Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GFZxAVTNgnuGfWQ4YfwzwL413l8.roa
File: GFZxAVTNgnuGfWQ4YfwzwL413l8.roa (raw, json)
Hash identifier: qU+Eh8b18XuKVWfw+vfvAE+IHaJVEps/fJ89npRnObY=
Subject key identifier: 18:56:71:01:54:CD:82:7B:86:7D:64:38:61:FC:33:C0:BE:35:DE:5F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018380D4BBC74E302C1442F0767673ACF00A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GFZxAVTNgnuGfWQ4YfwzwL413l8.roa
Signing time: Tue 27 Sep 2022 21:22:48 +0000
ROA not before: Tue 27 Sep 2022 21:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 212.69.14.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:80:d4:bb:c7:4e:30:2c:14:42:f0:76:76:73:ac:f0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 27 21:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1856710154cd827b867d643861fc33c0be35de5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:dc:fe:ac:ac:83:da:f6:b1:5a:ff:3a:66:
12:b3:81:d4:6f:f0:4e:64:e7:38:7e:69:00:03:e1:
3b:34:f3:15:e8:c1:3f:f0:97:e7:23:40:d6:e7:e2:
75:0e:12:82:35:5a:17:9e:8a:80:3d:1d:37:6b:7c:
85:65:fe:9b:e1:ee:af:0a:00:84:5f:eb:11:81:39:
5f:9e:23:54:bf:b6:6d:3a:05:13:a5:44:02:bd:9a:
7e:e1:4f:dc:84:0a:35:36:03:9f:6a:cf:db:69:85:
9b:bd:55:e2:50:56:64:a0:3e:97:40:75:f5:79:dd:
10:a2:69:55:bc:a2:fb:63:09:7a:2a:c5:c4:da:fb:
f9:03:1e:9e:aa:7c:ff:04:6c:f6:71:3d:2b:d5:6f:
50:c6:50:48:c5:fd:3d:03:35:89:30:01:e7:91:f7:
22:a3:e8:c1:5a:2e:78:57:08:83:1f:12:fc:5d:3d:
00:9b:03:b5:1e:79:d2:f8:ef:8e:31:dd:d1:e7:4e:
65:36:16:e4:04:d8:71:62:ba:e3:6f:81:b4:5b:04:
03:f2:91:0a:98:71:f7:0e:98:7e:c9:64:36:e5:50:
8c:53:81:67:41:b3:22:4a:c3:2b:be:6c:12:b9:26:
4a:b4:b5:68:8b:b8:d2:88:69:d4:51:e9:8c:3d:7a:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:71:01:54:CD:82:7B:86:7D:64:38:61:FC:33:C0:BE:35:DE:5F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GFZxAVTNgnuGfWQ4YfwzwL413l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:87:50:54:94:5e:b6:05:01:16:84:46:9d:39:55:44:a4:50:
12:2d:11:ee:c9:ea:12:d3:8a:32:24:58:0b:c4:14:82:24:ea:
2f:df:de:b0:95:01:9a:5b:9d:e3:f8:5f:ef:26:29:f8:c3:a0:
61:13:87:d0:c4:59:a9:e8:48:ec:e7:92:92:05:f4:59:de:06:
a0:62:2e:57:7a:a9:c1:2a:23:d0:4c:71:30:a8:a3:85:10:c3:
78:b2:8a:77:4e:25:b8:d5:ba:04:f7:fd:2d:67:1e:3b:f4:ac:
69:e8:6e:13:40:35:67:51:0a:35:98:b1:aa:f9:e7:cd:8f:05:
5e:00:fd:95:21:4e:10:23:96:f9:df:a7:ef:b2:46:2f:c9:a2:
04:0a:09:61:09:53:96:52:7b:57:21:73:27:2b:f7:62:aa:d5:
ba:98:fe:cb:ee:c5:ac:b3:0b:e3:cd:5d:c7:cd:eb:4d:25:58:
6b:82:79:9e:f2:b1:cb:0f:81:cb:19:4f:64:d0:5c:dc:f9:09:
f0:3c:b8:b4:de:17:dd:20:74:8c:12:7b:dd:74:8e:26:6f:68:
47:8a:dd:ce:f5:ce:67:06:af:bd:e4:3f:71:22:2a:5d:f1:83:
6c:7c:04:26:9b:51:5a:1a:a0:6c:04:10:4b:c6:f2:9e:0c:8f:
f6:3f:05:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOA1LvHTjAsFELwdnZzrPAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIwOTI3MjEyMjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODU2NzEwMTU0Y2Q4MjdiODY3ZDY0Mzg2MWZjMzNjMGJlMzVkZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltDc/qysg9r2sVr/OmYSs4HUb/BO
ZOc4fmkAA+E7NPMV6ME/8JfnI0DW5+J1DhKCNVoXnoqAPR03a3yFZf6b4e6vCgCE
X+sRgTlfniNUv7ZtOgUTpUQCvZp+4U/chAo1NgOfas/baYWbvVXiUFZkoD6XQHX1
ed0QomlVvKL7Ywl6KsXE2vv5Ax6eqnz/BGz2cT0r1W9QxlBIxf09AzWJMAHnkfci
o+jBWi54VwiDHxL8XT0AmwO1HnnS+O+OMd3R505lNhbkBNhxYrrjb4G0WwQD8pEK
mHH3Dph+yWQ25VCMU4FnQbMiSsMrvmwSuSZKtLVoi7jSiGnUUemMPXrP7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBhWcQFUzYJ7hn1kOGH8M8C+Nd5fMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvR0ZaeEFWVE5nbnVHZldRNFlmd3p3TDQxM2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXbpFAwQA
1EUOMA0GCSqGSIb3DQEBCwUAA4IBAQCPh1BUlF62BQEWhEadOVVEpFASLRHuyeoS
04oyJFgLxBSCJOov396wlQGaW53j+F/vJin4w6BhE4fQxFmp6Ejs55KSBfRZ3gag
Yi5XeqnBKiPQTHEwqKOFEMN4sop3TiW41boE9/0tZx479Kxp6G4TQDVnUQo1mLGq
+efNjwVeAP2VIU4QI5b536fvskYvyaIECglhCVOWUntXIXMnK/diqtW6mP7L7sWs
swvjzV3HzetNJVhrgnme8rHLD4HLGU9k0Fzc+QnwPLi03hfdIHSMEnvddI4mb2hH
it3O9c5nBq+95D9xIipd8YNsfAQmm1FaGqBsBBBLxvKeDI/2PwX6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org