Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GsinfJ1J8evdnRr6NtKXrefmy7k.roa
File: GsinfJ1J8evdnRr6NtKXrefmy7k.roa (raw, json)
Hash identifier: nsJB7rWbNFkTur0AnBXKH6MPDrraL3EssRT46FzZjR0=
Subject key identifier: 1A:C8:A7:7C:9D:49:F1:EB:DD:9D:1A:FA:36:D2:97:AD:E7:E6:CB:B9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189CEDD09165B174EC3E1EC57EF9C9B199D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GsinfJ1J8evdnRr6NtKXrefmy7k.roa
Signing time: Mon 07 Aug 2023 07:18:59 +0000
ROA not before: Mon 07 Aug 2023 07:18:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 89.213.174.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
109.176.252.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.47.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:dd:09:16:5b:17:4e:c3:e1:ec:57:ef:9c:9b:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 07:18:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ac8a77c9d49f1ebdd9d1afa36d297ade7e6cbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:b3:53:9c:b0:04:52:01:c2:4c:03:84:77:
d4:95:e3:67:40:9d:7b:ce:d6:99:0b:8c:36:9c:78:
3c:42:d8:19:35:20:28:63:8b:01:03:7d:30:d5:3b:
ca:0c:c3:bd:c6:c5:eb:cc:e1:e5:e0:5b:ad:98:76:
cd:ff:7e:fc:56:4b:e8:80:99:5e:bd:c2:2a:e3:da:
a2:7f:08:58:aa:dc:c6:f3:95:01:2f:d9:cd:97:38:
e3:09:97:74:65:bd:bc:8f:19:6b:d1:07:c0:0a:d5:
b6:00:cc:2f:b5:80:e6:a5:b9:96:36:ce:d4:29:c6:
cf:18:9a:ae:e9:fe:29:dd:d3:22:2a:d7:af:17:b4:
87:3f:27:16:36:98:50:7e:20:ef:ce:7a:fa:5a:47:
3b:6d:08:10:d8:d0:97:eb:d2:c5:fd:ba:73:57:b4:
9f:a8:26:ca:aa:13:72:cd:03:15:d9:77:4b:1c:b1:
68:53:02:96:de:c8:c1:78:37:fe:b3:86:bf:89:a9:
2c:c9:49:41:02:ff:5f:a2:56:eb:02:f2:0e:e3:ed:
7c:96:8d:e5:c6:5f:4a:7a:2e:fa:00:2e:8c:a4:9a:
57:b8:de:24:09:d5:0d:3d:fb:cc:02:b6:ca:5a:46:
74:18:d4:99:92:0a:4a:a2:9f:11:7a:80:07:b2:f6:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C8:A7:7C:9D:49:F1:EB:DD:9D:1A:FA:36:D2:97:AD:E7:E6:CB:B9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GsinfJ1J8evdnRr6NtKXrefmy7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.225.0/24
89.213.47.0/24
89.213.141.0/24
89.213.146.0/24
89.213.154.0/24
89.213.164.0/24
89.213.174.0/24
89.213.181.0/24
89.213.188.0/23
109.176.251.0-109.176.252.255
Signature Algorithm: sha256WithRSAEncryption
4b:2b:34:85:6a:9e:17:35:b2:63:ab:cd:f8:f8:6e:43:55:c6:
24:6f:20:bf:73:4b:4d:d9:0b:78:d8:29:ba:a4:46:d9:c4:dd:
d9:39:31:59:f9:b1:e5:02:ad:8f:38:80:af:b7:ea:28:87:76:
6c:05:09:fe:a9:98:78:9b:4e:a7:9d:86:1a:1a:e2:67:eb:df:
91:3d:94:f5:c4:9d:45:65:b9:5b:43:f5:37:d6:49:d1:bb:60:
eb:e0:d1:68:01:c2:a8:52:99:8c:10:e4:fb:a7:51:1a:35:ba:
3a:bc:63:04:72:e8:c2:7e:02:90:a3:ca:42:87:b3:b8:9d:6c:
6a:b4:6c:ac:f8:d3:55:bf:d3:85:4e:ee:60:97:3a:75:37:11:
80:67:ea:14:85:d0:f0:a1:02:ce:2b:7c:f1:ee:09:46:c6:6e:
bc:76:2b:ca:35:bb:36:78:60:d1:c6:87:8b:36:d7:fe:c6:13:
23:02:44:89:97:3e:f3:03:5d:69:d5:e1:0c:21:06:cc:02:8b:
c0:cd:1e:4c:d5:6d:f8:4b:96:f3:df:d8:09:b7:8a:06:e4:00:
43:81:0a:f9:04:c7:34:c0:b5:58:94:15:b0:c7:3e:b0:b0:b4:
9b:e5:31:91:53:ca:de:92:6f:14:01:1e:21:d2:4e:d7:d6:43:
1e:99:cb:ff
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYnO3QkWWxdOw+HsV++cmxmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODA3MDcxODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWM4YTc3YzlkNDlmMWViZGQ5ZDFhZmEzNmQyOTdhZGU3ZTZjYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3KzU5ywBFIBwkwDhHfUleNnQJ17
ztaZC4w2nHg8QtgZNSAoY4sBA30w1TvKDMO9xsXrzOHl4FutmHbN/378VkvogJle
vcIq49qifwhYqtzG85UBL9nNlzjjCZd0Zb28jxlr0QfACtW2AMwvtYDmpbmWNs7U
KcbPGJqu6f4p3dMiKtevF7SHPycWNphQfiDvznr6Wkc7bQgQ2NCX69LF/bpzV7Sf
qCbKqhNyzQMV2XdLHLFoUwKW3sjBeDf+s4a/iaksyUlBAv9folbrAvIO4+18lo3l
xl9Kei76AC6MpJpXuN4kCdUNPfvMArbKWkZ0GNSZkgpKop8ReoAHsvZ6twIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFBrIp3ydSfHr3Z0a+jbSl63n5su5MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvR3NpbmZKMUo4ZXZkblJyNk50S1hyZWZteTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAUpnhAwQA
WdUvAwQAWdWNAwQAWdWSAwQAWdWaAwQAWdWkAwQAWdWuAwQAWdW1AwQBWdW8MAwD
BABtsPsDBABtsPwwDQYJKoZIhvcNAQELBQADggEBAEsrNIVqnhc1smOrzfj4bkNV
xiRvIL9zS03ZC3jYKbqkRtnE3dk5MVn5seUCrY84gK+36iiHdmwFCf6pmHibTqed
hhoa4mfr35E9lPXEnUVluVtD9TfWSdG7YOvg0WgBwqhSmYwQ5PunURo1ujq8YwRy
6MJ+ApCjykKHs7idbGq0bKz401W/04VO7mCXOnU3EYBn6hSF0PChAs4rfPHuCUbG
brx2K8o1uzZ4YNHGh4s21/7GEyMCRImXPvMDXWnV4QwhBswCi8DNHkzVbfhLlvPf
2Am3igbkAEOBCvkExzTAtViUFbDHPrCwtJvlMZFTyt6SbxQBHiHSTtfWQx6Zy/8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:40 2025 by rpki-client