Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/GCiIbeWywJeZ4S7SFObjzC98qXQ.roa
File: GCiIbeWywJeZ4S7SFObjzC98qXQ.roa (raw, json)
Hash identifier: HZOrTuHOhkMIJJmIjTcSIkXJRVFbJZQxEqtwSSnR0Gs=
Subject key identifier: 18:28:88:6D:E5:B2:C0:97:99:E1:2E:D2:14:E6:E3:CC:2F:7C:A9:74
Certificate issuer: /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Certificate serial: 0F6516AF
Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/GCiIbeWywJeZ4S7SFObjzC98qXQ.roa
Signing time: Sat 01 Jan 2022 09:02:11 +0000
ROA not before: Sat 01 Jan 2022 09:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35311
IP address blocks: 88.132.128.0/19 maxlen: 19
87.242.0.0/18 maxlen: 18
88.132.64.0/21 maxlen: 21
88.132.72.0/21 maxlen: 21
185.145.204.0/22 maxlen: 22
88.132.80.0/21 maxlen: 21
88.132.88.0/21 maxlen: 21
88.132.96.0/19 maxlen: 19
88.132.0.0/19 maxlen: 19
88.132.32.0/19 maxlen: 19
88.132.160.0/19 maxlen: 19
88.132.192.0/20 maxlen: 20
2a02:808::/29 maxlen: 29
2a02:808::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258283183 (0xf6516af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Validity
Not Before: Jan 1 09:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1828886de5b2c09799e12ed214e6e3cc2f7ca974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:08:0e:9f:54:46:b7:d2:ee:e4:fa:3e:93:
55:e4:92:ee:05:5d:b0:d3:70:de:e4:04:e4:66:48:
71:be:1e:81:58:a4:d3:27:ff:81:af:33:d8:d1:a0:
09:65:72:27:0e:52:ac:5a:72:1d:b2:7f:0f:b6:13:
1b:2d:68:a7:a4:36:00:8f:f2:48:ed:00:22:69:70:
a3:60:1c:9e:03:a8:e6:e9:52:d5:36:b8:fd:ac:ca:
13:27:04:54:92:ec:c4:b2:83:4f:5b:ae:66:41:2f:
92:fc:89:cb:da:2f:8a:57:79:8b:3f:ae:7f:77:99:
63:1c:d2:00:07:b1:ee:60:82:35:34:84:25:a7:b6:
46:32:36:85:79:b4:f8:02:ea:c5:b4:9e:38:21:69:
32:47:2e:5f:f2:84:be:0d:44:d2:ef:55:23:14:72:
a0:53:04:b9:10:2e:a0:b7:3b:22:d6:16:b4:8f:ad:
7c:d1:b6:a6:7c:6e:21:e6:4a:9c:4c:a8:70:d1:ee:
f3:68:3f:74:58:13:19:b9:49:a1:ca:27:c6:9b:05:
51:16:60:a2:50:ba:77:4a:4c:ca:11:e2:c7:f1:70:
ff:c3:d7:49:2b:06:27:24:7b:a7:f5:d3:85:f8:37:
29:71:2f:e0:4f:db:f9:0f:f6:5b:2a:57:92:21:17:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:88:6D:E5:B2:C0:97:99:E1:2E:D2:14:E6:E3:CC:2F:7C:A9:74
X509v3 Authority Key Identifier:
keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/GCiIbeWywJeZ4S7SFObjzC98qXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.242.0.0/18
88.132.0.0-88.132.207.255
185.145.204.0/22
IPv6:
2a02:808::/29
Signature Algorithm: sha256WithRSAEncryption
08:20:e4:d9:09:28:dd:9f:33:d4:31:03:86:6f:d8:1f:1c:73:
