Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GfhPTqkIC6ZhiNFcrzQ27SKmH_U.roa
File: GfhPTqkIC6ZhiNFcrzQ27SKmH_U.roa (raw, json)
Hash identifier: udVtYYjk/0xrb35YsEgMDdPK0fTWCh49/kv89vjubQk=
Subject key identifier: 19:F8:4F:4E:A9:08:0B:A6:61:88:D1:5C:AF:34:36:ED:22:A6:1F:F5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188D2104E2C363943A90B2D2779DAFFF6C3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GfhPTqkIC6ZhiNFcrzQ27SKmH_U.roa
Signing time: Mon 19 Jun 2023 05:11:03 +0000
ROA not before: Mon 19 Jun 2023 05:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 37.156.5.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
37.153.158.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
77.81.88.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:10:4e:2c:36:39:43:a9:0b:2d:27:79:da:ff:f6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 19 05:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f84f4ea9080ba66188d15caf3436ed22a61ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:3e:21:ef:c6:a5:e6:52:8f:b9:88:b1:79:
96:1e:32:ca:51:f9:b5:91:a8:bc:53:08:8e:03:87:
91:8f:53:d9:dc:05:0f:61:bb:7d:91:26:68:4d:67:
8f:5b:a5:2d:36:b7:40:fc:3f:69:36:12:ad:89:27:
88:71:a4:12:bb:8e:f7:fc:4f:24:72:97:08:97:36:
40:5a:ab:54:b2:8f:10:93:95:00:ad:42:0d:b3:b4:
1e:81:4b:e9:74:5c:88:75:f3:97:c9:26:a2:fd:11:
52:78:d4:16:c8:17:30:98:37:3e:69:57:23:ad:e4:
80:68:3f:de:68:00:91:58:ed:72:67:94:4e:cd:37:
6c:4c:9a:eb:44:ed:00:6b:3d:69:30:30:85:ba:57:
a7:c2:3c:e2:83:64:8d:08:86:26:39:bd:d8:e2:a0:
d5:59:a1:b8:79:86:aa:75:8c:f5:d1:e1:b3:47:e3:
93:2c:dd:18:b8:ec:06:59:cf:63:be:ce:c5:eb:79:
24:af:1f:c2:9c:14:55:a9:a7:91:54:6b:66:4d:86:
58:cf:72:9d:f6:f7:b0:70:57:32:60:22:fc:c8:f4:
d5:3d:13:71:61:c6:e1:5f:f8:42:d3:82:d5:cf:b7:
8c:93:e1:1e:b4:7b:1c:2e:a4:c2:e6:76:9b:14:4a:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F8:4F:4E:A9:08:0B:A6:61:88:D1:5C:AF:34:36:ED:22:A6:1F:F5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GfhPTqkIC6ZhiNFcrzQ27SKmH_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.158.0/24
37.156.5.0/24
45.88.13.0-45.88.15.255
46.102.237.0/24
77.81.65.0/24
77.81.88.0/24
86.107.51.0/24
89.34.106.0/24
89.35.130.0/23
89.40.215.0/24
89.45.35.0/24
89.46.42.0/24
92.114.32.0/24
94.198.171.0/24
176.223.188.0/24
188.213.216.0/24
188.214.107.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c4:0d:83:a3:fc:be:fb:01:11:c2:42:c1:31:01:08:f9:8c:
b8:c3:b7:a1:c0:fd:3c:08:c0:1e:84:7c:d9:27:05:24:02:b5:
f8:a4:5a:c3:97:64:1f:5e:a3:b6:2d:f2:74:76:e4:84:3c:50:
d4:e8:a2:0e:a6:53:94:76:b8:08:a6:aa:22:38:ad:7f:ca:61:
ec:76:e9:2f:84:8d:64:3b:80:c2:38:86:d5:73:f0:79:4a:71:
4f:41:8a:bc:2d:d1:46:8b:c4:98:34:62:5e:6e:a7:10:a6:f0:
73:48:d1:76:d6:d8:8a:fd:bf:ac:da:24:52:23:78:5b:31:e6:
83:86:69:b6:63:1d:de:6f:28:0f:88:19:25:e6:e4:3c:f3:d9:
db:cc:75:ee:ac:50:3d:a4:d5:1b:bc:a3:b0:f4:33:b8:61:8b:
8c:86:af:d0:0b:a0:25:11:47:ed:ac:fc:ed:51:17:d5:1c:61:
6f:c8:bc:a5:6d:db:14:c6:6d:b6:05:7c:e6:1a:aa:7c:29:dd:
1d:86:f8:3f:09:63:d8:8f:23:a5:3e:8e:d2:a5:2e:61:17:26:
d2:dd:97:14:2d:10:6c:38:b6:8f:74:74:e1:4a:d2:71:f0:5e:
7b:9a:45:6c:78:db:2d:b7:74:45:67:f6:44:18:6c:b7:c8:fd:
8c:bb:c4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:53:40 2025 by rpki-client