Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/G_FKaND2nzTuGNIh0zlLAct1L3k.roa
File: G_FKaND2nzTuGNIh0zlLAct1L3k.roa (raw, json)
Hash identifier: 1xb+ZOFOqeQEPcQQslzuXeie/DXrSeBDlmh5VMx872Y=
Subject key identifier: 1B:F1:4A:68:D0:F6:9F:34:EE:18:D2:21:D3:39:4B:01:CB:75:2F:79
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 01850BAA65129D93C12C0B8A1F14983F1C91
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/G_FKaND2nzTuGNIh0zlLAct1L3k.roa
Signing time: Tue 13 Dec 2022 13:26:34 +0000
ROA not before: Tue 13 Dec 2022 13:26:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212318
IP address blocks: 178.57.66.0/24 maxlen: 24
178.57.65.0/24 maxlen: 24
178.57.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:aa:65:12:9d:93:c1:2c:0b:8a:1f:14:98:3f:1c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Dec 13 13:26:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bf14a68d0f69f34ee18d221d3394b01cb752f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:22:32:00:fb:d7:8d:2a:a2:81:17:55:4b:
11:ca:54:f5:44:58:12:12:b3:af:08:c5:96:bd:33:
3d:e6:c7:12:6c:90:ce:c9:5f:3b:b3:cc:86:d2:22:
1c:94:f6:a5:84:20:32:0e:a8:7d:ae:25:a3:18:3f:
1e:04:dd:ff:93:2d:4e:32:b5:fe:c9:2c:0d:aa:98:
ff:a8:c9:f3:c1:8e:7b:8b:f9:cc:be:86:fb:fd:8f:
40:36:86:4a:74:54:87:f5:84:85:68:b8:68:0a:81:
50:aa:18:76:87:2b:0d:12:d8:f0:d0:f1:92:e8:37:
11:3c:43:98:57:d1:e8:ec:23:67:0e:49:1f:12:58:
f2:91:ad:0c:56:ef:5e:bc:38:5d:4d:e7:f1:c3:c7:
05:d9:4c:59:65:60:e0:b2:0f:b8:6f:0b:29:9d:d1:
5f:c7:7c:3e:a4:e5:85:73:87:53:31:80:08:ac:f7:
d8:7c:c9:0d:23:2f:d7:1d:86:40:e8:98:f8:9a:68:
3a:8e:fc:85:f8:94:f7:79:f3:ed:28:fe:71:72:52:
2e:32:67:82:cd:a6:24:25:ba:d9:44:95:2c:81:d0:
57:f0:96:0d:f7:21:63:46:3c:e8:e9:99:a9:d6:d6:
e0:27:82:48:1f:60:fb:98:7a:21:2d:37:3e:ea:b2:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:4A:68:D0:F6:9F:34:EE:18:D2:21:D3:39:4B:01:CB:75:2F:79
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/G_FKaND2nzTuGNIh0zlLAct1L3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.65.0-178.57.67.255
Signature Algorithm: sha256WithRSAEncryption
32:f5:b7:8d:02:ef:30:74:7a:6f:a7:0f:89:54:47:b9:f7:1c:
dd:07:4b:c9:85:b8:42:51:2b:e4:4b:e9:d0:eb:a0:5f:18:cc:
c2:10:58:0a:18:e6:e5:b9:b1:82:f7:3c:d6:97:78:b2:93:d6:
8e:1d:59:b7:03:5a:4a:bb:6b:ba:74:f3:a1:3e:73:68:48:b5:
e0:f5:09:96:b8:ab:44:f3:e3:c9:f3:54:b7:13:0f:ff:79:37:
60:be:a6:2d:34:dd:51:06:24:71:61:aa:49:f8:8c:ac:ec:78:
20:9b:13:f4:f1:87:61:e9:99:bc:05:c2:47:72:ad:8e:de:13:
bb:a4:ba:73:d5:7d:a8:2b:5e:8b:d4:e1:e5:2a:c8:6f:fe:02:
5a:f2:1b:2e:cd:ed:7c:00:2c:e7:87:d7:b5:0a:52:73:af:87:
67:e2:67:28:ec:fc:79:c6:87:cd:c6:bd:cd:ff:46:91:59:1f:
72:d7:a1:0b:ee:9f:22:e6:1e:00:e1:9e:80:29:67:17:b1:de:
81:e5:bc:69:30:47:cb:18:fb:77:e4:e0:9d:37:b7:53:eb:98:
06:a4:24:92:91:2b:0a:f5:67:fc:a8:2f:6e:8f:02:98:74:42:
5d:1c:90:cc:e4:a1:62:56:30:e2:09:92:dd:0a:db:cf:f8:06:
94:86:ee:e5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYULqmUSnZPBLAuKHxSYPxyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk
NWI1NjYwHhcNMjIxMjEzMTMyNjM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmYxNGE2OGQwZjY5ZjM0ZWUxOGQyMjFkMzM5NGIwMWNiNzUyZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSQiMgD7140qooEXVUsRylT1RFgS
ErOvCMWWvTM95scSbJDOyV87s8yG0iIclPalhCAyDqh9riWjGD8eBN3/ky1OMrX+
ySwNqpj/qMnzwY57i/nMvob7/Y9ANoZKdFSH9YSFaLhoCoFQqhh2hysNEtjw0PGS
6DcRPEOYV9Ho7CNnDkkfEljyka0MVu9evDhdTefxw8cF2UxZZWDgsg+4bwspndFf
x3w+pOWFc4dTMYAIrPfYfMkNIy/XHYZA6Jj4mmg6jvyF+JT3efPtKP5xclIuMmeC
zaYkJbrZRJUsgdBX8JYN9yFjRjzo6Zmp1tbgJ4JIH2D7mHohLTc+6rJuIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBvxSmjQ9p807hjSIdM5SwHLdS95MB8GA1UdIwQY
MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt
OWVhZDgxZGEyZTQ0LzEvR19GS2FORDJuelR1R05JaDB6bExBY3QxTDNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0
LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACyOUED
BAKyOUAwDQYJKoZIhvcNAQELBQADggEBADL1t40C7zB0em+nD4lUR7n3HN0HS8mF
uEJRK+RL6dDroF8YzMIQWAoY5uW5sYL3PNaXeLKT1o4dWbcDWkq7a7p086E+c2hI
teD1CZa4q0Tz48nzVLcTD/95N2C+pi003VEGJHFhqkn4jKzseCCbE/Txh2HpmbwF
wkdyrY7eE7ukunPVfagrXovU4eUqyG/+AlryGy7N7XwALOeH17UKUnOvh2fiZyjs
/HnGh83Gvc3/RpFZH3LXoQvunyLmHgDhnoApZxex3oHlvGkwR8sY+3fk4J03t1Pr
mAakJJKRKwr1Z/yoL26PAph0Ql0ckMzkoWJWMOIJkt0K28/4BpSG7uU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:18 2023 by rpki-client on console-ams.rpki-client.org