Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/GtcO-32ZQH02VnH60BIt7Q4gpCA.roa
File: GtcO-32ZQH02VnH60BIt7Q4gpCA.roa (raw, json)
Hash identifier: pjzu7GEy6FVq2hB1Y2YjogzceYBMjmtKn5fvM9Tmupo=
Subject key identifier: 1A:D7:0E:FB:7D:99:40:7D:36:56:71:FA:D0:12:2D:ED:0E:20:A4:20
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0A7B9A4E
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/GtcO-32ZQH02VnH60BIt7Q4gpCA.roa
Signing time: Sat 01 Jan 2022 08:57:09 +0000
ROA not before: Sat 01 Jan 2022 08:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202505
IP address blocks: 213.142.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175872590 (0xa7b9a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 08:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ad70efb7d99407d365671fad0122ded0e20a420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:44:c8:5b:34:78:13:9d:82:62:57:7c:c8:
97:4b:cc:79:4c:9e:d9:03:f6:d8:f9:4c:52:5f:0e:
38:48:65:fb:3e:56:bb:42:3c:4e:77:bf:20:cc:9e:
08:cf:f5:12:89:07:26:8e:f2:51:ac:8f:83:53:d7:
a6:a6:d3:51:b6:15:60:4b:f7:7b:40:7d:db:e5:a1:
45:f2:dd:65:3b:de:19:c0:2b:05:76:03:1f:57:9e:
98:01:9e:4b:d1:62:c4:43:29:98:b4:01:8c:a4:14:
29:88:fa:88:9a:4e:03:eb:5a:44:a6:fa:57:c3:78:
8c:3c:b8:38:7f:08:b5:d2:3b:29:ca:9b:04:7b:a1:
c2:44:ce:85:86:4b:97:39:22:63:d4:b1:b0:fb:12:
37:9f:71:ff:64:1c:08:e6:86:f7:f6:94:7c:e6:7c:
b7:58:00:37:76:49:8c:e5:a2:6a:aa:bf:83:97:64:
56:2e:1f:fe:39:90:47:88:c8:0a:04:8a:e3:3f:37:
43:63:1b:e2:c9:eb:d7:62:69:5e:dd:6a:b9:48:b0:
8f:ef:07:4b:6e:55:79:43:93:b7:10:7a:98:3f:32:
be:47:e4:bb:6b:71:af:8c:51:cd:11:86:ff:f3:d8:
e6:35:93:43:e5:cf:32:98:e2:57:0d:5a:ad:4c:64:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D7:0E:FB:7D:99:40:7D:36:56:71:FA:D0:12:2D:ED:0E:20:A4:20
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/GtcO-32ZQH02VnH60BIt7Q4gpCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.157.0/24
Signature Algorithm: sha256WithRSAEncryption
76:97:85:d4:4f:12:3b:e5:ec:27:8d:69:4a:e6:4f:af:ce:c5:
06:dc:c3:fd:ea:29:50:e6:34:75:98:0a:f5:38:ec:69:03:6f:
4a:5c:df:d7:bc:8a:a0:d2:3f:b3:6c:66:7e:d1:7b:38:4c:50:
b4:ac:d5:eb:50:94:90:fd:51:c9:0c:6f:9b:a9:eb:12:16:82:
6d:07:c7:9a:23:ee:c5:3d:06:f5:c0:31:4e:93:ad:63:e0:ee:
d5:46:d9:55:d1:3e:a1:de:eb:d3:d8:e6:d6:d0:d1:4a:45:10:
4d:63:1f:1c:d1:b2:48:76:6d:69:d1:f2:59:b6:8b:09:c5:98:
9f:e0:42:b7:47:b6:0e:b5:65:03:b0:77:ae:93:f1:db:83:71:
6d:ce:e1:1a:4a:00:68:b6:40:2c:7b:8a:19:0d:61:43:aa:f8:
b9:53:63:a4:ef:c4:5f:dd:2b:c8:f0:c0:14:4a:c8:17:56:f5:
45:2d:51:e1:a3:1e:76:a7:00:2d:29:d3:1b:91:79:14:10:0f:
f4:7a:b7:83:72:a0:ce:0f:7e:58:ec:c7:fe:51:45:7f:60:a4:
18:20:84:4b:42:10:4d:90:a7:c2:de:4a:7e:fc:27:74:3e:1b:
25:89:65:8f:8c:25:1b:59:f4:ec:c5:10:9e:43:48:7d:39:0a:
06:54:14:f2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECnuaTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjcxZTliMTNmNWMzMzlhNTg2OTJlZWFiZTcyZWFhNDA2YmJiZDdkMB4XDTIyMDEw
MTA4NTcwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWFkNzBlZmI3ZDk5
NDA3ZDM2NTY3MWZhZDAxMjJkZWQwZTIwYTQyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOqGRMhbNHgTnYJiV3zIl0vMeUye2QP22PlMUl8OOEhl+z5W
u0I8Tne/IMyeCM/1EokHJo7yUayPg1PXpqbTUbYVYEv3e0B92+WhRfLdZTveGcAr
BXYDH1eemAGeS9FixEMpmLQBjKQUKYj6iJpOA+taRKb6V8N4jDy4OH8ItdI7Kcqb
BHuhwkTOhYZLlzkiY9SxsPsSN59x/2QcCOaG9/aUfOZ8t1gAN3ZJjOWiaqq/g5dk
Vi4f/jmQR4jICgSK4z83Q2Mb4snr12JpXt1quUiwj+8HS25VeUOTtxB6mD8yvkfk
u2txr4xRzRGG//PY5jWTQ+XPMpjiVw1arUxk1NkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQa1w77fZlAfTZWcfrQEi3tDiCkIDAfBgNVHSMEGDAWgBSrcemxP1wzmlhp
Luq+cuqkBru9fTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3EzSHBzVDljTTVwWWFTN3F2bkxxcEFhN3ZYMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvNmJhMzljLWVmMWQtNGQ0OC05ODJiLWNmNGI5MDA5OTdhMC8x
L0d0Y08tMzJaUUgwMlZuSDYwQkl0N1E0Z3BDQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
NmJhMzljLWVmMWQtNGQ0OC05ODJiLWNmNGI5MDA5OTdhMC8xL3EzSHBzVDljTTVw
WWFTN3F2bkxxcEFhN3ZYMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWOnTANBgkqhkiG9w0BAQsFAAOC
AQEAdpeF1E8SO+XsJ41pSuZPr87FBtzD/eopUOY0dZgK9TjsaQNvSlzf17yKoNI/
s2xmftF7OExQtKzV61CUkP1RyQxvm6nrEhaCbQfHmiPuxT0G9cAxTpOtY+Du1UbZ
VdE+od7r09jm1tDRSkUQTWMfHNGySHZtadHyWbaLCcWYn+BCt0e2DrVlA7B3rpPx
24Nxbc7hGkoAaLZALHuKGQ1hQ6r4uVNjpO/EX90ryPDAFErIF1b1RS1R4aMedqcA
LSnTG5F5FBAP9Hq3g3Kgzg9+WOzH/lFFf2CkGCCES0IQTZCnwt5KfvwndD4bJYll
j4wlG1n07MUQnkNIfTkKBlQU8g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org