Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/gzawnMIELKd9nN67twpiUXT2rOw.roa
File: gzawnMIELKd9nN67twpiUXT2rOw.roa (raw, json)
Hash identifier: vkZMATf7pLpXmYn4/UgNm+JW62SA8UfwSaaxX528Mlo=
Subject key identifier: 83:36:B0:9C:C2:04:2C:A7:7D:9C:DE:BB:B7:0A:62:51:74:F6:AC:EC
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 018C30232FFD3F96AE6C385916112D834867
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/gzawnMIELKd9nN67twpiUXT2rOw.roa
Signing time: Sun 03 Dec 2023 14:44:21 +0000
ROA not before: Sun 03 Dec 2023 14:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209197
IP address blocks: 185.207.30.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:23:2f:fd:3f:96:ae:6c:38:59:16:11:2d:83:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Dec 3 14:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8336b09cc2042ca77d9cdebbb70a625174f6acec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:43:c8:08:d3:c9:66:5b:e4:62:cc:95:d1:6e:
b0:6c:85:64:aa:96:ba:3b:2a:38:50:2b:0f:e7:e6:
93:91:6b:3b:00:72:9a:e6:3f:c4:d5:db:90:7c:c8:
4f:64:c8:28:d2:ec:23:84:88:cb:2e:24:3f:b0:d6:
f1:15:9e:2f:5b:7d:b4:dd:0c:1d:1a:63:46:91:1d:
ca:1f:22:3d:8a:32:35:a8:73:a3:77:2d:45:5a:97:
05:2f:66:27:56:9c:dd:2b:3f:51:e6:c0:2d:4f:b8:
0f:9a:5e:b2:75:1b:da:70:6e:e7:31:54:a1:2a:89:
3b:9f:9c:3b:8e:5b:5a:2e:67:30:0a:a2:2d:39:4e:
45:63:ff:60:0e:d6:fd:e8:a8:30:ff:c6:62:1a:f1:
a0:57:d7:38:22:97:ff:71:c4:0d:7d:f8:4e:8b:2c:
2a:81:d8:5b:66:6a:5e:d3:63:7c:99:3e:08:09:cb:
e7:3c:45:14:7c:2d:8d:c9:be:c6:84:99:27:88:22:
eb:22:55:a4:8a:77:9f:69:57:40:32:2a:4f:ec:bb:
b4:6a:e6:08:42:ac:94:07:32:97:97:5f:73:9d:e1:
f7:ba:22:9c:b4:d2:a6:52:55:b1:9b:5d:e3:23:d8:
5a:99:a9:a1:2d:7c:fd:94:9f:2b:35:1b:dc:68:c1:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:36:B0:9C:C2:04:2C:A7:7D:9C:DE:BB:B7:0A:62:51:74:F6:AC:EC
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/gzawnMIELKd9nN67twpiUXT2rOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:57:33:1c:87:90:9c:c8:fc:d2:9d:28:24:09:71:e8:f4:36:
e9:9d:c8:95:5c:d6:24:be:13:29:75:b9:c0:5e:8d:5d:8e:e5:
6f:e7:43:7e:68:d1:62:47:5d:b0:b7:62:f2:f8:e8:49:2c:35:
44:40:d3:0b:4a:0b:e0:8f:e4:d5:db:81:f9:ac:66:79:43:6b:
c0:4d:1e:39:08:a8:68:01:72:09:22:fa:3f:92:1a:ee:bd:2a:
e6:a5:ea:56:bc:68:00:3f:ea:ba:38:e4:46:58:ea:9b:50:2f:
38:7d:82:f2:0a:9f:5b:4d:e0:f6:98:f6:b8:53:d4:04:00:8b:
a2:af:27:e3:61:17:60:91:60:fd:3f:9b:7d:35:09:72:f1:06:
14:71:b9:ec:c7:37:37:5b:24:57:06:fe:d9:d5:33:1e:33:c7:
71:c2:09:09:6a:ac:03:82:ff:aa:00:da:91:c5:ec:83:85:d2:
4a:ca:b6:20:8f:80:36:29:72:19:56:08:77:d8:fa:a8:06:29:
07:b2:65:42:2a:85:e6:43:cf:80:77:8a:0d:85:04:06:50:3d:
a8:6f:0c:f6:99:6d:4d:73:6b:f5:3e:45:58:d5:e4:51:64:00:
35:22:a5:70:e7:55:ea:80:84:46:5b:49:a9:17:2b:6c:d2:5f:
3e:2b:80:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwwIy/9P5aubDhZFhEtg0hnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTc1ZWY5MDM2ZjVjMTQzZTU3ZGZhZmJjOTJjMDI1NWMz
MTU5YmEwHhcNMjMxMjAzMTQ0NDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzM2YjA5Y2MyMDQyY2E3N2Q5Y2RlYmJiNzBhNjI1MTc0ZjZhY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkPICNPJZlvkYsyV0W6wbIVkqpa6
Oyo4UCsP5+aTkWs7AHKa5j/E1duQfMhPZMgo0uwjhIjLLiQ/sNbxFZ4vW3203Qwd
GmNGkR3KHyI9ijI1qHOjdy1FWpcFL2YnVpzdKz9R5sAtT7gPml6ydRvacG7nMVSh
Kok7n5w7jltaLmcwCqItOU5FY/9gDtb96Kgw/8ZiGvGgV9c4Ipf/ccQNffhOiywq
gdhbZmpe02N8mT4ICcvnPEUUfC2Nyb7GhJkniCLrIlWkinefaVdAMipP7Lu0auYI
QqyUBzKXl19zneH3uiKctNKmUlWxm13jI9hamamhLXz9lJ8rNRvcaMGxQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIM2sJzCBCynfZzeu7cKYlF09qzsMB8GA1UdIwQY
MBaAFOKnXvkDb1wUPlffr7ySwCVcMVm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTkt
ZjkwODUwZTc0Mjk2LzEvZ3phd25NSUVMS2Q5bk42N3R3cGlVWFQyck93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTktZjkwODUwZTc0Mjk2
LzEvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuc8eMA0G
CSqGSIb3DQEBCwUAA4IBAQCOVzMch5CcyPzSnSgkCXHo9DbpnciVXNYkvhMpdbnA
Xo1djuVv50N+aNFiR12wt2Ly+OhJLDVEQNMLSgvgj+TV24H5rGZ5Q2vATR45CKho
AXIJIvo/khruvSrmpepWvGgAP+q6OORGWOqbUC84fYLyCp9bTeD2mPa4U9QEAIui
ryfjYRdgkWD9P5t9NQly8QYUcbnsxzc3WyRXBv7Z1TMeM8dxwgkJaqwDgv+qANqR
xeyDhdJKyrYgj4A2KXIZVgh32PqoBikHsmVCKoXmQ8+Ad4oNhQQGUD2obwz2mW1N
c2v1PkVY1eRRZAA1IqVw51XqgIRGW0mpFyts0l8+K4BQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:44 2025 by rpki-client