Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/GxKEeYBvU15pwJO-PgcLpCSzt18.roa
File: GxKEeYBvU15pwJO-PgcLpCSzt18.roa (raw, json)
Hash identifier: 9vpVcQRvzS4rxUI9wNYtz+l1rme/doHppWvVXEBoBJ8=
Subject key identifier: 1B:12:84:79:80:6F:53:5E:69:C0:93:BE:3E:07:0B:A4:24:B3:B7:5F
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 071415C3
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/GxKEeYBvU15pwJO-PgcLpCSzt18.roa
Signing time: Sat 01 Jan 2022 15:55:53 +0000
ROA not before: Sat 01 Jan 2022 15:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41332
IP address blocks: 194.76.10.0/23 maxlen: 24
194.76.12.0/23 maxlen: 24
185.108.236.0/22 maxlen: 22
185.116.176.0/22 maxlen: 24
2a06:8040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118756803 (0x71415c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Jan 1 15:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b128479806f535e69c093be3e070ba424b3b75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:9e:41:25:9b:1e:78:79:2e:81:a1:19:b9:
15:88:94:ec:3d:81:19:ed:21:7a:6a:d0:81:7f:29:
10:22:68:4d:83:41:fe:31:cf:28:96:07:38:a4:53:
c9:5a:66:6d:63:07:c5:ff:ea:85:1b:c5:16:a6:b1:
3d:ff:3b:dd:62:d7:60:31:e4:9e:ce:47:8a:14:46:
b4:6f:ae:54:1b:4d:bd:e4:2f:08:1e:ce:e0:de:f5:
b3:12:f5:98:5e:79:65:a8:ec:e1:f7:ab:45:20:df:
e3:d0:1a:dd:5c:b7:31:34:e4:23:1b:c9:e6:ee:b6:
bb:68:bc:42:f2:b2:73:40:35:3a:42:fc:70:41:15:
9b:7c:3c:e1:4f:4a:5f:90:d3:58:88:99:da:82:7e:
74:51:a4:af:32:db:e4:95:fc:61:a5:1c:88:83:3f:
83:39:9e:37:7f:be:c2:e6:e1:c7:4f:ff:6f:b1:4e:
29:8f:a8:c6:b3:94:4a:f2:72:89:8e:fc:c4:db:c0:
d4:f6:a3:4a:b1:7f:88:c6:b7:dc:83:12:34:51:9d:
71:1d:28:f9:e9:e5:fa:02:69:f5:a9:7e:33:44:51:
17:f5:a2:c3:cf:a9:1d:f9:a9:94:6b:86:a2:f1:3c:
df:90:61:d5:57:3a:cd:51:97:1a:ee:a0:b1:e5:41:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:84:79:80:6F:53:5E:69:C0:93:BE:3E:07:0B:A4:24:B3:B7:5F
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/GxKEeYBvU15pwJO-PgcLpCSzt18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.236.0/22
185.116.176.0/22
194.76.10.0-194.76.13.255
IPv6:
2a06:8040::/29
Signature Algorithm: sha256WithRSAEncryption
ab:df:9f:37:e0:6e:32:0c:c9:db:58:a3:8d:3b:1e:90:a1:2b:
e2:fb:33:48:dd:26:76:51:27:57:1a:f7:d1:fa:cc:63:c4:b9:
6b:3b:45:76:72:c8:43:81:f2:ac:da:85:8b:f7:96:3b:a8:c5:
9b:57:66:21:c8:cd:aa:0b:08:5e:f1:f1:54:9c:02:5b:91:11:
