Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/GpWVBVr9SZeG3SuWVJWweM6v6Qg.roa
File: GpWVBVr9SZeG3SuWVJWweM6v6Qg.roa (raw, json)
Hash identifier: KNaJ2JbTkJmahDxLHtubOU1c0xa4hunwWG9C7jQaUgM=
Subject key identifier: 1A:95:95:05:5A:FD:49:97:86:DD:2B:96:54:95:B0:78:CE:AF:E9:08
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 01856E5D5A6AF8D21D8F4848908B62C6A398
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/GpWVBVr9SZeG3SuWVJWweM6v6Qg.roa
Signing time: Sun 01 Jan 2023 17:24:49 +0000
ROA not before: Sun 01 Jan 2023 17:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 81.92.217.0/24 maxlen: 24
81.92.219.0/24 maxlen: 24
81.92.218.0/24 maxlen: 24
81.92.218.0/23 maxlen: 23
94.46.184.0/22 maxlen: 22
81.92.192.0/22 maxlen: 22
185.109.168.0/22 maxlen: 22
94.46.244.0/22 maxlen: 22
91.109.112.0/21 maxlen: 21
94.46.192.0/22 maxlen: 22
94.46.207.0/24 maxlen: 24
94.46.220.0/22 maxlen: 22
185.99.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:5a:6a:f8:d2:1d:8f:48:48:90:8b:62:c6:a3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Jan 1 17:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a9595055afd499786dd2b965495b078ceafe908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:6d:c0:55:1b:5c:14:9c:13:58:44:ef:5c:
8d:6c:26:c4:c9:48:cd:81:3a:17:6d:73:61:39:37:
d6:49:3d:95:53:5b:ea:78:15:ef:37:87:12:e6:52:
26:ab:e5:4a:fe:23:4f:66:31:a9:0c:73:58:c6:f4:
e4:8e:a5:85:13:09:d3:cb:85:65:fa:5c:53:96:7a:
a9:23:52:04:cb:fb:91:b2:a6:5b:6f:6f:11:9b:9a:
9b:52:26:19:00:d7:a3:bd:59:94:f6:b8:83:ef:e8:
d6:75:c5:d8:7f:0e:68:3e:2b:7b:00:43:18:01:73:
57:91:25:30:0d:5f:6f:d5:00:a5:88:79:63:a6:d0:
27:47:d2:fa:f3:37:66:60:2e:7c:94:b6:b6:a7:71:
cb:59:15:1e:c0:92:08:c1:04:f3:99:f2:d9:06:9a:
81:fd:5a:78:e8:95:13:05:e2:41:27:72:7f:f6:55:
72:a6:82:c1:08:ae:ff:f5:bf:f4:bb:1e:ad:12:5f:
97:45:b7:f8:d7:be:51:4a:90:11:71:37:6a:41:6c:
b3:9a:78:c9:40:fb:fb:2e:16:ef:fc:da:b1:82:53:
ac:b6:3c:ac:be:76:9f:8d:2a:5a:a4:2c:49:0e:50:
f8:8f:a3:b6:97:45:9e:f4:e4:13:8c:d4:95:32:89:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:95:95:05:5A:FD:49:97:86:DD:2B:96:54:95:B0:78:CE:AF:E9:08
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/GpWVBVr9SZeG3SuWVJWweM6v6Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.192.0/22
81.92.217.0-81.92.219.255
91.109.112.0/21
94.46.184.0/22
94.46.192.0/22
94.46.207.0/24
94.46.220.0/22
94.46.244.0/22
185.99.252.0/22
185.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:6d:82:f8:0d:51:42:07:d1:59:e6:62:5e:3d:29:af:a8:ff:
