Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/GNBLAHgzsQ1VEBlJyVxeHKqW34U.roa
File: GNBLAHgzsQ1VEBlJyVxeHKqW34U.roa (raw, json)
Hash identifier: e7cDmwfOM2YMUImpj7VwC3O9C7JIqmNFijBK1S7YjYs=
Subject key identifier: 18:D0:4B:00:78:33:B1:0D:55:10:19:49:C9:5C:5E:1C:AA:96:DF:85
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 0CDAECE2
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/GNBLAHgzsQ1VEBlJyVxeHKqW34U.roa
Signing time: Sat 01 Jan 2022 07:58:45 +0000
ROA not before: Sat 01 Jan 2022 07:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205272
IP address blocks: 185.221.71.0/24 maxlen: 24
185.221.70.0/24 maxlen: 24
185.221.69.0/24 maxlen: 24
185.221.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215674082 (0xcdaece2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 1 07:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18d04b007833b10d55101949c95c5e1caa96df85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:ac:ea:d8:67:2d:7e:af:5a:d1:0d:f8:47:
d5:47:60:0c:5a:ac:60:7f:62:48:8b:32:80:30:e0:
9a:b5:9f:b5:50:2f:c6:68:e8:56:37:fc:e1:b7:0f:
60:c6:b3:f8:e9:99:da:b6:66:25:4f:28:5d:24:34:
73:54:dc:3a:80:f8:18:3b:44:a6:8b:d6:59:9b:c3:
45:fc:05:1e:05:00:c4:83:88:15:3f:5c:b7:5b:5f:
3e:8e:5d:f5:e3:89:10:af:30:2d:6b:8a:e3:2b:77:
dc:47:cc:60:27:d6:a8:2b:bf:f6:46:c8:cc:7f:b4:
22:fc:70:07:90:0b:ac:93:18:9e:19:b4:01:b8:26:
c2:ce:b6:ab:df:bb:94:79:56:60:7d:bd:ef:0f:fa:
af:69:82:88:a4:ff:ee:c4:9d:28:14:5f:8d:aa:c2:
91:02:55:48:04:fc:f0:bb:87:14:82:53:be:5c:33:
12:c1:2a:fa:15:38:39:93:f6:74:d6:5b:73:4d:04:
34:1b:47:7e:92:a5:f2:b2:32:2e:48:7b:62:3b:fe:
c1:7a:86:70:bf:98:da:e6:d5:65:78:73:05:1a:be:
d6:67:db:4e:95:59:10:dd:d7:23:55:5f:b3:aa:24:
20:7b:f9:78:68:be:52:bc:d7:78:30:8a:a1:5e:3a:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D0:4B:00:78:33:B1:0D:55:10:19:49:C9:5C:5E:1C:AA:96:DF:85
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/GNBLAHgzsQ1VEBlJyVxeHKqW34U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:06:35:08:42:ff:54:f4:a0:2c:48:99:9b:02:55:88:c0:ec:
08:d1:dc:0a:4c:05:14:b8:9b:ad:b5:0b:23:a2:32:45:0d:66:
01:3a:da:a5:91:63:47:e3:a7:eb:24:04:2e:b0:70:2b:d4:d1:
26:15:0f:7f:6b:da:4a:b2:e0:d0:71:86:0a:f0:2c:74:d5:2a:
55:65:e7:3f:10:06:87:48:63:33:24:ab:cc:76:64:ce:57:e3:
9a:e4:1d:db:08:b1:fb:6f:92:54:e2:53:e3:da:32:05:f6:63:
ca:77:cd:7a:50:87:6a:a4:4d:ca:8a:a2:3c:cf:13:5b:62:e7:
da:5f:a4:35:f3:53:fd:a2:31:1e:a7:0c:c1:cc:a8:0a:10:e4:
e6:65:0f:4a:a9:39:f6:7e:98:61:9e:f7:88:87:cb:3b:50:22:
00:aa:79:19:e6:77:50:94:e3:fd:c3:6a:dd:01:f8:ba:27:be:
65:91:f5:b5:e7:5b:ee:ef:c0:97:80:19:1e:3e:69:8e:fc:ca:
5a:c3:8d:19:75:42:d9:de:c2:96:40:66:b4:8c:e4:21:4c:3c:
f5:c2:39:dd:d7:bf:5b:02:b3:1d:4d:53:32:ea:e2:ca:b3:d0:
fe:3a:99:c8:86:4b:e0:0b:d1:25:ff:a8:08:49:44:ad:d0:bd:
b7:e1:37:a7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDNrs4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MGZiZDU4NzY2MTNlZGM1NmUwZjVkZTQ2OGNjZTVlYjI4ODVmZjI5MB4XDTIyMDEw
MTA3NTg0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMThkMDRiMDA3ODMz
YjEwZDU1MTAxOTQ5Yzk1YzVlMWNhYTk2ZGY4NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJknrOrYZy1+r1rRDfhH1UdgDFqsYH9iSIsygDDgmrWftVAv
xmjoVjf84bcPYMaz+OmZ2rZmJU8oXSQ0c1TcOoD4GDtEpovWWZvDRfwFHgUAxIOI
FT9ct1tfPo5d9eOJEK8wLWuK4yt33EfMYCfWqCu/9kbIzH+0IvxwB5ALrJMYnhm0
Abgmws62q9+7lHlWYH297w/6r2mCiKT/7sSdKBRfjarCkQJVSAT88LuHFIJTvlwz
EsEq+hU4OZP2dNZbc00ENBtHfpKl8rIyLkh7Yjv+wXqGcL+Y2ubVZXhzBRq+1mfb
TpVZEN3XI1Vfs6okIHv5eGi+UrzXeDCKoV46t8MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQY0EsAeDOxDVUQGUnJXF4cqpbfhTAfBgNVHSMEGDAWgBTA+9WHZhPtxW4P
XeRozOXrKIX/KTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dQdlZoMllUN2NWdUQxM2thTXpsNnlpRl95ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvMDFlYmMyLTg0ZDAtNGFlMy1hMmMyLWEzYjZiZTRhOWU5Yi8x
L0dOQkxBSGd6c1ExVkVCbEp5VnhlSEtxVzM0VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
MDFlYmMyLTg0ZDAtNGFlMy1hMmMyLWEzYjZiZTRhOWU5Yi8xL3dQdlZoMllUN2NW
dUQxM2thTXpsNnlpRl95ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArndRDANBgkqhkiG9w0BAQsFAAOC
AQEAqAY1CEL/VPSgLEiZmwJViMDsCNHcCkwFFLibrbULI6IyRQ1mATrapZFjR+On
6yQELrBwK9TRJhUPf2vaSrLg0HGGCvAsdNUqVWXnPxAGh0hjMySrzHZkzlfjmuQd
2wix+2+SVOJT49oyBfZjynfNelCHaqRNyoqiPM8TW2Ln2l+kNfNT/aIxHqcMwcyo
ChDk5mUPSqk59n6YYZ73iIfLO1AiAKp5GeZ3UJTj/cNq3QH4uie+ZZH1tedb7u/A
l4AZHj5pjvzKWsONGXVC2d7ClkBmtIzkIUw89cI53de/WwKzHU1TMuriyrPQ/jqZ
yIZL4AvRJf+oCElErdC9t+E3pw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:29 2023 by rpki-client on console-ams.rpki-client.org