58:f1:2f:65:9d:b8:57:41:52:e0:ff:65:58:a5:02:03:76:5d:
ee:bb:47:c3:11:ea:91:51:8b:5a:0e:64:00:af:63:72:1b:ba:
df:6b:f4:f3:7c:ff:96:7f:23:a8:87:8b:a3:28:6b:84:b3:d5:
b7:27:9d:05:38:5c:78:3c:e9:5f:7b:cb:17:05:d7:42:0d:eb:
17:f1:58:d2:f9:ec:a8:0d:8f:38:b2:5d:21:36:8c:69:37:15:
9e:18:1b:40:b8:7a:1b:e5:2d:38:33:9a:86:41:b7:51:9a:ee:
61:a6:f8:66:b1:53:3d:c1:34:49:5e:59:49:29:53:c6:09:ed:
22:fd:b2:f8:e1:d8:dc:e6:ca:49:70:33:e7:af:30:66:9d:86:
c1:aa:c4:4d:86:aa:bd:a0:85:ac:be:a3:bd:d6:ed:a0:3b:7b:
a4:e4:8e:2f:b8:d0:e0:c7:52:6e:9a:1e:28:ae:59:cb:6a:ea:
8a:9a:55:70
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIEBxQVwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZmNhYjhjOWQyMTdhYzMwNzljMzAxNGIxOGQ0NDZlMjEzZjE5NDkyMB4XDTIyMDEw
MTE1NTU1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWIxMjg0Nzk4MDZm
NTM1ZTY5YzA5M2JlM2UwNzBiYTQyNGIzYjc1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZJnkElmx54eS6BoRm5FYiU7D2BGe0hemrQgX8pECJoTYNB
/jHPKJYHOKRTyVpmbWMHxf/qhRvFFqaxPf873WLXYDHkns5HihRGtG+uVBtNveQv
CB7O4N71sxL1mF55Zajs4ferRSDf49Aa3Vy3MTTkIxvJ5u62u2i8QvKyc0A1OkL8
cEEVm3w84U9KX5DTWIiZ2oJ+dFGkrzLb5JX8YaUciIM/gzmeN3++wubhx0//b7FO
KY+oxrOUSvJyiY78xNvA1PajSrF/iMa33IMSNFGdcR0o+enl+gJp9al+M0RRF/Wi
w8+pHfmplGuGovE835Bh1Vc6zVGXGu6gseVB7Q0CAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBQbEoR5gG9TXmnAk74+BwukJLO3XzAfBgNVHSMEGDAWgBTPyrjJ0hesMHnD
AUsY1EbiE/GUkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3o4cTR5ZElYckRCNXd3RkxHTlJHNGhQeGxKSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvMTBjMDAwLTc3YjAtNDY2ZC1iNGNmLTQ0NTQwMGQ3MDNjOC8x
L0d4S0VlWUJ2VTE1cHdKTy1QZ2NMcENTenQxOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
MTBjMDAwLTc3YjAtNDY2ZC1iNGNmLTQ0NTQwMGQ3MDNjOC8xL3o4cTR5ZElYckRC
NXd3RkxHTlJHNGhQeGxKSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwIAQCAAEwGgMEArls7AMEArl0sDAMAwQBwkwKAwQB
wkwMMA0EAgACMAcDBQMqBoBAMA0GCSqGSIb3DQEBCwUAA4IBAQCr35834G4yDMnb
WKONOx6QoSvi+zNI3SZ2USdXGvfR+sxjxLlrO0V2cshDgfKs2oWL95Y7qMWbV2Yh
yM2qCwhe8fFUnAJbkRFY8S9lnbhXQVLg/2VYpQIDdl3uu0fDEeqRUYtaDmQAr2Ny
G7rfa/TzfP+WfyOoh4ujKGuEs9W3J50FOFx4POlfe8sXBddCDesX8VjS+eyoDY84
sl0hNoxpNxWeGBtAuHob5S04M5qGQbdRmu5hpvhmsVM9wTRJXllJKVPGCe0i/bL4
4djc5spJcDPnrzBmnYbBqsRNhqq9oIWsvqO91u2gO3uk5I4vuNDgx1Jumh4orlnL
auqKmlVw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:19 2023 by rpki-client on console-fra.rpki-client.org