Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/GC4j8vkX0siNzY8uS-L91AGm24c.roa
File: GC4j8vkX0siNzY8uS-L91AGm24c.roa (raw, json)
Hash identifier: WPbBlXfm8vD2Sy4QJMcyNlc607Er5iV5sCOQjSeazCI=
Subject key identifier: 18:2E:23:F2:F9:17:D2:C8:8D:CD:8F:2E:4B:E2:FD:D4:01:A6:DB:87
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 0182D18254E8606C3B053DAA5B263ECAF0E8
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/GC4j8vkX0siNzY8uS-L91AGm24c.roa
Signing time: Wed 24 Aug 2022 20:19:15 +0000
ROA not before: Wed 24 Aug 2022 20:19:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 91.197.55.0/24 maxlen: 24
2a06:8ac0::/45 maxlen: 45
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d1:82:54:e8:60:6c:3b:05:3d:aa:5b:26:3e:ca:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Aug 24 20:19:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=182e23f2f917d2c88dcd8f2e4be2fdd401a6db87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:ad:2f:15:49:6f:5a:8a:25:5e:75:38:59:
27:91:6e:1d:f5:9f:d6:28:59:18:3b:36:51:9a:9a:
2f:b3:2d:d1:37:a9:0d:a4:af:c1:72:37:88:7d:a5:
1e:67:33:30:80:12:f6:f9:ce:79:eb:e7:23:47:0a:
7c:fc:2c:18:b6:e3:fa:d6:6b:85:8d:12:bb:a0:ca:
66:29:9b:00:19:bf:59:3a:82:3b:c4:57:98:ef:e4:
56:45:5f:3b:c8:8c:d9:ef:82:da:e7:d9:25:ee:5c:
b3:4d:c1:c2:d5:96:7f:c5:1f:79:c3:9e:2b:e8:c8:
23:57:9a:76:5f:7e:8e:e8:ef:21:25:0c:7c:c8:9c:
e9:bc:98:20:a2:b7:42:24:e5:2f:86:f0:16:07:de:
fd:75:f1:c6:71:db:b2:f4:f7:f5:a6:7b:a3:f6:b2:
f0:1a:be:25:2c:26:b8:24:55:52:5d:fa:b3:bd:84:
7b:52:7a:f9:41:61:ce:9f:d7:ad:ac:ab:2d:a0:ce:
9d:18:e8:22:b3:bd:0d:ec:ba:8f:94:e4:a8:b4:38:
b4:21:bc:73:18:14:e6:cd:18:e8:23:0a:4d:8c:22:
1e:1d:e8:c5:60:0d:d8:85:94:b3:de:f4:fe:66:3e:
bf:5d:ef:55:c9:2e:35:e3:45:fb:af:eb:2c:20:92:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2E:23:F2:F9:17:D2:C8:8D:CD:8F:2E:4B:E2:FD:D4:01:A6:DB:87
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/GC4j8vkX0siNzY8uS-L91AGm24c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.55.0/24
IPv6:
2a06:8ac0::/45
Signature Algorithm: sha256WithRSAEncryption
77:aa:6d:ff:9f:70:31:7e:3d:94:f1:6f:db:8a:fe:1d:fc:41:
a5:b3:39:e3:ed:29:3f:a6:56:91:f1:d7:90:f8:4e:39:69:0d:
4d:60:fc:76:42:95:b9:80:5f:ea:af:e6:84:72:3f:de:79:b4:
83:f9:d3:4d:63:e6:7b:26:01:bb:f3:58:72:d1:6d:8f:54:09:
a6:e0:f3:a8:af:88:56:4b:f3:46:d3:db:8e:a0:f1:2d:0a:e5:
db:23:a4:b9:c7:6e:a3:de:ee:25:ed:81:c9:1f:50:e0:ad:b0:
b4:55:cb:b9:e3:fe:79:cd:d0:e5:15:6a:77:0a:af:5e:21:69:
ca:7c:f2:3f:27:fa:45:e5:f9:67:22:f7:3c:62:e3:48:33:20:
93:8c:fb:d7:a1:23:ca:b6:0f:6e:8d:01:01:34:b5:fc:3d:59:
fa:55:c0:bb:fd:f6:ee:e1:00:6c:ba:38:93:c4:e9:d7:a0:84:
86:34:ac:45:c7:69:df:ae:3b:05:cc:19:f7:52:54:4a:6e:1a:
b8:57:4b:49:ea:4b:56:ce:05:d9:a2:87:eb:e2:88:3b:d7:ed:
44:f2:99:de:e1:c8:ee:a2:1e:e8:87:45:4d:7e:55:de:42:c6:
1d:80:53:d1:7d:5d:6d:d5:b8:69:28:d5:d1:0c:48:a2:95:64:
74:0e:6b:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLRglToYGw7BT2qWyY+yvDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj
YzExMzYwHhcNMjIwODI0MjAxOTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODJlMjNmMmY5MTdkMmM4OGRjZDhmMmU0YmUyZmRkNDAxYTZkYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKCtLxVJb1qKJV51OFknkW4d9Z/W
KFkYOzZRmpovsy3RN6kNpK/BcjeIfaUeZzMwgBL2+c556+cjRwp8/CwYtuP61muF
jRK7oMpmKZsAGb9ZOoI7xFeY7+RWRV87yIzZ74La59kl7lyzTcHC1ZZ/xR95w54r
6MgjV5p2X36O6O8hJQx8yJzpvJggordCJOUvhvAWB979dfHGcduy9Pf1pnuj9rLw
Gr4lLCa4JFVSXfqzvYR7Unr5QWHOn9etrKstoM6dGOgis70N7LqPlOSotDi0Ibxz
GBTmzRjoIwpNjCIeHejFYA3YhZSz3vT+Zj6/Xe9VyS4140X7r+ssIJII6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBguI/L5F9LIjc2PLkvi/dQBptuHMB8GA1UdIwQY
MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt
Zjc0Y2NjYzRlMGExLzEvR0M0ajh2a1gwc2lOelk4dVMtTDkxQUdtMjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx
LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW8U3MA8E
AgACMAkDBwMqBorAAAAwDQYJKoZIhvcNAQELBQADggEBAHeqbf+fcDF+PZTxb9uK
/h38QaWzOePtKT+mVpHx15D4TjlpDU1g/HZClbmAX+qv5oRyP955tIP5001j5nsm
AbvzWHLRbY9UCabg86iviFZL80bT246g8S0K5dsjpLnHbqPe7iXtgckfUOCtsLRV
y7nj/nnN0OUVancKr14hacp88j8n+kXl+Wci9zxi40gzIJOM+9ehI8q2D26NAQE0
tfw9WfpVwLv99u7hAGy6OJPE6deghIY0rEXHad+uOwXMGfdSVEpuGrhXS0nqS1bO
Bdmih+viiDvX7UTymd7hyO6iHuiHRU1+Vd5Cxh2AU9F9XW3VuGko1dEMSKKVZHQO
ayw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:27 2025 by rpki-client