Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G0-Nb0DMuxRO0gj6CcMMxhe57ks.roa
File: G0-Nb0DMuxRO0gj6CcMMxhe57ks.roa (raw, json)
Hash identifier: GQJncl6B73iCR5PeO14mv7BmpTHazNnm6NWfesk+Xb8=
Subject key identifier: 1B:4F:8D:6F:40:CC:BB:14:4E:D2:08:FA:09:C3:0C:C6:17:B9:EE:4B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03CE3279
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G0-Nb0DMuxRO0gj6CcMMxhe57ks.roa
Signing time: Sat 01 Jan 2022 13:03:58 +0000
ROA not before: Sat 01 Jan 2022 13:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.244.235.0/24 maxlen: 24
185.227.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63844985 (0x3ce3279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b4f8d6f40ccbb144ed208fa09c30cc617b9ee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:d5:9f:2d:4e:cd:3d:e8:72:cd:96:b3:81:
4a:eb:a0:e7:8d:10:8b:9c:ee:aa:5a:1c:9d:40:22:
68:67:b6:a0:21:f1:47:9a:2f:a8:66:ef:ad:69:b7:
33:f3:38:dd:d9:01:0a:1d:0a:04:33:1d:c9:45:1d:
a5:c0:f7:b9:42:42:a7:dd:71:b0:62:f7:e3:36:55:
20:95:3f:4a:33:de:c0:5f:87:bf:4f:4c:4c:60:bb:
6f:80:f1:8c:2b:da:27:d2:03:f0:4a:5b:3b:cb:79:
14:57:c1:f6:0b:ca:a2:d8:95:51:3e:4b:de:d9:6e:
f8:29:35:6a:05:cc:b8:e5:56:ec:d0:87:16:83:81:
ee:cb:5f:e7:d0:84:2f:d8:f1:28:ae:b7:ff:b4:f1:
52:e9:ea:8f:9e:2c:f3:19:a9:58:a8:d1:32:f5:cb:
9b:50:dc:d9:a4:4d:05:d2:6c:19:56:e4:18:fb:21:
d4:d0:e1:14:44:5d:58:33:ed:e1:fc:41:cd:d4:2b:
17:f6:7f:b4:cf:d9:c6:db:d0:e1:f4:c9:18:b8:3a:
ac:fb:83:5a:ae:1e:3d:93:7a:c1:50:38:54:0f:b1:
95:f1:ab:e9:07:65:b7:2c:2d:62:49:a0:cc:61:be:
9e:bf:16:60:d0:cb:14:ad:c8:62:59:4d:70:db:5b:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4F:8D:6F:40:CC:BB:14:4E:D2:08:FA:09:C3:0C:C6:17:B9:EE:4B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G0-Nb0DMuxRO0gj6CcMMxhe57ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.102.0/24
185.244.235.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:52:3b:74:ac:ec:b2:00:7f:c0:d5:75:8f:8a:10:7d:e9:0d:
1b:6a:4b:9b:0d:b1:5f:e9:ce:4e:9b:3b:5d:db:ac:7c:3b:d0:
cb:49:73:f7:f4:42:8c:9e:e0:9f:f4:fd:9d:6b:19:b8:1d:be:
e5:de:31:7b:03:78:49:04:53:91:ab:a2:b6:a9:67:1b:bb:6d:
bc:91:fd:12:3c:52:fc:bf:b0:be:c6:5b:7c:e7:b1:9f:b6:83:
23:0d:a8:10:11:a3:ab:ae:25:22:fe:79:88:8a:62:27:47:c4:
81:32:bc:4a:76:21:2b:79:c4:7f:1a:96:19:6e:69:79:37:40:
1f:fe:da:c9:37:87:3f:5a:af:2f:e1:ba:7b:ce:df:36:5a:d5:
4e:aa:25:2f:46:8d:a6:4a:74:0a:cc:f8:e4:b2:ba:e8:cc:0f:
77:61:a8:16:71:85:45:58:23:38:f9:eb:08:95:56:51:aa:cf:
16:58:50:65:5f:74:46:ba:56:89:b2:43:68:ec:96:32:17:76:
14:4c:05:09:a4:e6:88:36:26:22:77:34:01:a7:f1:63:3f:9f:
47:3a:64:de:0b:19:62:e8:01:99:31:ca:2a:87:c0:f9:c9:d5:
7e:db:d9:a1:be:0c:04:af:fa:ea:fa:78:25:f4:b6:f3:f6:7d:
3b:6a:f4:e5
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA84yeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDEw
MTEzMDM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWI0ZjhkNmY0MGNj
YmIxNDRlZDIwOGZhMDljMzBjYzYxN2I5ZWU0YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI5h1Z8tTs096HLNlrOBSuug540Qi5zuqlocnUAiaGe2oCHx
R5ovqGbvrWm3M/M43dkBCh0KBDMdyUUdpcD3uUJCp91xsGL34zZVIJU/SjPewF+H
v09MTGC7b4DxjCvaJ9ID8EpbO8t5FFfB9gvKotiVUT5L3tlu+Ck1agXMuOVW7NCH
FoOB7stf59CEL9jxKK63/7TxUunqj54s8xmpWKjRMvXLm1Dc2aRNBdJsGVbkGPsh
1NDhFERdWDPt4fxBzdQrF/Z/tM/ZxtvQ4fTJGLg6rPuDWq4ePZN6wVA4VA+xlfGr
6QdltywtYkmgzGG+nr8WYNDLFK3IYllNcNtb/E0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQbT41vQMy7FE7SCPoJwwzGF7nuSzAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
L0cwLU5iMERNdXhSTzBnajZDY01NeGhlNTdrcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALnjZgMEALn06zANBgkqhkiG9w0B
AQsFAAOCAQEAy1I7dKzssgB/wNV1j4oQfekNG2pLmw2xX+nOTps7XdusfDvQy0lz
9/RCjJ7gn/T9nWsZuB2+5d4xewN4SQRTkauitqlnG7ttvJH9EjxS/L+wvsZbfOex
n7aDIw2oEBGjq64lIv55iIpiJ0fEgTK8SnYhK3nEfxqWGW5peTdAH/7ayTeHP1qv
L+G6e87fNlrVTqolL0aNpkp0Csz45LK66MwPd2GoFnGFRVgjOPnrCJVWUarPFlhQ
ZV90RrpWibJDaOyWMhd2FEwFCaTmiDYmInc0AafxYz+fRzpk3gsZYugBmTHKKofA
+cnVftvZob4MBK/66vp4JfS28/Z9O2r05Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org