Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/GgP_EG-I3spdxUSq78_Xw_QalzY.roa
File: GgP_EG-I3spdxUSq78_Xw_QalzY.roa (raw, json)
Hash identifier: 1cLBS15FOrRRIomTkIubknfFydKmET5vpP9Z0q4qjNU=
Subject key identifier: 1A:03:FF:10:6F:88:DE:CA:5D:C5:44:AA:EF:CF:D7:C3:F4:1A:97:36
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 927D08
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/GgP_EG-I3spdxUSq78_Xw_QalzY.roa
Signing time: Sat 01 Jan 2022 01:50:52 +0000
ROA not before: Sat 01 Jan 2022 01:50:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210605
IP address blocks: 185.25.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9600264 (0x927d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 1 01:50:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a03ff106f88deca5dc544aaefcfd7c3f41a9736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:b0:9c:43:7c:b1:30:45:ef:18:82:17:ae:
20:11:f5:0c:00:11:83:66:9d:5b:a2:43:2f:b2:37:
66:50:42:a9:4f:e1:a3:42:eb:45:a8:55:45:ea:a4:
92:37:95:48:44:79:47:9b:98:ef:48:88:95:4e:d2:
0a:d9:52:1d:db:d8:0e:dd:56:ba:6f:56:a4:14:a9:
83:a4:86:b0:ab:25:e7:c0:f8:54:5d:93:bc:05:29:
c0:c0:15:6e:43:cf:b8:73:c9:74:71:84:7a:8e:24:
b9:de:6b:87:1a:4c:39:62:97:34:1f:f0:87:d1:8b:
97:32:02:4a:f9:8e:43:7e:e5:f1:ac:47:a3:18:e5:
c5:d7:f7:de:2b:5e:ca:d5:3a:2f:c7:e6:8e:3a:13:
5e:25:61:fe:4e:11:af:d5:8e:ce:ac:cd:13:c4:e7:
b3:21:67:80:ca:1c:45:24:52:44:b7:30:80:ac:a8:
4f:ec:00:9d:64:1e:42:ad:d0:e6:dc:c8:45:e3:0b:
bd:be:51:cb:f7:0d:f5:80:c9:ef:ed:d6:88:1f:72:
a4:59:3c:ea:83:34:f6:6e:44:3c:aa:6b:21:4c:d5:
81:02:05:0b:61:48:c3:c5:ce:ac:8e:43:90:ae:9e:
de:00:d0:0e:64:79:49:1b:80:06:9c:1b:99:a4:d3:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:FF:10:6F:88:DE:CA:5D:C5:44:AA:EF:CF:D7:C3:F4:1A:97:36
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/GgP_EG-I3spdxUSq78_Xw_QalzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:28:77:3b:49:12:e5:aa:d1:0b:84:6d:2d:c5:43:ed:66:3e:
12:b0:6a:0c:9a:ed:2e:f7:e3:e3:34:73:4e:ff:fd:75:fa:4b:
51:52:6d:a4:e7:48:c8:51:34:62:61:0d:fd:eb:ea:d6:2b:82:
a1:a2:07:4b:f5:56:62:69:77:d5:98:6c:19:39:b0:6c:89:bb:
7c:50:91:ac:ab:87:fe:64:4c:ae:7c:71:94:f9:1d:fb:07:c0:
62:f2:4e:d4:83:c4:35:26:52:56:e1:c4:2d:72:cd:a1:7c:4d:
5a:23:fc:2a:6d:15:08:29:26:c9:b6:e5:ed:05:4b:a7:90:74:
0d:8b:bc:17:ee:1f:f2:2e:4f:11:97:93:64:be:c0:ff:bc:e8:
ed:ee:bf:97:96:d7:e1:78:04:e6:96:78:4a:ee:c0:ac:73:7c:
a4:62:a7:fe:5b:e9:56:84:31:47:39:49:86:85:92:37:c6:3e:
19:05:46:cd:bf:f4:a9:90:17:5b:c8:08:fc:1b:b4:0a:fb:c2:
5d:aa:00:c4:29:b9:79:39:e3:82:f6:18:35:6c:82:e0:d2:1d:
70:01:73:e3:2a:86:c7:0f:b1:a4:d1:94:91:55:43:c0:55:4b:
30:2f:cb:57:3e:b7:ed:aa:77:3e:72:07:b2:f8:67:8c:93:9c:
8e:ae:68:6c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJJ9CDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MWMxNjcyZGJiYmY3MTY1YTZhODNiMzIyN2E3MTE5ZjBkMzFlOGVlMB4XDTIyMDEw
MTAxNTA1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWEwM2ZmMTA2Zjg4
ZGVjYTVkYzU0NGFhZWZjZmQ3YzNmNDFhOTczNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqKsJxDfLEwRe8YgheuIBH1DAARg2adW6JDL7I3ZlBCqU/h
o0LrRahVReqkkjeVSER5R5uY70iIlU7SCtlSHdvYDt1Wum9WpBSpg6SGsKsl58D4
VF2TvAUpwMAVbkPPuHPJdHGEeo4kud5rhxpMOWKXNB/wh9GLlzICSvmOQ37l8axH
oxjlxdf33iteytU6L8fmjjoTXiVh/k4Rr9WOzqzNE8TnsyFngMocRSRSRLcwgKyo
T+wAnWQeQq3Q5tzIReMLvb5Ry/cN9YDJ7+3WiB9ypFk86oM09m5EPKprIUzVgQIF
C2FIw8XOrI5DkK6e3gDQDmR5SRuABpwbmaTTRtMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQaA/8Qb4jeyl3FRKrvz9fD9BqXNjAfBgNVHSMEGDAWgBQhwWctu79xZaao
OzInpxGfDTHo7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ljRm5MYnVfY1dXbXFEc3lKNmNSbncweDZPNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvYzA1ZDRjLTk2ZDMtNGI1Ny1hZTM0LTM0NzdjN2ZjZDRkOS8x
L0dnUF9FRy1JM3NwZHhVU3E3OF9Yd19RYWx6WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
YzA1ZDRjLTk2ZDMtNGI1Ny1hZTM0LTM0NzdjN2ZjZDRkOS8xL0ljRm5MYnVfY1dX
bXFEc3lKNmNSbncweDZPNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkZczANBgkqhkiG9w0BAQsFAAOC
AQEApyh3O0kS5arRC4RtLcVD7WY+ErBqDJrtLvfj4zRzTv/9dfpLUVJtpOdIyFE0
YmEN/evq1iuCoaIHS/VWYml31ZhsGTmwbIm7fFCRrKuH/mRMrnxxlPkd+wfAYvJO
1IPENSZSVuHELXLNoXxNWiP8Km0VCCkmybbl7QVLp5B0DYu8F+4f8i5PEZeTZL7A
/7zo7e6/l5bX4XgE5pZ4Su7ArHN8pGKn/lvpVoQxRzlJhoWSN8Y+GQVGzb/0qZAX
W8gI/Bu0CvvCXaoAxCm5eTnjgvYYNWyC4NIdcAFz4yqGxw+xpNGUkVVDwFVLMC/L
Vz637ap3PnIHsvhnjJOcjq5obA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:40 2023 by rpki-client on console-fra.rpki-client.org