Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/GEcvstr-lB9dRuco5tA1nk89zZM.roa
File: GEcvstr-lB9dRuco5tA1nk89zZM.roa (raw, json)
Hash identifier: EYQ7tn/aQmmIxscrJf+XmhHq3Wup5Ml+YpmQv+DDglk=
Subject key identifier: 18:47:2F:B2:DA:FE:94:1F:5D:46:E7:28:E6:D0:35:9E:4F:3D:CD:93
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 01843DE1E3C59C787C4DD10C8F5EC8905AD2
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/GEcvstr-lB9dRuco5tA1nk89zZM.roa
Signing time: Thu 03 Nov 2022 14:25:24 +0000
ROA not before: Thu 03 Nov 2022 14:25:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34373
IP address blocks: 185.97.228.0/22 maxlen: 22
185.165.68.0/22 maxlen: 22
86.48.68.0/22 maxlen: 22
91.219.76.0/22 maxlen: 22
193.105.233.0/24 maxlen: 24
185.56.52.0/22 maxlen: 22
185.69.204.0/22 maxlen: 22
185.116.40.0/22 maxlen: 23
185.210.128.0/22 maxlen: 24
217.61.253.0/24 maxlen: 24
2a0b:ec00::/29 maxlen: 29
2a06:7bc0::/29 maxlen: 29
2a0b:57c0::/29 maxlen: 36
2a06:900::/29 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:e1:e3:c5:9c:78:7c:4d:d1:0c:8f:5e:c8:90:5a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Nov 3 14:25:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18472fb2dafe941f5d46e728e6d0359e4f3dcd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:4c:10:3a:be:fe:53:be:26:ed:e8:16:fc:
2b:3c:9e:28:54:46:35:76:6b:2d:5c:a6:d7:5a:c5:
48:24:27:39:4b:64:23:9c:d1:0c:b8:dd:83:ba:55:
ea:2d:3e:16:4d:c7:01:1f:74:fe:38:80:8d:96:b7:
c7:da:8a:a3:ea:b4:d7:e6:0d:37:c4:12:15:83:0a:
b6:9a:9e:e4:73:47:ed:0a:ee:57:11:29:66:7a:2a:
bd:68:8d:f6:23:3b:50:3f:5b:82:f4:29:ff:9b:45:
d9:5b:b2:42:ac:2a:db:8a:21:8c:1e:fb:cd:cc:7e:
82:6e:63:19:38:27:32:20:d9:d9:f7:47:07:34:10:
99:8a:58:fc:61:38:1a:aa:d8:45:5f:2e:52:c3:45:
90:d5:ed:e1:72:84:14:68:61:4f:94:75:df:e4:94:
4d:8d:4f:df:46:f0:67:54:3a:94:af:d7:54:f0:28:
10:3a:39:55:05:9c:ba:44:22:c8:bb:58:d2:a2:6f:
78:9f:fc:41:2d:f2:12:db:47:8a:94:b2:91:8b:c9:
fd:cd:9c:23:08:9b:5c:f2:88:83:bf:61:1c:67:5a:
e4:c3:bc:b9:3a:e5:59:13:02:be:dc:d2:d6:75:d9:
cd:b5:0b:a0:d8:1e:53:95:e8:d4:fd:63:12:2d:08:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:2F:B2:DA:FE:94:1F:5D:46:E7:28:E6:D0:35:9E:4F:3D:CD:93
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/GEcvstr-lB9dRuco5tA1nk89zZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.68.0/22
91.219.76.0/22
185.56.52.0/22
185.69.204.0/22
185.97.228.0/22
185.116.40.0/22
185.165.68.0/22
185.210.128.0/22
193.105.233.0/24
217.61.253.0/24
IPv6:
2a06:900::/29
2a06:7bc0::/29
2a0b:57c0::/29