44:3b:bc:2b:69:1a:78:3a:2a:3e:2e:5d:07:ba:e6:db:c4:5b:
e9:8d:b4:fb:8a:74:ac:21:af:74:c6:1a:cb:4d:c0:b5:11:02:
7d:22:e5:58:12:6c:38:bb:b4:c9:d3:e6:18:59:22:f5:3b:81:
80:4e:26:e2:94:b5:f4:15:28:61:98:d9:19:eb:df:e8:16:67:
08:94:6c:ca:85:99:25:70:92:69:29:cf:1e:3b:8e:0a:e9:21:
dc:55:85:68:07:98:92:75:22:31:8f:e4:93:4a:b8:28:34:b9:
b7:46:7b:7c:9c:2d:2f:e9:4c:6d:ff:4c:ee:48:c6:4f:30:1b:
09:58:a6:d5:94:7c:da:ad:5c:e2:5a:da:ba:51:ef:f6:15:72:
27:af:cd:55:58:a1:6a:2a:9f:d3:4e:11:38:48:cd:c8:91:7e:
3c:ce:17:ec:2d:a4:a8:f5:6b:c5:95:cb:c7:86:b4:69:c9:23:
b7:de:f2:88:04:19:c9:67:df:b8:49:9f:ba:23:ee:63:6f:cc:
6e:90:02:a1:fb:1e:64:71:26:c7:fd:c3:2f:32:95:1f:94:65:
55:d2:4e:a1:fb:c0:4f:18:61:e7:0a:e1:f5:04:42:6c:06:40:
45:2b:09:fd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIED2UWrzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZjJiYTg2ZGY3ODc4ODhmNmY4NTkyYTgwNmE2ZmZlYTMwNDZjMDdhMB4XDTIyMDEw
MTA5MDIxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTgyODg4NmRlNWIy
YzA5Nzk5ZTEyZWQyMTRlNmUzY2MyZjdjYTk3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM2xCA6fVEa30u7k+j6TVeSS7gVdsNNw3uQE5GZIcb4egVik
0yf/ga8z2NGgCWVyJw5SrFpyHbJ/D7YTGy1op6Q2AI/ySO0AImlwo2AcngOo5ulS
1Ta4/azKEycEVJLsxLKDT1uuZkEvkvyJy9ovild5iz+uf3eZYxzSAAex7mCCNTSE
Jae2RjI2hXm0+ALqxbSeOCFpMkcuX/KEvg1E0u9VIxRyoFMEuRAuoLc7ItYWtI+t
fNG2pnxuIeZKnEyocNHu82g/dFgTGblJoconxpsFURZgolC6d0pMyhHix/Fw/8PX
SSsGJyR7p/XThfg3KXEv4E/b+Q/2WypXkiEX14ECAwEAAaOCAiswggInMB0GA1Ud
DgQWBBQYKIht5bLAl5nhLtIU5uPML3ypdDAfBgNVHSMEGDAWgBR/K6ht94eIj2+F
kqgGpv/qMEbAejAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Z5dW9iZmVIaUk5dmhaS29CcWJfNmpCR3dIby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvNWU2Nzg2LTYzNzctNDIyNC1iYTA2LWRjNDc2OWVmZjFmNS8x
L0dDaUliZVd5d0plWjRTN1NGT2JqekM5OHFYUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
NWU2Nzg2LTYzNzctNDIyNC1iYTA2LWRjNDc2OWVmZjFmNS8xL2Z5dW9iZmVIaUk5
dmhaS29CcWJfNmpCR3dIby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwHwQCAAEwGQMEBlfyADALAwMCWIQDBARYhMADBAK5
kcwwDQQCAAIwBwMFAyoCCAgwDQYJKoZIhvcNAQELBQADggEBAAgg5NkJKN2fM9Qx
A4Zv2B8cc0Q7vCtpGng6Kj4uXQe65tvEW+mNtPuKdKwhr3TGGstNwLURAn0i5VgS
bDi7tMnT5hhZIvU7gYBOJuKUtfQVKGGY2Rnr3+gWZwiUbMqFmSVwkmkpzx47jgrp
IdxVhWgHmJJ1IjGP5JNKuCg0ubdGe3ycLS/pTG3/TO5Ixk8wGwlYptWUfNqtXOJa
2rpR7/YVcievzVVYoWoqn9NOEThIzciRfjzOF+wtpKj1a8WVy8eGtGnJI7fe8ogE
Gcln37hJn7oj7mNvzG6QAqH7HmRxJsf9wy8ylR+UZVXSTqH7wE8YYecK4fUEQmwG
QEUrCf0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:30 2025 by rpki-client