Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/g6GGkn6sJtXnTbbwKzf4nTs_-XM.roa
File: g6GGkn6sJtXnTbbwKzf4nTs_-XM.roa (raw, json)
Hash identifier: x6NUI82BQ2X3Es9J6WYy8Y9dUMjnQLdjvMlY3TppypY=
Subject key identifier: 83:A1:86:92:7E:AC:26:D5:E7:4D:B6:F0:2B:37:F8:9D:3B:3F:F9:73
Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial: 01831732B8E992B50B3A2CCCE4789A9E75F1
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/g6GGkn6sJtXnTbbwKzf4nTs_-XM.roa
Signing time: Wed 07 Sep 2022 09:05:43 +0000
ROA not before: Wed 07 Sep 2022 09:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211253
IP address blocks: 185.87.169.0/24 maxlen: 24
185.87.168.0/24 maxlen: 24
185.87.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:32:b8:e9:92:b5:0b:3a:2c:cc:e4:78:9a:9e:75:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Validity
Not Before: Sep 7 09:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83a186927eac26d5e74db6f02b37f89d3b3ff973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:48:62:22:51:64:9a:f7:10:4e:1e:c9:19:
ec:77:a8:ad:8b:68:2c:7f:3f:4e:ff:51:bb:5b:30:
3e:dd:0e:0a:12:53:ab:8a:cf:54:66:85:cc:f4:5a:
8e:0b:e3:24:9d:3f:8b:a3:d2:c6:f9:76:b5:2b:8e:
c8:c7:30:96:1a:dc:18:11:b4:d1:08:af:05:e2:0c:
ee:dc:62:c3:f3:31:8a:2a:8f:1d:ff:e7:88:15:d8:
66:6c:f1:aa:65:86:02:74:56:60:48:33:ce:98:c7:
6e:08:44:62:b3:5a:55:0b:17:ca:af:30:a3:5a:54:
a5:ab:fb:0c:83:c6:c2:70:24:57:0b:9e:9e:cb:f2:
02:47:4c:b3:02:bc:1f:96:98:70:ba:62:5d:c9:bd:
8f:88:89:30:63:f4:7c:86:af:9f:16:d8:c8:e0:a5:
9d:94:5c:e6:d7:b8:32:57:4d:a5:4a:43:2d:8a:1e:
95:fc:10:c6:58:c2:b7:3a:e5:49:54:64:7a:79:b5:
ba:91:d5:d9:88:4d:74:83:73:44:31:b1:c4:cd:5f:
7b:8d:f2:52:c1:f8:7e:5e:5d:5c:d4:7f:91:db:4c:
1c:d2:2b:da:48:17:18:1a:56:e3:86:83:7d:06:43:
72:52:78:b5:a4:64:29:c2:14:3d:8b:19:e6:04:c0:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A1:86:92:7E:AC:26:D5:E7:4D:B6:F0:2B:37:F8:9D:3B:3F:F9:73
X509v3 Authority Key Identifier:
keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/g6GGkn6sJtXnTbbwKzf4nTs_-XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.168.0-185.87.170.255
Signature Algorithm: sha256WithRSAEncryption
32:05:cb:0e:42:42:a6:e0:4f:a3:ee:92:5b:f3:c9:6e:ed:e8:
06:59:4b:be:12:96:ba:82:65:bb:ff:c2:22:93:51:3e:b3:4a:
b8:b0:08:24:1c:64:b9:f9:15:d3:9f:79:25:ec:9a:9f:cd:9d:
43:17:7a:23:4d:67:82:0e:f5:4b:48:5b:4e:4e:d3:55:40:14:
c4:97:91:62:ba:c8:a3:6b:64:08:69:81:53:22:e8:0b:ca:c6:
4a:d7:a2:3e:53:83:4c:b4:9a:5f:53:31:1a:eb:cc:2d:d1:22:
9f:e7:64:74:c4:a2:15:43:ea:b5:41:ac:7a:7f:f0:85:fb:84:
cf:ab:cc:18:5c:89:19:fb:69:62:7d:36:9b:99:4f:2a:6c:10:
5d:03:45:98:98:34:43:76:67:3b:09:e6:48:e9:b1:8d:7f:78:
05:19:10:1b:27:7f:71:2a:6a:80:31:55:e4:d2:07:18:40:32:
11:6a:27:19:b1:c9:b4:9e:84:44:2d:34:4f:59:d6:19:d4:aa:
51:31:58:13:5a:5b:3b:75:1b:85:01:d0:48:94:4b:02:f7:48:
d9:a0:a2:9a:15:e7:4a:80:de:64:43:a1:4e:bd:9a:f8:e7:a0:
61:1a:1a:22:e5:f5:1d:ba:9a:b4:52:5a:c5:da:98:99:b7:30:
6a:c0:3d:e8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYMXMrjpkrULOizM5HiannXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm
MDQ1OWIwHhcNMjIwOTA3MDkwNTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2ExODY5MjdlYWMyNmQ1ZTc0ZGI2ZjAyYjM3Zjg5ZDNiM2ZmOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0xIYiJRZJr3EE4eyRnsd6iti2gs
fz9O/1G7WzA+3Q4KElOris9UZoXM9FqOC+MknT+Lo9LG+Xa1K47IxzCWGtwYEbTR
CK8F4gzu3GLD8zGKKo8d/+eIFdhmbPGqZYYCdFZgSDPOmMduCERis1pVCxfKrzCj
WlSlq/sMg8bCcCRXC56ey/ICR0yzArwflphwumJdyb2PiIkwY/R8hq+fFtjI4KWd
lFzm17gyV02lSkMtih6V/BDGWMK3OuVJVGR6ebW6kdXZiE10g3NEMbHEzV97jfJS
wfh+Xl1c1H+R20wc0ivaSBcYGlbjhoN9BkNyUni1pGQpwhQ9ixnmBMBO2QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIOhhpJ+rCbV50228Cs3+J07P/lzMB8GA1UdIwQY
MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct
MjYwYzM3N2EzMTRhLzEvZzZHR2tuNnNKdFhuVGJid0t6ZjRuVHNfLVhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh
LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5V6gD
BAC5V6owDQYJKoZIhvcNAQELBQADggEBADIFyw5CQqbgT6PuklvzyW7t6AZZS74S
lrqCZbv/wiKTUT6zSriwCCQcZLn5FdOfeSXsmp/NnUMXeiNNZ4IO9UtIW05O01VA
FMSXkWK6yKNrZAhpgVMi6AvKxkrXoj5Tg0y0ml9TMRrrzC3RIp/nZHTEohVD6rVB
rHp/8IX7hM+rzBhciRn7aWJ9NpuZTypsEF0DRZiYNEN2ZzsJ5kjpsY1/eAUZEBsn
f3EqaoAxVeTSBxhAMhFqJxmxybSehEQtNE9Z1hnUqlExWBNaWzt1G4UB0EiUSwL3
SNmgopoV50qA3mRDoU69mvjnoGEaGiLl9R26mrRSWsXamJm3MGrAPeg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:15 2024 by rpki-client on console-ams.rpki-client.org