Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/GeKwYHeykuo2Snrd6pO1JK1CJjU.roa
File: GeKwYHeykuo2Snrd6pO1JK1CJjU.roa (raw, json)
Hash identifier: VmU5gfC8YaGj4IxW9VofyBnoKMRAz6FzMjDASlvq1AM=
Subject key identifier: 19:E2:B0:60:77:B2:92:EA:36:4A:7A:DD:EA:93:B5:24:AD:42:26:35
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 1B41F069
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/GeKwYHeykuo2Snrd6pO1JK1CJjU.roa
Signing time: Sat 01 Jan 2022 10:59:19 +0000
ROA not before: Sat 01 Jan 2022 10:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33438
IP address blocks: 195.200.85.0/24 maxlen: 24
195.200.84.0/24 maxlen: 24
193.138.220.0/24 maxlen: 24
2a01:788:aaac::/48 maxlen: 48
2a01:788:aaaa::/48 maxlen: 48
2a01:788:aaab::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457306217 (0x1b41f069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 1 10:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19e2b06077b292ea364a7addea93b524ad422635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:cd:17:35:39:00:b7:9a:97:64:a8:45:7e:
f5:96:2c:cc:47:3c:26:89:e2:77:84:52:d7:8b:01:
57:d4:5f:0a:74:d7:b7:c4:33:ea:59:ad:a9:e8:59:
19:3b:09:23:1d:ff:b0:04:cf:7b:47:98:ba:0d:76:
2a:31:2c:01:b0:21:27:ce:5e:9e:0a:bb:70:04:19:
5a:f2:26:bf:b5:6d:76:9b:f8:15:4a:58:d4:39:6b:
f1:ce:2f:46:99:09:15:e9:d8:9d:53:fe:79:8f:e7:
dc:00:be:aa:62:d7:f2:b1:b9:27:11:1f:ac:bf:92:
1a:23:87:0a:a2:8f:b6:b9:33:95:5d:8c:b0:a3:bf:
22:22:17:d6:f5:77:e4:9e:7b:79:f8:4a:52:4e:59:
10:05:db:c5:48:d5:4d:72:63:85:b1:9f:03:04:12:
fe:28:b8:af:98:c8:b7:c6:49:e9:bf:41:39:46:16:
4a:bc:1f:dd:f1:2f:a1:6b:a7:79:dc:aa:44:19:16:
66:eb:fc:08:b3:d9:75:bf:7b:4a:b7:9a:f7:9f:d7:
8c:d7:34:d7:8c:3e:3b:e6:54:41:c5:d0:cc:5a:f3:
56:0a:14:e9:fd:80:de:e9:ab:59:7b:d1:99:bb:de:
0d:dd:01:8e:3b:f7:7e:50:b8:04:88:4f:b2:d9:ce:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:B0:60:77:B2:92:EA:36:4A:7A:DD:EA:93:B5:24:AD:42:26:35
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/GeKwYHeykuo2Snrd6pO1JK1CJjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.220.0/24
195.200.84.0/23
IPv6:
2a01:788:aaaa::-2a01:788:aaac:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:9c:c1:57:f1:94:b1:0b:29:b3:85:6e:95:6a:d3:be:c2:69:
57:1e:6b:96:18:cb:12:94:6d:95:1c:77:9b:fe:03:bd:49:9f:
fb:81:e3:dc:e1:43:62:42:dc:38:d6:d8:9a:e9:c4:70:e3:8c:
93:e0:1a:79:a0:79:f0:51:de:8c:63:e4:2d:7c:f2:36:43:3a:
