Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/GMF4VENobV8m4ZbMaJ1X5au9twg.roa
File: GMF4VENobV8m4ZbMaJ1X5au9twg.roa (raw, json)
Hash identifier: YLtwxHL382aTaElbtTrgb7MDyqTWrV0LP9GkPwCGwzY=
Subject key identifier: 18:C1:78:54:43:68:6D:5F:26:E1:96:CC:68:9D:57:E5:AB:BD:B7:08
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 0184C94FCDD64C8C8C24AFC106EBCB49BE99
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/GMF4VENobV8m4ZbMaJ1X5au9twg.roa
Signing time: Wed 30 Nov 2022 16:12:41 +0000
ROA not before: Wed 30 Nov 2022 16:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29447
IP address blocks: 37.164.0.0/16 maxlen: 17
37.160.0.0/14 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:4f:cd:d6:4c:8c:8c:24:af:c1:06:eb:cb:49:be:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Nov 30 16:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18c1785443686d5f26e196cc689d57e5abbdb708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:86:09:66:5d:ec:e0:93:30:e0:d3:73:a2:
26:05:dc:95:ce:aa:64:27:44:ab:dc:df:81:f4:19:
a3:b6:e1:e3:26:36:9b:51:6b:39:23:ed:1a:53:19:
df:b7:08:62:fb:d3:35:e8:32:dc:77:fd:86:f3:d5:
c2:11:dd:b3:07:bf:07:58:6c:25:37:fa:d1:4b:a1:
c5:1e:9a:cb:ef:36:84:5e:6d:79:ca:e2:6d:4c:27:
ae:41:5b:74:df:2e:24:0a:57:96:a7:74:00:62:eb:
52:b3:d7:58:cb:f5:78:4f:01:9e:97:8c:47:4d:90:
b6:3a:bb:f7:57:f0:48:54:7e:f8:6a:26:46:dc:33:
19:15:da:45:a6:fc:eb:7b:b9:46:de:ec:5b:e1:24:
47:55:b6:b3:1c:c4:ba:0a:b4:c0:e9:bc:f1:2b:80:
1d:79:de:23:b2:cc:45:df:5e:23:a2:ed:47:dd:dd:
4e:5e:df:4d:fe:57:3a:6b:14:3f:ab:47:40:be:03:
bb:3b:a9:9d:73:89:1a:bc:2b:a9:6e:18:a2:72:3d:
8b:15:01:d4:9a:bf:ae:e6:28:47:2c:e8:2b:ed:0a:
56:81:d7:ab:16:29:22:bf:c8:fe:db:5e:b0:10:ad:
65:d4:35:ee:7d:b6:60:67:76:e6:9a:5b:f1:96:ea:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C1:78:54:43:68:6D:5F:26:E1:96:CC:68:9D:57:E5:AB:BD:B7:08
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/GMF4VENobV8m4ZbMaJ1X5au9twg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.160.0.0-37.164.255.255
Signature Algorithm: sha256WithRSAEncryption
be:f9:b1:2d:6a:94:9b:1c:99:5e:83:91:f6:be:44:91:af:5e:
b2:3f:32:c1:80:6c:ad:21:02:5e:b4:a2:cd:b6:75:f6:10:2d:
dd:88:5c:15:18:7e:ad:f3:e8:81:81:83:80:d7:2c:3a:03:3e:
76:15:11:f9:9b:70:51:3f:a5:ba:02:98:d2:ba:c2:88:01:71:
73:9f:e6:4e:4e:6c:bf:72:e0:98:d4:60:fc:3c:17:bf:d4:61:
5a:a3:d5:cc:66:98:ca:1d:57:ef:39:44:a6:62:14:43:fe:68:
bd:1c:46:82:6b:07:1d:d6:a5:6f:08:13:5f:f6:21:a2:94:89:
e5:8d:b4:08:3d:a7:35:40:cd:6e:85:34:89:82:c7:04:ef:3b:
43:46:7c:7a:3c:aa:70:cf:b1:a7:a9:30:b5:d6:40:3d:0f:de:
53:ad:e1:a2:96:62:57:d3:94:3f:b7:9e:36:03:d4:50:1a:d3:
e3:74:ba:88:c9:a9:1b:48:4f:54:2b:65:43:e7:d4:45:b1:d8:
cf:40:8c:21:09:33:fe:e0:fc:a5:44:0b:d6:9c:48:b0:c4:5d:
33:db:65:00:0e:5d:19:92:ef:1a:b0:0a:e6:2e:36:b0:22:38:
ba:f6:1d:6b:d1:9a:1a:a3:76:70:ed:7a:4a:c9:22:ea:1a:72:
46:06:56:b2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTJT83WTIyMJK/BBuvLSb6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTdkNGY1OGFmODRmNTBjZTQyZjEzMjkzZWRlNGFmZjEy
ZDE3M2YwHhcNMjIxMTMwMTYxMjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGMxNzg1NDQzNjg2ZDVmMjZlMTk2Y2M2ODlkNTdlNWFiYmRiNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHuGCWZd7OCTMODTc6ImBdyVzqpk
J0Sr3N+B9BmjtuHjJjabUWs5I+0aUxnftwhi+9M16DLcd/2G89XCEd2zB78HWGwl
N/rRS6HFHprL7zaEXm15yuJtTCeuQVt03y4kCleWp3QAYutSs9dYy/V4TwGel4xH
TZC2Orv3V/BIVH74aiZG3DMZFdpFpvzre7lG3uxb4SRHVbazHMS6CrTA6bzxK4Ad
ed4jssxF314jou1H3d1OXt9N/lc6axQ/q0dAvgO7O6mdc4kavCupbhiicj2LFQHU
mr+u5ihHLOgr7QpWgderFikiv8j+216wEK1l1DXufbZgZ3bmmlvxlupdBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBjBeFRDaG1fJuGWzGidV+WrvbcIMB8GA1UdIwQY
MBaAFBUX1PWK+E9QzkLxMpPt5K/xLRc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQt
ZTVmOThkZGFmYzk4LzEvR01GNFZFTm9iVjhtNFpiTWFKMVg1YXU5dHdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQtZTVmOThkZGFmYzk4
LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMMAoDAwUloAMD
ACWkMA0GCSqGSIb3DQEBCwUAA4IBAQC++bEtapSbHJleg5H2vkSRr16yPzLBgGyt
IQJetKLNtnX2EC3diFwVGH6t8+iBgYOA1yw6Az52FRH5m3BRP6W6ApjSusKIAXFz
n+ZOTmy/cuCY1GD8PBe/1GFao9XMZpjKHVfvOUSmYhRD/mi9HEaCawcd1qVvCBNf
9iGilInljbQIPac1QM1uhTSJgscE7ztDRnx6PKpwz7GnqTC11kA9D95TreGilmJX
05Q/t542A9RQGtPjdLqIyakbSE9UK2VD59RFsdjPQIwhCTP+4PylRAvWnEiwxF0z
22UADl0Zku8asArmLjawIji69h1r0Zoao3Zw7XpKySLqGnJGBlay
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org