Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/gFYTkx56dfrGDQjY9NkGOrz0nxY.roa
File: gFYTkx56dfrGDQjY9NkGOrz0nxY.roa (raw, json)
Hash identifier: N7Yy2R3/Qw3hOEhPMyJ1vPqZ1s9/xyK/Ndpap6g/Yas=
Subject key identifier: 80:56:13:93:1E:7A:75:FA:C6:0D:08:D8:F4:D9:06:3A:BC:F4:9F:16
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 04565E4B
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/gFYTkx56dfrGDQjY9NkGOrz0nxY.roa
Signing time: Mon 23 May 2022 12:57:47 +0000
ROA not before: Mon 23 May 2022 12:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206331
IP address blocks: 185.229.183.0/24 maxlen: 24
185.229.181.0/24 maxlen: 24
185.229.182.0/24 maxlen: 24
185.229.180.0/24 maxlen: 24
185.189.111.0/24 maxlen: 24
185.189.108.0/24 maxlen: 24
2a0b:e481::/32 maxlen: 32
2a0b:e484::/32 maxlen: 32
2a0b:e485::/32 maxlen: 32
2a0b:e482::/32 maxlen: 32
2a0b:e480::/29 maxlen: 29
2a0b:e483::/32 maxlen: 32
2a0b:e487::/32 maxlen: 32
2a0b:e480::/32 maxlen: 32
2a0b:e486::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72769099 (0x4565e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: May 23 12:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=805613931e7a75fac60d08d8f4d9063abcf49f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:1c:a3:ea:69:bc:d8:e3:5f:b2:5a:92:f5:
64:de:f8:54:12:20:32:48:85:7c:aa:ab:97:70:55:
16:9d:00:23:9a:5b:44:28:bf:e0:17:49:40:c7:19:
5f:ff:ab:24:22:11:5e:0b:06:c5:77:bc:48:ad:44:
5d:0d:5d:09:1c:ce:05:e4:a4:16:e4:59:c2:2b:70:
ee:b3:34:99:9d:39:1e:d9:41:dd:61:c9:23:81:62:
31:71:f7:fa:20:b1:cf:23:c3:7c:d1:65:e0:4f:14:
03:2d:b2:5b:f4:1a:6a:d0:70:21:2b:d6:d8:be:07:
ce:e4:bd:75:fa:10:e2:bf:83:ac:79:3c:6d:05:8f:
08:82:a1:37:7f:a1:7f:c7:4e:0f:53:0f:18:c6:d6:
f3:51:0b:11:52:da:50:d0:38:14:d0:d3:36:57:35:
aa:15:38:f1:5e:8e:64:16:d5:f2:71:70:5a:18:a6:
16:62:85:db:bc:00:e3:2d:74:de:9e:62:18:d9:ce:
a2:f1:96:cf:e9:af:e5:d7:cf:80:02:a6:ef:1f:c7:
b8:fa:17:1d:9d:7b:94:d0:49:f1:ce:74:6a:02:ff:
3a:e0:be:30:b8:1a:02:d5:73:37:d7:61:cf:54:c9:
27:e2:da:dd:41:5b:c1:1f:15:54:ba:db:b5:cc:fb:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:13:93:1E:7A:75:FA:C6:0D:08:D8:F4:D9:06:3A:BC:F4:9F:16
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/gFYTkx56dfrGDQjY9NkGOrz0nxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.108.0/24
185.189.111.0/24
185.229.180.0/22
IPv6:
2a0b:e480::/29
Signature Algorithm: sha256WithRSAEncryption
69:a3:53:ce:96:be:06:dd:e0:66:0d:50:86:e3:7a:b8:dc:ac:
a0:d5:67:68:60:98:8b:03:eb:2f:d9:4a:5e:d8:72:9e:ed:d3:
