Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gaJyxzbFs0FDUpFRQ_FByoR5eC4.roa
File: gaJyxzbFs0FDUpFRQ_FByoR5eC4.roa (raw, json)
Hash identifier: pi8pDHzRtaHuircl4qtopoiJY8aEfbjSTZyLbrOfM38=
Subject key identifier: 81:A2:72:C7:36:C5:B3:41:43:52:91:51:43:F1:41:CA:84:79:78:2E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1556C110
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gaJyxzbFs0FDUpFRQ_FByoR5eC4.roa
Signing time: Wed 15 Jun 2022 03:05:07 +0000
ROA not before: Wed 15 Jun 2022 03:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.245.0/24 maxlen: 24
185.215.246.0/24 maxlen: 24
5.226.48.0/21 maxlen: 24
46.249.104.0/21 maxlen: 21
185.129.108.0/22 maxlen: 24
46.249.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358007056 (0x1556c110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 15 03:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81a272c736c5b3414352915143f141ca8479782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:c5:2c:85:f5:3e:cb:d2:3e:fb:00:46:05:
5e:a8:f7:47:8a:de:cf:31:9d:61:c1:40:1b:59:89:
0b:11:13:e3:eb:0f:fd:7d:e5:f8:0e:75:fc:45:df:
d1:f9:65:9c:e7:f0:f2:05:ab:6d:bb:a2:49:cd:36:
6b:a2:d4:ff:10:15:c6:40:a4:85:51:68:df:97:e3:
b7:70:56:a8:ad:31:c1:b3:05:53:9f:9d:8d:48:cb:
02:3b:63:f4:5c:37:2c:8f:ae:e3:7c:f6:77:00:66:
c0:f7:26:d7:16:c8:66:8d:e5:ad:a8:5f:31:f9:01:
d5:fd:4b:c4:d6:29:de:35:89:38:45:2c:17:1e:83:
20:b2:3d:b4:27:c4:29:32:da:e6:8e:7e:68:13:00:
84:b9:aa:c3:93:03:99:ef:31:6b:3d:ab:f3:a7:a6:
10:9a:b5:f7:9b:16:3d:92:93:e5:cd:bc:f4:47:17:
6c:42:a8:4f:10:1e:d8:fe:07:5f:c8:3c:ce:d5:58:
8b:8b:5d:de:82:18:ef:2b:6e:46:54:c2:e7:6b:b1:
d9:08:66:d5:e2:a7:1b:bd:ce:51:63:a2:4f:30:db:
e3:c1:55:55:b0:6a:2d:f6:e6:42:f2:3f:73:b1:d7:
51:6b:33:02:c8:28:4c:3d:d9:f8:27:a0:a0:ed:e6:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:72:C7:36:C5:B3:41:43:52:91:51:43:F1:41:CA:84:79:78:2E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gaJyxzbFs0FDUpFRQ_FByoR5eC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.48.0/21
46.249.104.0-46.249.119.255
185.129.108.0/22
185.215.245.0-185.215.246.255
185.220.236.0/22
188.209.155.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:76:a1:5d:15:e2:07:0b:b1:c9:4a:60:da:ce:c4:31:d4:67:
3b:42:db:8c:1a:9b:29:7c:00:1b:83:c8:a5:22:c5:28:ec:1d:
74:37:30:be:f6:26:a2:5c:09:d1:17:1e:44:43:be:07:3a:43:
bb:a8:2f:ac:66:9f:8b:7b:3f:43:e2:98:5d:51:43:e9:bb:d6:
c4:48:27:d6:67:22:03:c3:7e:ec:47:7e:1d:46:90:fc:31:43:
07:93:df:3e:55:73:4b:2e:2a:e1:0e:38:0b:82:ed:3e:71:d1:
d2:33:13:b1:9b:b1:4b:96:12:65:f8:b2:ab:1a:d3:78:aa:68:
c5:39:0b:e3:f1:e5:f0:e9:fc:f1:d5:9a:b9:ef:b4:d1:2a:22:
5c:e7:36:99:df:ce:48:f7:00:15:1b:86:c6:18:05:9e:b4:b6:
b7:23:93:64:34:49:22:e2:d0:d1:fb:86:47:a9:cd:b9:7d:bb:
75:20:2b:fd:a1:58:c4:68:b2:77:e0:a1:fb:80:64:d4:0d:85:
ce:21:9a:63:d5:dc:91:f7:0c:3f:14:88:23:8f:b5:48:e0:73:
ea:2c:ec:79:8c:92:41:d0:bf:f2:08:d4:b3:d7:4d:45:00:1c:
b7:67:0a:1f:4b:96:4c:41:b7:b1:3d:b2:bb:13:50:04:bf:3e:
e1:b5:b6:d5
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIEFVbBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDYx
NTAzMDUwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODFhMjcyYzczNmM1
YjM0MTQzNTI5MTUxNDNmMTQxY2E4NDc5NzgyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZBxSyF9T7L0j77AEYFXqj3R4rezzGdYcFAG1mJCxET4+sP
/X3l+A51/EXf0fllnOfw8gWrbbuiSc02a6LU/xAVxkCkhVFo35fjt3BWqK0xwbMF
U5+djUjLAjtj9Fw3LI+u43z2dwBmwPcm1xbIZo3lrahfMfkB1f1LxNYp3jWJOEUs
Fx6DILI9tCfEKTLa5o5+aBMAhLmqw5MDme8xaz2r86emEJq195sWPZKT5c289EcX
bEKoTxAe2P4HX8g8ztVYi4td3oIY7ytuRlTC52ux2Qhm1eKnG73OUWOiTzDb48FV
VbBqLfbmQvI/c7HXUWszAsgoTD3Z+CegoO3mBXsCAwEAAaOCAjcwggIzMB0GA1Ud
DgQWBBSBonLHNsWzQUNSkVFD8UHKhHl4LjAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L2dhSnl4emJGczBGRFVwRlJRX0ZCeW9SNWVDNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBN
BggrBgEFBQcBBwEB/wQ+MDwwOgQCAAEwNAMEAwXiMDAMAwQDLvloAwQDLvlwAwQC
uYFsMAwDBAC51/UDBAC51/YDBAK53OwDBAC80ZswDQYJKoZIhvcNAQELBQADggEB
ANV2oV0V4gcLsclKYNrOxDHUZztC24wamyl8ABuDyKUixSjsHXQ3ML72JqJcCdEX
HkRDvgc6Q7uoL6xmn4t7P0PimF1RQ+m71sRIJ9ZnIgPDfuxHfh1GkPwxQweT3z5V
c0suKuEOOAuC7T5x0dIzE7GbsUuWEmX4sqsa03iqaMU5C+Px5fDp/PHVmrnvtNEq
IlznNpnfzkj3ABUbhsYYBZ60trcjk2Q0SSLi0NH7hkepzbl9u3UgK/2hWMRosnfg
ofuAZNQNhc4hmmPV3JH3DD8UiCOPtUjgc+os7HmMkkHQv/II1LPXTUUAHLdnCh9L
lkxBt7E9srsTUAS/PuG1ttU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org