Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/GGR5PiQujUBxM7Xq_3KbacW9WYA.roa
File: GGR5PiQujUBxM7Xq_3KbacW9WYA.roa (raw, json)
Hash identifier: mScwSRM17R6F/mfC0KUI0+z2Ae+Ym1l+eOBSN6jSJxM=
Subject key identifier: 18:64:79:3E:24:2E:8D:40:71:33:B5:EA:FF:72:9B:69:C5:BD:59:80
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 0120927A
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/GGR5PiQujUBxM7Xq_3KbacW9WYA.roa
Signing time: Wed 19 Jan 2022 13:53:00 +0000
ROA not before: Wed 19 Jan 2022 13:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.91.255.0/24 maxlen: 24
193.57.172.0/24 maxlen: 24
2a11:5ec0::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18911866 (0x120927a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jan 19 13:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1864793e242e8d407133b5eaff729b69c5bd5980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:1e:42:df:6d:21:7e:3e:95:ba:8e:54:3e:
f2:6e:bd:77:48:58:e0:74:3a:ff:dd:11:1e:39:65:
58:09:30:d2:15:e1:f5:19:ac:23:3f:a0:9e:db:12:
bc:4d:4d:c9:d7:70:0c:47:81:5f:4d:fa:a6:82:68:
40:ff:05:01:7d:0d:a8:0b:48:dd:f4:7e:2a:8b:f6:
80:c9:02:52:a4:30:a8:20:43:88:4f:f6:4a:cb:54:
6e:0c:9c:b3:a8:2b:30:4e:4c:36:5e:56:8c:51:5a:
d2:90:1c:24:2d:ab:6e:c5:38:b5:62:5c:90:83:45:
29:a0:3a:33:b0:5e:6c:8c:35:b7:b0:00:41:01:dc:
0a:71:50:a7:74:a1:5a:66:5f:7c:e4:e5:aa:b0:19:
22:b3:f7:75:61:d4:4e:31:8a:8b:22:e8:88:a6:a7:
30:af:15:ea:6c:2b:58:b5:40:c5:3c:d4:52:4a:9a:
b7:4c:cf:c2:c0:f0:fa:ec:53:a2:37:3b:91:1e:9e:
78:50:05:1d:c4:d2:d3:a2:16:4b:a8:d3:95:44:e9:
63:f0:61:a6:21:a4:a9:49:e2:d6:be:bf:1f:a6:79:
cd:9b:77:b3:bd:05:1f:4e:aa:34:d2:7f:e0:0e:7a:
17:a1:d5:a2:2c:21:49:e8:71:14:98:4d:6c:f4:5b:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:79:3E:24:2E:8D:40:71:33:B5:EA:FF:72:9B:69:C5:BD:59:80
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/GGR5PiQujUBxM7Xq_3KbacW9WYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.255.0/24
193.57.172.0/24
IPv6:
2a11:5ec0::/40
Signature Algorithm: sha256WithRSAEncryption
75:8a:5a:be:97:38:24:7c:88:89:68:58:77:e1:31:26:0f:f2:
8c:36:f6:fa:fb:bb:8d:c1:5b:d4:b4:62:21:cd:64:2c:47:ff:
c2:e6:71:9f:4a:a1:49:97:96:f9:d4:cb:85:94:f0:4c:f3:e9:
18:c5:18:61:7b:95:aa:d1:2b:e9:62:5f:92:c1:1b:f9:3b:3f:
f7:26:b2:87:27:03:81:c6:3c:46:5b:98:78:8a:0f:7d:45:56:
c4:98:8b:6e:1c:91:b5:6b:09:f8:2e:05:f6:49:06:f7:99:5a:
fa:14:09:ef:17:e8:e8:ba:19:2d:10:f7:66:d4:86:83:3f:21:
7f:d7:3e:88:6b:21:f4:a5:d1:78:60:6c:fe:30:61:e9:1e:b7:
88:55:6e:36:c6:4e:53:2d:dc:a0:ab:bd:6d:3f:29:f2:6b:63:
a5:9d:46:37:2d:bd:07:e5:a4:c9:ca:0f:eb:db:17:b8:10:f0:
0d:0e:a1:8c:5a:69:f8:cd:89:e1:52:3a:1a:c4:e5:bc:80:5f:
d5:6c:be:c4:a1:bb:96:c6:fa:d1:dc:e4:1c:43:81:8d:2f:06:
3f:68:c0:d3:4c:07:ef:ad:9b:85:03:88:07:09:d1:9f:b6:cc:
46:f1:9b:9a:0b:44:bd:b4:05:b1:99:5b:95:01:f6:05:63:52:
94:2f:35:75
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEASCSejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YWM5ODA0ZTIyN2VhYWM5YWMwOWIwODIxZmMwN2VlMjgxNzc3N2I1MB4XDTIyMDEx
OTEzNTMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTg2NDc5M2UyNDJl
OGQ0MDcxMzNiNWVhZmY3MjliNjljNWJkNTk4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOO3HkLfbSF+PpW6jlQ+8m69d0hY4HQ6/90RHjllWAkw0hXh
9RmsIz+gntsSvE1NyddwDEeBX036poJoQP8FAX0NqAtI3fR+Kov2gMkCUqQwqCBD
iE/2SstUbgycs6grME5MNl5WjFFa0pAcJC2rbsU4tWJckINFKaA6M7BebIw1t7AA
QQHcCnFQp3ShWmZffOTlqrAZIrP3dWHUTjGKiyLoiKanMK8V6mwrWLVAxTzUUkqa
t0zPwsDw+uxTojc7kR6eeFAFHcTS06IWS6jTlUTpY/BhpiGkqUni1r6/H6Z5zZt3
s70FH06qNNJ/4A56F6HVoiwhSehxFJhNbPRbrIkCAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBQYZHk+JC6NQHEzter/cptpxb1ZgDAfBgNVHSMEGDAWgBTKyYBOIn6qyawJ
sIIfwH7igXd3tTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lzbUFUaUotcXNtc0NiQ0NIOEItNG9GM2Q3VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvYmNlYTVkLTUxNGUtNGY1Mi1iNDlhLTkwZmI1N2Q0MGNhNy8x
L0dHUjVQaVF1alVCeE03WHFfM0tiYWNXOVdZQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
YmNlYTVkLTUxNGUtNGY1Mi1iNDlhLTkwZmI1N2Q0MGNhNy8xL3lzbUFUaUotcXNt
c0NiQ0NIOEItNG9GM2Q3VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEAC1b/wMEAME5rDAOBAIAAjAIAwYA
KhFewAAwDQYJKoZIhvcNAQELBQADggEBAHWKWr6XOCR8iIloWHfhMSYP8ow29vr7
u43BW9S0YiHNZCxH/8LmcZ9KoUmXlvnUy4WU8Ezz6RjFGGF7larRK+liX5LBG/k7
P/cmsocnA4HGPEZbmHiKD31FVsSYi24ckbVrCfguBfZJBveZWvoUCe8X6Oi6GS0Q
92bUhoM/IX/XPohrIfSl0XhgbP4wYeket4hVbjbGTlMt3KCrvW0/KfJrY6WdRjct
vQflpMnKD+vbF7gQ8A0OoYxaafjNieFSOhrE5byAX9VsvsShu5bG+tHc5BxDgY0v
Bj9owNNMB++tm4UDiAcJ0Z+2zEbxm5oLRL20BbGZW5UB9gVjUpQvNXU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:18 2024 by rpki-client on console-fra.rpki-client.org