f9:98:dc:91:04:5c:6c:03:de:cb:9a:dc:ef:4b:d3:05:4f:e2:
8c:c3:ed:f6:4a:22:ac:42:07:ad:dd:d2:22:b2:be:26:c5:c5:
a9:b8:3f:01:da:71:1e:4b:5f:c6:2d:74:cc:0e:79:52:8f:fc:
1d:da:66:c4:2e:47:8e:25:ea:a2:07:ca:81:b9:55:91:f8:c4:
00:c1:16:ba:30:13:81:0b:9f:b2:97:de:cd:50:d7:52:2a:a1:
c6:5a:28:ab:93:f9:bf:a1:80:98:90:37:91:64:1b:d8:75:a6:
0e:e2:e3:72:4c:42:23:36:e4:07:65:aa:70:e2:98:53:ff:d4:
d5:f3:cf:95:89:9c:af:cd:04:16:c3:43:82:38:11:6f:9f:28:
39:a9:fa:05:2d:ff:6d:09:4e:1a:98:fa:7c:3e:fb:59:4d:4a:
09:73:11:51:8d:8d:e0:93:e0:4d:2f:ce:11:2e:af:5b:00:fa:
07:f2:96:52:60:d3:80:6b:8b:06:a3:8c:7e:93:69:c0:7b:4c:
13:19:91:0d:15:ef:9c:7b:f8:72:94:90:d2:53:95:43:25:65:
95:57:29:b2:db:d6:6f:6c:fa:f3:67:12:e3:3c:1b:c4:3a:7e:
ad:aa:a2:bd
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYVuXVpq+NIdj0hIkItixqOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Zjg3Y2Y0YTE1YjllNzgyMjQ1NWIzYWE4YWYwYjVlZDNh
Mjk5ZjcwHhcNMjMwMTAxMTcyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTk1OTUwNTVhZmQ0OTk3ODZkZDJiOTY1NDk1YjA3OGNlYWZlOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQptwFUbXBScE1hE71yNbCbEyUjN
gToXbXNhOTfWST2VU1vqeBXvN4cS5lImq+VK/iNPZjGpDHNYxvTkjqWFEwnTy4Vl
+lxTlnqpI1IEy/uRsqZbb28Rm5qbUiYZANejvVmU9riD7+jWdcXYfw5oPit7AEMY
AXNXkSUwDV9v1QCliHljptAnR9L68zdmYC58lLa2p3HLWRUewJIIwQTzmfLZBpqB
/Vp46JUTBeJBJ3J/9lVypoLBCK7/9b/0ux6tEl+XRbf4175RSpARcTdqQWyzmnjJ
QPv7Lhbv/NqxglOstjysvnafjSpapCxJDlD4j6O2l0We9OQTjNSVMomTtwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFBqVlQVa/UmXht0rllSVsHjOr+kIMB8GA1UdIwQY
MBaAFKb4fPShW554IkVbOqivC17Topn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yODliMWQtMDhkZC00ZDUzLWIxMmQt
N2Q0MDI4YTFiZjU5LzEvR3BXVkJWcjlTWmVHM1N1V1ZKV3dlTTZ2NlFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yODliMWQtMDhkZC00ZDUzLWIxMmQtN2Q0MDI4YTFiZjU5
LzEvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQCUVzAMAwD
BABRXNkDBAJRXNgDBANbbXADBAJeLrgDBAJeLsADBABeLs8DBAJeLtwDBAJeLvQD
BAK5Y/wDBAK5bagwDQYJKoZIhvcNAQELBQADggEBAC5tgvgNUUIH0VnmYl49Ka+o
//mY3JEEXGwD3sua3O9L0wVP4ozD7fZKIqxCB63d0iKyvibFxam4PwHacR5LX8Yt
dMwOeVKP/B3aZsQuR44l6qIHyoG5VZH4xADBFrowE4ELn7KX3s1Q11IqocZaKKuT
+b+hgJiQN5FkG9h1pg7i43JMQiM25AdlqnDimFP/1NXzz5WJnK/NBBbDQ4I4EW+f
KDmp+gUt/20JThqY+nw++1lNSglzEVGNjeCT4E0vzhEur1sA+gfyllJg04Briwaj
jH6TacB7TBMZkQ0V75x7+HKUkNJTlUMlZZVXKbLb1m9s+vNnEuM8G8Q6fq2qor0=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:50:07 2025 by rpki-client