:71:63:ef:d1:c5:61:f8:52:62:1b:04:29:d9:02:ef:c5:
c6:ab:a5:de:ba:73:4f:af:93:4d:a8:ab:0d:93:05:62:db:12:
36:e0:c2:bc:4c:c6:76:72:76:5d:44:a8:0b:6e:f4:49:dc:fa:
69:d7:a8:6c:b9:f9:77:30:2b:0f:4d:93:c2:5e:dd:ad:f0:f8:
98:c9:e7:72:23:3f:b3:a4:0a:6e:4c:ae:de:27:50:74:3d:17:
22:4a:54:ea:63:94:c8:c2:98:c5:dd:47:4b:80:43:50:b8:0a:
14:95:a9:66:45:80:6e:f2:59:e6:4a:b4:da:f9:df:52:cb:d2:
cb:f3:7e:59:42:8e:32:8f:5d:8c:b4:79:a5:de:38:8d:92:83:
33:d2:57:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net