0b:07:b2:6b:94:71:18:e0:c0:d1:b9:85:6a:21:07:1a:42:ee:
52:b2:76:55:46:d6:7c:0e:c8:87:48:58:ab:51:e6:ed:ac:2f:
cb:d4:e4:5c:42:31:5f:27:c6:5f:27:7e:8f:b0:bf:2e:a6:38:
49:c4:9c:4e:1b:35:0c:a1:21:d5:73:2d:2f:a5:6d:fb:6b:e9:
63:11:2f:c5:87:80:76:1f:64:dc:34:68:27:ce:f3:10:6c:d5:
94:c3:34:a1:7e:f9:6f:2e:df:b6:c9:ce:29:83:c0:cc:be:01:
3f:88:cf:ce:d0:c7:0e:2c:c4:e3:78:a2:e2:51:15:23:a3:b8:
79:f4:9d:33:c7:4d:cf:44:b2:6f:95:24:2e:45:df:4f:e6:48:
78:55:23:7c:fb:ff:ce:ca:9c:6c:6b:d7:51:b9:fc:0c:d0:98:
ba:97:6d:eb:d1:16:6b:bb:0e:bd:03:4e:88:90:ca:c3:f4:0c:
10:8c:15:f5:a4:04:ad:f7:8d:e9:16:c3:eb:9c:ec:27:cc:be:
67:a7:c6:8b:d8:71:ee:73:90:94:78:ec:ce:4c:f2:8f:59:5d:
3f:71:a3:cf
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEBFZeSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MGIxOTBkNmY4OWE0MzRjY2U1Y2I4YzBkNGIzOGExNjY5ZGVmYjU5MB4XDTIyMDUy
MzEyNTc0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODA1NjEzOTMxZTdh
NzVmYWM2MGQwOGQ4ZjRkOTA2M2FiY2Y0OWYxNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANfEHKPqabzY41+yWpL1ZN74VBIgMkiFfKqrl3BVFp0AI5pb
RCi/4BdJQMcZX/+rJCIRXgsGxXe8SK1EXQ1dCRzOBeSkFuRZwitw7rM0mZ05HtlB
3WHJI4FiMXH3+iCxzyPDfNFl4E8UAy2yW/QaatBwISvW2L4HzuS9dfoQ4r+DrHk8
bQWPCIKhN3+hf8dOD1MPGMbW81ELEVLaUNA4FNDTNlc1qhU48V6OZBbV8nFwWhim
FmKF27wA4y103p5iGNnOovGWz+mv5dfPgAKm7x/HuPoXHZ17lNBJ8c50agL/OuC+
MLgaAtVzN9dhz1TJJ+La3UFbwR8VVLrbtcz7enkCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSAVhOTHnp1+sYNCNj02QY6vPSfFjAfBgNVHSMEGDAWgBRwsZDW+JpDTM5c
uMDUs4oWad77WTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NMR1ExdmlhUTB6T1hMakExTE9LRm1uZS0xay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvMjNkYzYxLTdlOWQtNDBiMy05MWI2LTQ2YmQ3ZDc5NGZiNi8x
L2dGWVRreDU2ZGZyR0RRalk5TmtHT3J6MG54WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
MjNkYzYxLTdlOWQtNDBiMy05MWI2LTQ2YmQ3ZDc5NGZiNi8xL2NMR1ExdmlhUTB6
T1hMakExTE9LRm1uZS0xay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEALm9bAMEALm9bwMEArnltDANBAIA
AjAHAwUDKgvkgDANBgkqhkiG9w0BAQsFAAOCAQEAaaNTzpa+Bt3gZg1QhuN6uNys
oNVnaGCYiwPrL9lKXthynu3TCweya5RxGODA0bmFaiEHGkLuUrJ2VUbWfA7Ih0hY
q1Hm7awvy9TkXEIxXyfGXyd+j7C/LqY4ScScThs1DKEh1XMtL6Vt+2vpYxEvxYeA
dh9k3DRoJ87zEGzVlMM0oX75by7ftsnOKYPAzL4BP4jPztDHDizE43ii4lEVI6O4
efSdM8dNz0Syb5UkLkXfT+ZIeFUjfPv/zsqcbGvXUbn8DNCYupdt69EWa7sOvQNO
iJDKw/QMEIwV9aQErfeN6RbD65zsJ8y+Z6fGi9hx7nOQlHjszkzyj1ldP3Gjzw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:40 2023 by rpki-client on console-fra.rpki-client.org