Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FeCG0qA669BpqpTxmZ2zMbOFbxc.roa
File: FeCG0qA669BpqpTxmZ2zMbOFbxc.roa (raw, json)
Hash identifier: lmpGTH0ZzUDK8QPbghsYF+eX6FSewXan/g0e8i6rQYk=
Subject key identifier: 15:E0:86:D2:A0:3A:EB:D0:69:AA:94:F1:99:9D:B3:31:B3:85:6F:17
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0183CD2D380A96871B80E73509819CB37BF0
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FeCG0qA669BpqpTxmZ2zMbOFbxc.roa
Signing time: Wed 12 Oct 2022 17:10:36 +0000
ROA not before: Wed 12 Oct 2022 17:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.114.144.0/22 maxlen: 24
185.179.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:2d:38:0a:96:87:1b:80:e7:35:09:81:9c:b3:7b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 12 17:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15e086d2a03aebd069aa94f1999db331b3856f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:99:e5:2e:57:40:2a:41:c4:2a:b5:3b:e3:
ad:93:08:c9:40:08:ea:7f:73:f3:d5:c9:67:5d:59:
0c:60:ac:2d:c8:e9:87:e9:a0:62:08:fd:43:3e:88:
ab:bb:80:a9:2a:3f:be:09:3c:03:1d:42:15:c5:fa:
60:70:91:10:4c:d7:95:7c:de:2f:35:75:ef:a4:ae:
44:bb:70:dd:c3:33:8c:69:68:c0:70:81:fe:a3:30:
f2:a6:fc:cf:14:78:8a:7d:1e:fe:bf:42:be:d1:0a:
0d:6a:08:dd:b5:72:d7:f8:d2:eb:89:b6:5b:c3:92:
01:b4:c8:1e:6f:ff:e1:17:41:d8:96:e9:4f:6b:e6:
3e:35:8f:ab:38:97:d0:00:59:77:ef:7a:94:83:0a:
4f:20:89:05:61:65:2b:81:ad:41:54:b8:ee:90:2e:
16:14:fe:11:b6:5f:aa:42:83:4e:5e:d9:c4:29:4f:
80:ff:be:f6:75:56:bc:55:5d:b8:ea:02:69:9e:00:
f5:38:bd:98:68:5b:8b:e3:cc:3f:24:8f:b9:41:25:
6d:8c:5c:79:66:a3:89:16:65:d5:20:13:3a:40:07:
d4:64:8a:24:2a:3a:78:45:74:e9:b9:fd:e7:27:de:
9b:27:f7:a7:28:37:7f:4c:2f:0e:a9:15:55:df:43:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:86:D2:A0:3A:EB:D0:69:AA:94:F1:99:9D:B3:31:B3:85:6F:17
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FeCG0qA669BpqpTxmZ2zMbOFbxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/22
185.179.218.0/23
Signature Algorithm: sha256WithRSAEncryption
05:b4:65:e5:c5:fb:fb:55:28:a3:85:15:35:51:f9:52:bc:fc:
05:99:12:b1:4d:7a:ef:17:00:ef:f1:05:6d:3e:82:c3:b8:80:
4b:84:32:c5:9a:7f:cc:7e:b1:20:bf:5e:a6:fc:94:0b:b7:f3:
36:87:05:8b:1e:ca:27:72:2e:53:91:50:96:40:34:af:01:de:
87:a8:10:f0:a5:23:c8:4f:3c:54:87:f0:16:94:54:d6:09:5c:
e0:ce:c2:06:e8:61:ad:2a:67:de:27:bf:54:99:4c:9b:e2:7f:
2d:0b:23:49:40:99:e6:87:ce:e4:e7:46:0f:bf:ce:1d:00:95:
72:07:ee:56:6c:49:98:1f:28:55:c3:f7:41:87:93:d7:be:c2:
fe:7e:1b:e3:ca:83:dc:9f:91:d4:24:f1:67:75:9c:4e:a5:1b:
2f:21:6c:32:ab:fd:0d:01:1b:ec:e0:85:f0:6d:6a:9f:38:56:
0c:78:20:9a:cc:e2:70:0e:a8:9f:53:be:13:00:1f:4e:24:87:
38:7d:a6:4b:38:fc:7a:aa:28:6a:58:ef:bd:6c:73:d5:70:80:
13:a9:94:c5:ca:f7:af:80:88:30:88:f8:02:05:79:03:6a:8d:
96:df:c8:83:ed:2b:6a:d7:94:2f:6b:3b:7b:32:39:04:6a:74:
c2:d5:4c:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPNLTgKlocbgOc1CYGcs3vwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjIxMDEyMTcxMDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWUwODZkMmEwM2FlYmQwNjlhYTk0ZjE5OTlkYjMzMWIzODU2ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3+Z5S5XQCpBxCq1O+OtkwjJQAjq
f3Pz1clnXVkMYKwtyOmH6aBiCP1DPoiru4CpKj++CTwDHUIVxfpgcJEQTNeVfN4v
NXXvpK5Eu3DdwzOMaWjAcIH+ozDypvzPFHiKfR7+v0K+0QoNagjdtXLX+NLribZb
w5IBtMgeb//hF0HYlulPa+Y+NY+rOJfQAFl373qUgwpPIIkFYWUrga1BVLjukC4W
FP4Rtl+qQoNOXtnEKU+A/772dVa8VV246gJpngD1OL2YaFuL48w/JI+5QSVtjFx5
ZqOJFmXVIBM6QAfUZIokKjp4RXTpuf3nJ96bJ/enKDd/TC8OqRVV30OCWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBXghtKgOuvQaaqU8ZmdszGzhW8XMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvRmVDRzBxQTY2OUJwcXBUeG1aMnpNYk9GYnhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXKQAwQB
ubPaMA0GCSqGSIb3DQEBCwUAA4IBAQAFtGXlxfv7VSijhRU1UflSvPwFmRKxTXrv
FwDv8QVtPoLDuIBLhDLFmn/MfrEgv16m/JQLt/M2hwWLHsonci5TkVCWQDSvAd6H
qBDwpSPITzxUh/AWlFTWCVzgzsIG6GGtKmfeJ79UmUyb4n8tCyNJQJnmh87k50YP
v84dAJVyB+5WbEmYHyhVw/dBh5PXvsL+fhvjyoPcn5HUJPFndZxOpRsvIWwyq/0N
ARvs4IXwbWqfOFYMeCCazOJwDqifU74TAB9OJIc4faZLOPx6qihqWO+9bHPVcIAT
qZTFyvevgIgwiPgCBXkDao2W38iD7Stq15Qvazt7MjkEanTC1Ux6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-ams.rpki-client.org