Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/GDmPSV8aIznYekcc7c5_klDC-Gs.roa
File: GDmPSV8aIznYekcc7c5_klDC-Gs.roa (raw, json)
Hash identifier: H3aLWMQqqQptrka5Zoq0nmMe3G6IPETW/isavyDaAHc=
Subject key identifier: 18:39:8F:49:5F:1A:23:39:D8:7A:47:1C:ED:CE:7F:92:50:C2:F8:6B
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 039E077F
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/GDmPSV8aIznYekcc7c5_klDC-Gs.roa
Signing time: Sat 01 Jan 2022 09:01:30 +0000
ROA not before: Sat 01 Jan 2022 09:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202513
IP address blocks: 185.249.148.0/22 maxlen: 24
185.98.17.0/24 maxlen: 24
185.98.19.0/24 maxlen: 24
185.98.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60688255 (0x39e077f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Jan 1 09:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18398f495f1a2339d87a471cedce7f9250c2f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:24:3e:68:4d:4f:6b:09:80:65:e3:1f:85:
ad:bb:fd:61:ba:30:f3:94:52:14:6e:60:63:e7:81:
15:6d:6a:b1:0f:7b:3f:4b:23:3d:46:b7:52:17:f9:
1b:5b:18:84:03:53:33:7a:08:2a:cb:a6:8a:ea:f0:
89:7c:54:00:21:b3:0d:5c:c1:17:cc:f9:48:19:39:
30:72:78:cd:5c:ba:9f:81:b3:4f:f4:e6:c8:e9:a1:
25:74:26:9e:84:b7:f0:f3:e9:c2:d1:0d:4c:77:c5:
80:3c:a5:d4:b8:57:1f:07:14:b6:5c:57:de:e7:42:
7f:26:6e:11:c3:0d:06:9c:70:8f:42:ef:81:87:73:
55:97:f8:84:3c:b0:b0:fd:5c:e4:a6:02:cc:ae:88:
c7:e6:88:9c:00:71:ac:01:85:92:84:27:b3:7c:03:
47:6b:c5:30:07:60:b2:5c:e1:5e:ec:e2:5b:b7:5e:
65:2b:a1:15:4d:70:8b:21:c7:cd:8e:ab:c6:98:33:
c5:3b:6b:15:57:fb:7b:e7:ed:52:50:51:06:02:be:
f3:9c:01:a0:64:ad:9e:52:90:68:6c:2e:1a:68:c5:
8c:6a:32:7c:cc:75:cb:d5:59:07:f5:96:d6:9a:a3:
97:e1:e0:41:ae:40:c2:46:08:a7:41:fe:ce:27:fb:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:8F:49:5F:1A:23:39:D8:7A:47:1C:ED:CE:7F:92:50:C2:F8:6B
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/GDmPSV8aIznYekcc7c5_klDC-Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.17.0-185.98.19.255
185.249.148.0/22
Signature Algorithm: sha256WithRSAEncryption
94:39:ef:a1:b1:6f:1b:7f:79:20:41:2b:51:ae:db:d1:4a:aa:
a2:4e:77:62:cb:e2:82:27:2c:f8:59:73:ac:da:12:88:21:08:
1c:0c:a8:10:8c:6c:60:6e:bd:06:54:f6:6d:96:aa:10:59:28:
b6:9f:0f:d8:35:e1:a9:bb:4e:ba:2b:e7:a9:21:89:93:d9:7b:
66:1f:fa:f1:13:84:3c:ef:8f:b9:1d:20:22:2f:28:62:c7:9e:
fd:cb:2c:eb:9a:9d:77:16:9e:08:54:c3:b5:2e:c1:61:a3:ae:
f7:01:79:5b:63:f6:d6:ef:fa:43:7d:b4:70:e3:ea:6d:89:dd:
21:43:6b:80:32:e5:06:ab:dc:c5:4b:19:fd:50:03:9c:d3:29:
73:5b:14:71:d2:84:24:54:5b:3f:c5:41:3b:10:57:4f:cd:94:
e8:dd:ae:a1:a2:f2:31:70:72:09:13:96:16:99:41:42:5b:f3:
61:10:2f:b7:67:b6:62:6e:cc:e8:ed:0f:42:db:d9:63:7a:80:
f6:da:a4:1b:7c:36:f7:11:af:e5:d4:be:8d:14:f8:e8:7b:2f:
8c:2a:8f:4a:9b:f6:47:25:cb:b5:38:55:0d:77:91:42:c9:e7:
b0:dc:35:9d:74:f0:e4:e7:78:27:fc:f5:34:bb:bd:28:26:7a:
26:bf:6d:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEA54HfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDg1MDYxMzYxYjE5ZjIxMmVmZTkwYzJkOGNmM2VlZTYxN2YyMGU1MB4XDTIyMDEw
MTA5MDEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTgzOThmNDk1ZjFh
MjMzOWQ4N2E0NzFjZWRjZTdmOTI1MGMyZjg2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJe5JD5oTU9rCYBl4x+Frbv9Ybow85RSFG5gY+eBFW1qsQ97
P0sjPUa3Uhf5G1sYhANTM3oIKsumiurwiXxUACGzDVzBF8z5SBk5MHJ4zVy6n4Gz
T/TmyOmhJXQmnoS38PPpwtENTHfFgDyl1LhXHwcUtlxX3udCfyZuEcMNBpxwj0Lv
gYdzVZf4hDywsP1c5KYCzK6Ix+aInABxrAGFkoQns3wDR2vFMAdgslzhXuziW7de
ZSuhFU1wiyHHzY6rxpgzxTtrFVf7e+ftUlBRBgK+85wBoGStnlKQaGwuGmjFjGoy
fMx1y9VZB/WW1pqjl+HgQa5AwkYIp0H+zif76uUCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQYOY9JXxojOdh6Rxztzn+SUML4azAfBgNVHSMEGDAWgBRthQYTYbGfIS7+
kMLYzz7uYX8g5TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JZVUdFMkd4bnlFdV9wREMyTTgtN21GX0lPVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvN2U3YjhiLTc5ZTAtNGY1MS1iODY2LTY3YWQ2MGQzODZkZC8x
L0dEbVBTVjhhSXpuWWVrY2M3YzVfa2xEQy1Hcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
N2U3YjhiLTc5ZTAtNGY1MS1iODY2LTY3YWQ2MGQzODZkZC8xL2JZVUdFMkd4bnlF
dV9wREMyTTgtN21GX0lPVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQAuWIRAwQCuWIQAwQCufmUMA0G
CSqGSIb3DQEBCwUAA4IBAQCUOe+hsW8bf3kgQStRrtvRSqqiTndiy+KCJyz4WXOs
2hKIIQgcDKgQjGxgbr0GVPZtlqoQWSi2nw/YNeGpu066K+epIYmT2XtmH/rxE4Q8
74+5HSAiLyhix579yyzrmp13Fp4IVMO1LsFho673AXlbY/bW7/pDfbRw4+ptid0h
Q2uAMuUGq9zFSxn9UAOc0ylzWxRx0oQkVFs/xUE7EFdPzZTo3a6hovIxcHIJE5YW
mUFCW/NhEC+3Z7Zibszo7Q9C29ljeoD22qQbfDb3Ea/l1L6NFPjoey+MKo9Km/ZH
Jcu1OFUNd5FCyeew3DWddPDk53gn/PU0u70oJnomv23X
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:36:33 2025 by rpki-client