Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/GVA7_nKuHyKaQ_8-319BF2Yt_1Q.roa
File: GVA7_nKuHyKaQ_8-319BF2Yt_1Q.roa (raw, json)
Hash identifier: vza0iq+RXwAn9KyZHhP6X7UArXAvsTyH69ngMaq2Ra8=
Subject key identifier: 19:50:3B:FE:72:AE:1F:22:9A:43:FF:3E:DF:5F:41:17:66:2D:FF:54
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 018BFFC019A1BD1E428D2D2A0F56274DF27A
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/GVA7_nKuHyKaQ_8-319BF2Yt_1Q.roa
Signing time: Fri 24 Nov 2023 05:14:21 +0000
ROA not before: Fri 24 Nov 2023 05:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59684
IP address blocks: 176.126.164.0/22 maxlen: 22
176.126.164.0/24 maxlen: 24
176.126.165.0/24 maxlen: 24
176.126.166.0/24 maxlen: 24
176.126.167.0/24 maxlen: 24
2001:67c:87c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:c0:19:a1:bd:1e:42:8d:2d:2a:0f:56:27:4d:f2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Nov 24 05:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19503bfe72ae1f229a43ff3edf5f4117662dff54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:4d:38:66:44:73:ad:18:bd:a4:39:8d:d5:
21:86:b3:a8:40:f3:5a:c1:cc:73:0b:ae:b5:78:97:
70:51:97:cf:07:3c:91:80:f1:8c:fe:a2:e2:3d:08:
99:18:5e:57:03:43:34:f0:f4:bc:10:cb:80:a6:89:
04:65:67:12:3f:5d:b0:c7:dc:b6:18:1f:55:2a:9a:
f9:d5:84:65:e8:48:56:01:80:a9:84:09:04:5c:1b:
bc:ea:2d:94:cf:4a:8c:c9:6b:6d:24:99:ae:d7:56:
60:9e:33:88:c2:c2:84:4c:dd:b1:09:1f:62:a3:de:
af:1b:24:b2:04:e2:25:20:0f:8e:fe:07:1a:21:22:
82:12:bf:41:5f:98:8b:e7:4d:56:63:13:2a:f4:ae:
55:dc:37:67:f7:9a:7a:7d:93:99:cc:c4:24:7c:d5:
29:2d:d2:db:a6:aa:2c:df:9a:ac:c8:83:74:dc:8b:
d4:00:3d:dc:58:80:3c:7a:e0:71:03:e0:66:f2:ee:
97:03:1a:3d:29:f3:d2:1c:65:9e:d4:d3:f5:6c:28:
1c:79:8a:ee:a7:16:73:29:b8:ee:d0:ac:7c:3c:ba:
4e:4d:e3:00:2e:4d:58:0d:e0:82:d5:4a:a3:1a:68:
77:6f:61:70:7a:6f:b2:b9:c5:e6:10:b2:00:34:70:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:50:3B:FE:72:AE:1F:22:9A:43:FF:3E:DF:5F:41:17:66:2D:FF:54
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/GVA7_nKuHyKaQ_8-319BF2Yt_1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.164.0/22
IPv6:
2001:67c:87c::/48
Signature Algorithm: sha256WithRSAEncryption
91:da:c8:ad:d2:b8:e7:00:15:31:91:15:fd:01:89:39:ce:92:
a3:d7:22:6b:ae:96:38:67:35:43:7b:69:df:73:f7:ee:8d:f4:
85:02:9c:3d:15:86:7a:93:31:a2:be:a2:52:ba:49:8d:ec:3b:
28:73:e4:f9:8d:89:6c:d6:af:2d:99:86:37:0a:ea:93:45:2f:
5b:05:cf:54:8c:76:ad:1c:12:7d:6c:0d:20:0e:c7:84:53:a8:
79:bd:64:57:1e:1c:b5:98:7f:54:c5:13:c3:8d:6c:d6:21:02:
39:3c:af:6c:7a:10:1c:51:e5:77:8e:62:b9:3b:25:9f:40:de:
c7:28:c1:72:78:7c:c1:9e:18:f4:9c:b8:be:64:66:a9:17:9e:
f4:86:3c:f4:67:5d:f0:3c:6e:78:f2:ff:8b:37:1b:07:52:ae:
f2:bb:ac:ed:c7:66:7c:00:50:d1:ff:7f:81:db:5c:62:77:a0:
8d:df:36:7b:e0:ca:e5:97:92:ec:47:00:cf:d4:ff:b3:8c:ed:
8f:9d:51:4e:4a:c4:b8:21:bd:0c:c1:44:01:7e:b4:eb:4b:25:
d9:09:08:4c:39:b6:68:b1:a9:ed:30:e9:b7:a3:13:5e:ca:4b:
7e:b6:84:7f:bc:9c:3c:54:be:56:b3:71:6c:47:10:ea:aa:6d:
84:ed:23:0d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYv/wBmhvR5CjS0qD1YnTfJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDhkZTA4MjA2NGViM2ZlYjQwMmE4NzNlNThiYjY4Y2Y1
ZDQ5MWUwHhcNMjMxMTI0MDUxNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTUwM2JmZTcyYWUxZjIyOWE0M2ZmM2VkZjVmNDExNzY2MmRmZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dBNOGZEc60YvaQ5jdUhhrOoQPNa
wcxzC661eJdwUZfPBzyRgPGM/qLiPQiZGF5XA0M08PS8EMuApokEZWcSP12wx9y2
GB9VKpr51YRl6EhWAYCphAkEXBu86i2Uz0qMyWttJJmu11ZgnjOIwsKETN2xCR9i
o96vGySyBOIlIA+O/gcaISKCEr9BX5iL501WYxMq9K5V3Ddn95p6fZOZzMQkfNUp
LdLbpqos35qsyIN03IvUAD3cWIA8euBxA+Bm8u6XAxo9KfPSHGWe1NP1bCgceYru
pxZzKbju0Kx8PLpOTeMALk1YDeCC1UqjGmh3b2Fwem+yucXmELIANHBViwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBlQO/5yrh8imkP/Pt9fQRdmLf9UMB8GA1UdIwQY
MBaAFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYt
YWVhMmM0ZTI2NzcwLzEvR1ZBN19uS3VIeUthUV84LTMxOUJGMll0XzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYtYWVhMmM0ZTI2Nzcw
LzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCsH6kMA8E
AgACMAkDBwAgAQZ8CHwwDQYJKoZIhvcNAQELBQADggEBAJHayK3SuOcAFTGRFf0B
iTnOkqPXImuuljhnNUN7ad9z9+6N9IUCnD0VhnqTMaK+olK6SY3sOyhz5PmNiWzW
ry2ZhjcK6pNFL1sFz1SMdq0cEn1sDSAOx4RTqHm9ZFceHLWYf1TFE8ONbNYhAjk8
r2x6EBxR5XeOYrk7JZ9A3scowXJ4fMGeGPScuL5kZqkXnvSGPPRnXfA8bnjy/4s3
GwdSrvK7rO3HZnwAUNH/f4HbXGJ3oI3fNnvgyuWXkuxHAM/U/7OM7Y+dUU5KxLgh
vQzBRAF+tOtLJdkJCEw5tmixqe0w6bejE17KS362hH+8nDxUvlazcWxHEOqqbYTt
Iw0=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:34 2025 by rpki-client