Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/gTGYeEDyMdhE0Y9UCI_XlQlh3JA.roa
File: gTGYeEDyMdhE0Y9UCI_XlQlh3JA.roa (raw, json)
Hash identifier: VDUlXyE2tLRZBk6jf2DZtzwDUDbF3dgnrZHuuwRWG0o=
Subject key identifier: 81:31:98:78:40:F2:31:D8:44:D1:8F:54:08:8F:D7:95:09:61:DC:90
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 0F30AE98
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/gTGYeEDyMdhE0Y9UCI_XlQlh3JA.roa
Signing time: Sat 01 Jan 2022 09:03:03 +0000
ROA not before: Sat 01 Jan 2022 09:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60255
IP address blocks: 185.190.196.0/22 maxlen: 24
2a0e:2e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254848664 (0xf30ae98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Jan 1 09:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8131987840f231d844d18f54088fd7950961dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:72:68:b3:f0:71:d5:91:bc:85:61:31:7a:
99:af:e0:50:60:c8:3d:fa:a1:57:ad:cf:12:64:f7:
b2:aa:3b:1b:aa:fd:74:fc:4c:e8:88:4c:69:74:5e:
d4:47:c6:09:ff:8e:f3:fe:66:80:46:54:b6:2c:d6:
7d:1c:2a:39:ef:e9:54:ad:12:fc:77:da:1c:33:87:
9b:4a:c0:31:12:d8:2a:38:ca:ae:7c:37:10:78:a5:
53:42:26:35:3a:b9:e2:7a:67:d1:45:9f:1b:3a:7a:
ac:c1:87:94:df:fe:e6:e6:d9:05:c1:16:43:0f:5a:
73:1f:77:75:25:ab:30:c1:ce:0a:ec:30:21:db:3f:
f3:19:0b:db:25:8d:4d:6e:8d:f7:be:26:69:43:ab:
4c:60:43:1e:db:cf:bd:df:ea:8a:95:c9:98:78:75:
f5:da:3b:93:5d:84:5d:67:18:89:61:9f:0a:f1:d5:
a6:70:ea:a1:4c:0b:6e:4d:a6:97:e7:6b:4b:c3:97:
d7:59:9d:9a:34:f5:44:f5:f5:57:c1:ef:28:b8:60:
be:92:87:4d:ad:f9:c7:a8:ad:b6:37:0c:e4:fd:0e:
84:8b:cc:b9:24:ec:13:16:9e:7b:9d:ae:36:dc:9a:
35:33:52:60:56:53:ce:28:c6:8c:d7:51:d8:d3:d8:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:98:78:40:F2:31:D8:44:D1:8F:54:08:8F:D7:95:09:61:DC:90
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/gTGYeEDyMdhE0Y9UCI_XlQlh3JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.196.0/22
IPv6:
2a0e:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
35:7a:2f:3b:56:3d:a3:c8:8c:df:38:6c:b3:17:d7:18:4c:fe:
5a:20:76:03:58:ee:d3:5e:1d:70:02:f3:4a:65:11:31:57:2f:
0d:2a:b3:52:b0:67:6d:2c:89:03:2b:6b:56:2b:4c:3d:bc:0d:
44:99:b9:fb:62:ed:9e:82:1c:3b:99:b9:aa:1c:95:e4:51:a8:
26:51:ec:2b:9e:1b:d3:db:51:d0:23:0f:d9:86:cc:73:c7:26:
88:51:ac:8b:65:5f:0d:d7:26:68:24:e1:0a:58:bd:b8:8f:2d:
9f:02:a7:99:8d:00:f4:8f:01:31:6b:28:fa:6c:88:0f:27:ee:
b1:64:5f:66:32:c1:a3:4c:e2:fe:84:de:a3:20:be:a2:0a:78:
2f:01:d9:c4:5a:e9:89:60:ec:cd:4e:35:2b:66:51:cc:b6:57:
9e:43:07:f2:71:83:11:14:d1:9e:31:24:73:5a:06:05:cf:46:
af:ae:24:a0:2f:25:c8:31:a7:3a:f5:fb:5d:ab:25:5f:b5:ca:
6d:23:7b:68:24:aa:ab:73:78:7e:44:6e:5e:82:d9:68:53:37:
c7:b6:c3:38:6d:c3:1f:d0:25:81:bd:0c:70:42:f0:04:fd:09:
cc:82:ff:b6:ac:a2:d2:24:13:cd:7b:b6:35:90:ef:5c:79:29:
e0:be:b7:15
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEDzCumDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NGRmZjBlMTUyMzc4MDU1MDdhZjVkMDNhYmVkZWI4ODMyYjRiOGNiMB4XDTIyMDEw
MTA5MDMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODEzMTk4Nzg0MGYy
MzFkODQ0ZDE4ZjU0MDg4ZmQ3OTUwOTYxZGM5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALnzcmiz8HHVkbyFYTF6ma/gUGDIPfqhV63PEmT3sqo7G6r9
dPxM6IhMaXRe1EfGCf+O8/5mgEZUtizWfRwqOe/pVK0S/HfaHDOHm0rAMRLYKjjK
rnw3EHilU0ImNTq54npn0UWfGzp6rMGHlN/+5ubZBcEWQw9acx93dSWrMMHOCuww
Ids/8xkL2yWNTW6N974maUOrTGBDHtvPvd/qipXJmHh19do7k12EXWcYiWGfCvHV
pnDqoUwLbk2ml+drS8OX11mdmjT1RPX1V8HvKLhgvpKHTa35x6ittjcM5P0OhIvM
uSTsExaee52uNtyaNTNSYFZTzijGjNdR2NPYASECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSBMZh4QPIx2ETRj1QIj9eVCWHckDAfBgNVHSMEGDAWgBTE3/DhUjeAVQev
XQOr7euIMrS4yzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hOX3c0VkkzZ0ZVSHIxMERxLTNyaURLMHVNcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvMTViZDUzLTk5NGEtNDZmMi05ZTZlLTcxODg3ZDBhODNiZS8x
L2dUR1llRUR5TWRoRTBZOVVDSV9YbFFsaDNKQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
MTViZDUzLTk5NGEtNDZmMi05ZTZlLTcxODg3ZDBhODNiZS8xL3hOX3c0VkkzZ0ZV
SHIxMERxLTNyaURLMHVNcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArm+xDANBAIAAjAHAwUDKg4ugDAN
BgkqhkiG9w0BAQsFAAOCAQEANXovO1Y9o8iM3zhssxfXGEz+WiB2A1ju014dcALz
SmURMVcvDSqzUrBnbSyJAytrVitMPbwNRJm5+2LtnoIcO5m5qhyV5FGoJlHsK54b
09tR0CMP2YbMc8cmiFGsi2VfDdcmaCThCli9uI8tnwKnmY0A9I8BMWso+myIDyfu
sWRfZjLBo0zi/oTeoyC+ogp4LwHZxFrpiWDszU41K2ZRzLZXnkMH8nGDERTRnjEk
c1oGBc9Gr64koC8lyDGnOvX7XaslX7XKbSN7aCSqq3N4fkRuXoLZaFM3x7bDOG3D
H9Algb0McELwBP0JzIL/tqyi0iQTzXu2NZDvXHkp4L63FQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:45 2025 by rpki-client