2a0b:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:3e:08:fc:da:05:b7:dc:c4:23:1b:ec:cf:d3:55:a8:9d:a9:
00:11:aa:86:d7:e9:38:dd:6d:2f:6f:c5:3f:d9:7a:84:52:af:
b0:d4:ee:2f:61:5d:2f:7a:46:81:03:84:e6:d3:d4:22:e8:ea:
d1:b6:fb:e3:e0:c5:d9:7e:7c:26:ed:a0:08:85:da:30:2f:19:
f6:62:01:2a:ea:fb:4a:01:2b:cd:8a:5e:29:b3:9f:62:98:41:
e6:0d:f7:e5:f6:72:48:41:f6:02:73:65:a4:04:84:6c:be:78:
1e:92:f2:74:51:8f:8f:1d:29:ab:e7:6f:9f:d9:93:31:30:92:
cc:4e:0c:82:d3:c5:25:6f:4c:bb:44:d8:80:7b:67:4e:de:a9:
93:3d:fc:33:04:40:3a:51:00:77:a7:4b:9f:5b:7f:21:54:c6:
18:6d:39:9e:9c:b4:f0:12:ec:c1:ca:0e:c5:c0:a7:99:ba:af:
f6:fa:05:56:64:35:81:c1:f5:cb:fb:df:0c:ed:cd:67:0f:1a:
a2:b0:d6:e4:8f:78:2e:12:23:67:6a:28:72:5f:f0:28:2a:fa:
cb:f1:51:ae:dc:1f:d9:da:99:81:cb:d0:75:19:51:a7:de:30:
c9:95:30:3c:2a:67:d1:29:a0:67:65:52:82:17:ac:dc:2e:95:
51:05:b2:dd
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYQ94ePFnHh8TdEMj17IkFrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWE4MWFhOWIyMTk3ZDkxMjdiNDQyNTI1MTAwZmZhYTM2
ZTBkNTIwHhcNMjIxMTAzMTQyNTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODQ3MmZiMmRhZmU5NDFmNWQ0NmU3MjhlNmQwMzU5ZTRmM2RjZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9FMEDq+/lO+Ju3oFvwrPJ4oVEY1
dmstXKbXWsVIJCc5S2QjnNEMuN2DulXqLT4WTccBH3T+OICNlrfH2oqj6rTX5g03
xBIVgwq2mp7kc0ftCu5XESlmeiq9aI32IztQP1uC9Cn/m0XZW7JCrCrbiiGMHvvN
zH6CbmMZOCcyINnZ90cHNBCZilj8YTgaqthFXy5Sw0WQ1e3hcoQUaGFPlHXf5JRN
jU/fRvBnVDqUr9dU8CgQOjlVBZy6RCLIu1jSom94n/xBLfIS20eKlLKRi8n9zZwj
CJtc8oiDv2EcZ1rkw7y5OuVZEwK+3NLWddnNtQug2B5TlejU/WMSLQiTywIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFBhHL7La/pQfXUbnKObQNZ5PPc2TMB8GA1UdIwQY
MBaAFFvqgaqbIZfZEntEJSUQD/qjbg1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yMjQxNTUtM2NhNC00ZmY3LWE5NjQt
ZmMwZGQ5MjUyYzlhLzEvR0VjdnN0ci1sQjlkUnVjbzV0QTFuazg5elpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yMjQxNTUtM2NhNC00ZmY3LWE5NjQtZmMwZGQ5MjUyYzlh
LzEvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBCBAIAATA8AwQCVjBEAwQC
W9tMAwQCuTg0AwQCuUXMAwQCuWHkAwQCuXQoAwQCuaVEAwQCudKAAwQAwWnpAwQA
2T39MCIEAgACMBwDBQMqBgkAAwUDKgZ7wAMFAyoLV8ADBQMqC+wAMA0GCSqGSIb3
DQEBCwUAA4IBAQAPPgj82gW33MQjG+zP01WonakAEaqG1+k43W0vb8U/2XqEUq+w
1O4vYV0vekaBA4Tm09Qi6OrRtvvj4MXZfnwm7aAIhdowLxn2YgEq6vtKASvNil4p
s59imEHmDffl9nJIQfYCc2WkBIRsvngekvJ0UY+PHSmr52+f2ZMxMJLMTgyC08Ul
b0y7RNiAe2dO3qmTPfwzBEA6UQB3p0ufW38hVMYYbTmenLTwEuzByg7FwKeZuq/2
+gVWZDWBwfXL+98M7c1nDxqisNbkj3guEiNnaihyX/AoKvrL8VGu3B/Z2pmBy9B1
GVGn3jDJlTA8KmfRKaBnZVKCF6zcLpVRBbLd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org