85:00:37:2c:3b:0f:82:98:b8:fa:d3:ac:8f:1c:e3:23:9b:bb:
07:33:39:82:b4:9b:32:d8:f7:33:59:ff:bc:5f:66:67:41:c2:
71:18:d6:24:c1:0b:a6:e2:fa:0f:50:85:ad:4a:1e:30:0b:f5:
a0:22:50:a1:4a:5a:ac:5a:75:bf:85:da:64:49:99:b1:e0:f8:
df:f0:0d:8d:cd:07:0b:c9:cc:09:23:09:bd:fa:d7:b5:ed:71:
00:07:03:8b:30:07:0d:8e:50:db:f7:e5:86:f2:31:bb:74:a3:
15:c8:19:27:3c:58:28:34:9c:18:5d:60:cd:a8:a8:66:46:78:
74:ba:29:ef:36:a2:49:14:8e:12:c6:c9:bd:e7:c3:66:1c:02:
3a:1f:b4:33:44:6d:64:2b:66:bd:1c:2b:e7:1c:b4:cb:83:51:
03:11:c4:21:ea:7e:a9:18:f2:9f:a8:e7:d7:1e:7b:18:ae:d9:
c6:66:81:10
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIEG0HwaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjQ4Y2YxNDZiNGM3M2QyNzQwOTZkNzA1NzA4ZDI0YjcyOTMyOWY4MB4XDTIyMDEw
MTEwNTkxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTllMmIwNjA3N2Iy
OTJlYTM2NGE3YWRkZWE5M2I1MjRhZDQyMjYzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMrWzRc1OQC3mpdkqEV+9ZYszEc8Jonid4RS14sBV9RfCnTX
t8Qz6lmtqehZGTsJIx3/sATPe0eYug12KjEsAbAhJ85engq7cAQZWvImv7Vtdpv4
FUpY1Dlr8c4vRpkJFenYnVP+eY/n3AC+qmLX8rG5JxEfrL+SGiOHCqKPtrkzlV2M
sKO/IiIX1vV35J57efhKUk5ZEAXbxUjVTXJjhbGfAwQS/ii4r5jIt8ZJ6b9BOUYW
Srwf3fEvoWunedyqRBkWZuv8CLPZdb97Srea95/XjNc014w+O+ZUQcXQzFrzVgoU
6f2A3umrWXvRmbveDd0Bjjv3flC4BIhPstnOT60CAwEAAaOCAiswggInMB0GA1Ud
DgQWBBQZ4rBgd7KS6jZKet3qk7UkrUImNTAfBgNVHSMEGDAWgBRLSM8Ua0xz0nQJ
bXBXCNJLcpMp+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1MwalBGR3RNYzlKMENXMXdWd2pTUzNLVEtmZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvM2JiYjUyLTM5M2UtNDc2Mi1hNzBjLTY0YTZhMDViOTkwNS8x
L0dlS3dZSGV5a3VvMlNucmQ2cE8xSksxQ0pqVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
M2JiYjUyLTM5M2UtNDc2Mi1hNzBjLTY0YTZhMDViOTkwNS8xL1MwalBGR3RNYzlK
MENXMXdWd2pTUzNLVEtmZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwEgQCAAEwDAMEAMGK3AMEAcPIVDAaBAIAAjAUMBID
BwEqAQeIqqoDBwAqAQeIqqwwDQYJKoZIhvcNAQELBQADggEBAIqcwVfxlLELKbOF
bpVq077CaVcea5YYyxKUbZUcd5v+A71Jn/uB49zhQ2JC3DjW2JrpxHDjjJPgGnmg
efBR3oxj5C188jZDOoUANyw7D4KYuPrTrI8c4yObuwczOYK0mzLY9zNZ/7xfZmdB
wnEY1iTBC6bi+g9Qha1KHjAL9aAiUKFKWqxadb+F2mRJmbHg+N/wDY3NBwvJzAkj
Cb3617XtcQAHA4swBw2OUNv35YbyMbt0oxXIGSc8WCg0nBhdYM2oqGZGeHS6Ke82
okkUjhLGyb3nw2YcAjoftDNEbWQrZr0cK+cctMuDUQMRxCHqfqkY8p+o59ceexiu
2cZmgRA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:27 2023 by rpki-client on console-fra.rpki-client.org