Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gmk_R-ZzBrqXrS1qawCqWO7EJKI.roa
File: gmk_R-ZzBrqXrS1qawCqWO7EJKI.roa (raw, json)
Hash identifier: Lp/1NJ/AzwVTu8ss16917YmrrAjFLtfUi6yXZ77PFaA=
Subject key identifier: 82:69:3F:47:E6:73:06:BA:97:AD:2D:6A:6B:00:AA:58:EE:C4:24:A2
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1AA5B550
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gmk_R-ZzBrqXrS1qawCqWO7EJKI.roa
Signing time: Sat 01 Jan 2022 12:02:39 +0000
ROA not before: Sat 01 Jan 2022 12:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 107.181.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447067472 (0x1aa5b550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 12:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82693f47e67306ba97ad2d6a6b00aa58eec424a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:e1:2e:92:bf:30:68:68:2d:7c:ea:ee:b7:
a0:14:80:08:65:ea:db:80:02:f0:b7:51:6a:de:1b:
6a:97:63:d0:ca:49:58:76:0c:4a:d6:d9:48:dd:e4:
b1:bc:56:55:94:94:02:a3:5c:87:71:b7:97:eb:0b:
75:d6:d0:a0:fe:ec:d0:8a:45:0b:b7:f2:17:2f:79:
e9:6f:0f:33:11:20:e9:90:c9:a3:03:b0:63:4d:1c:
66:64:4e:a7:46:c9:6a:5b:70:5c:33:46:5a:f9:a9:
7e:56:40:f2:39:65:67:d2:50:9b:cf:08:ec:9a:0a:
6a:c4:32:2d:a4:33:18:56:00:8f:0b:d8:ae:bb:22:
8c:e0:20:fa:b7:d1:eb:17:42:70:d8:96:8a:2d:2b:
8b:da:49:79:f1:d9:da:7c:f2:af:68:2a:e3:8c:22:
bc:35:98:b9:56:d5:18:2c:11:16:1b:a9:0b:10:0d:
cf:b2:f2:9d:01:9b:60:98:60:99:0c:5a:2a:06:96:
b9:5e:94:20:d0:ef:e3:01:75:b5:31:7d:6d:b0:14:
c2:64:da:c1:a7:54:20:5f:d6:b2:48:d7:37:0d:94:
5f:2d:ff:fa:b3:95:b9:ff:0e:6b:91:a5:88:4a:88:
2f:e3:e1:89:72:dc:54:30:b5:70:d1:ca:a3:ff:13:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:3F:47:E6:73:06:BA:97:AD:2D:6A:6B:00:AA:58:EE:C4:24:A2
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gmk_R-ZzBrqXrS1qawCqWO7EJKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:36:35:8b:12:5b:fc:21:cb:10:ad:92:aa:00:b3:42:21:55:
b5:dc:bb:91:98:2f:c8:a0:6d:64:ad:5c:36:46:0a:62:d8:36:
4f:b2:8c:00:20:f8:5b:70:71:a3:a7:69:42:00:98:81:32:51:
77:9d:dd:cd:d3:75:49:13:76:2b:1c:03:e6:59:26:e0:b0:b0:
8d:04:05:9f:c4:0c:f4:6d:10:b4:3e:6b:27:37:f4:f1:d3:e3:
7f:75:d0:98:76:de:db:6c:68:f0:f0:b2:0b:ff:ae:70:ac:da:
79:b2:36:ae:78:d3:86:7d:6f:f8:86:d3:4c:7e:15:03:fa:e6:
07:b0:9e:d7:8b:a7:51:2b:08:af:a5:7c:38:81:fe:c4:f6:b0:
47:ae:92:24:6c:b1:9e:a3:8d:8a:87:da:fd:a5:67:5f:fb:9f:
31:13:1d:f5:b6:9c:03:67:66:66:44:c6:58:d9:0f:aa:e7:df:
18:94:22:50:6d:d8:85:45:88:03:54:3c:82:fa:d2:5b:33:77:
7e:90:15:32:0e:7a:a8:94:0c:6f:db:68:c7:63:09:ce:b8:2e:
69:c8:3a:28:6d:fc:b8:49:16:f8:7e:d3:19:23:7a:d6:c0:90:
c3:03:a0:10:0d:8d:81:8a:29:23:68:5f:b0:ff:13:79:5f:a8:
08:fd:01:21
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGqW1UDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NzU0YzM0N2Q2OGQxNTQ5M2RlNzFiYjk2MmYwYTU2N2UxMzRkNjAzMB4XDTIyMDEw
MTEyMDIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODI2OTNmNDdlNjcz
MDZiYTk3YWQyZDZhNmIwMGFhNThlZWM0MjRhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWY4S6SvzBoaC186u63oBSACGXq24AC8LdRat4bapdj0MpJ
WHYMStbZSN3ksbxWVZSUAqNch3G3l+sLddbQoP7s0IpFC7fyFy956W8PMxEg6ZDJ
owOwY00cZmROp0bJaltwXDNGWvmpflZA8jllZ9JQm88I7JoKasQyLaQzGFYAjwvY
rrsijOAg+rfR6xdCcNiWii0ri9pJefHZ2nzyr2gq44wivDWYuVbVGCwRFhupCxAN
z7LynQGbYJhgmQxaKgaWuV6UINDv4wF1tTF9bbAUwmTawadUIF/WskjXNw2UXy3/
+rOVuf8Oa5GliEqIL+PhiXLcVDC1cNHKo/8TEJkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSCaT9H5nMGupetLWprAKpY7sQkojAfBgNVHSMEGDAWgBTnVMNH1o0VST3n
G7li8KVn4TTWAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzUxVERSOWFORlVrOTV4dTVZdkNsWi1FMDFnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzkyNC8x
L2dta19SLVp6QnJxWHJTMXFhd0NxV083RUpLSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzkyNC8xLzUxVERSOWFORlVr
OTV4dTVZdkNsWi1FMDFnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGu1jDANBgkqhkiG9w0BAQsFAAOC
AQEAWjY1ixJb/CHLEK2SqgCzQiFVtdy7kZgvyKBtZK1cNkYKYtg2T7KMACD4W3Bx
o6dpQgCYgTJRd53dzdN1SRN2KxwD5lkm4LCwjQQFn8QM9G0QtD5rJzf08dPjf3XQ
mHbe22xo8PCyC/+ucKzaebI2rnjThn1v+IbTTH4VA/rmB7Ce14unUSsIr6V8OIH+
xPawR66SJGyxnqONiofa/aVnX/ufMRMd9bacA2dmZkTGWNkPquffGJQiUG3YhUWI
A1Q8gvrSWzN3fpAVMg56qJQMb9tox2MJzrguacg6KG38uEkW+H7TGSN61sCQwwOg
EA2NgYopI2hfsP8TeV+oCP0BIQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org