Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GWWrec_FuBByTk16A0LMxkcjI5Q.roa
File: GWWrec_FuBByTk16A0LMxkcjI5Q.roa (raw, json)
Hash identifier: ZWNSDW+AL60lll9T8KWO9kkYnCVC+54kmTbrBojYsHM=
Subject key identifier: 19:65:AB:79:CF:C5:B8:10:72:4E:4D:7A:03:42:CC:C6:47:23:23:94
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183F555F2A3A4B1A9177253C2BC011A10C1
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GWWrec_FuBByTk16A0LMxkcjI5Q.roa
Signing time: Thu 20 Oct 2022 12:19:54 +0000
ROA not before: Thu 20 Oct 2022 12:19:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28753
IP address blocks: 185.172.130.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
185.94.166.0/24 maxlen: 24
91.103.253.0/24 maxlen: 24
45.133.246.0/24 maxlen: 24
185.125.51.0/24 maxlen: 24
45.138.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:55:f2:a3:a4:b1:a9:17:72:53:c2:bc:01:1a:10:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 20 12:19:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1965ab79cfc5b810724e4d7a0342ccc647232394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:38:cb:68:ca:01:70:10:7c:15:bc:27:11:
2e:28:4a:6f:c9:a8:80:51:64:07:c5:18:e5:19:e4:
46:61:dc:bc:2e:33:a0:ed:2b:55:62:09:65:52:9a:
ce:d3:5d:6b:0c:4c:99:0e:ee:ea:70:72:b1:38:08:
aa:4e:ac:fa:d0:8b:dd:b8:fe:72:9f:66:19:f1:0d:
a8:b3:a2:25:a6:79:b5:d7:e8:c3:5c:e0:e3:13:3e:
78:40:b7:03:4a:ca:a5:7c:85:5f:5e:12:cb:ea:0b:
9e:1b:f7:ab:7e:ee:a1:b7:2e:ca:04:08:05:64:a4:
60:b6:7a:af:d8:c2:7a:0f:c2:92:92:ff:b5:13:e4:
32:3b:0d:76:fe:6d:99:7d:fd:b6:b2:ae:5d:86:95:
0d:9b:7c:b7:39:71:cc:d1:49:df:9b:a7:70:c1:a5:
13:87:cf:b3:62:41:bb:91:3a:e9:c9:bd:45:1f:a5:
9c:94:d6:fd:17:94:d3:c3:8b:9b:a3:29:1e:90:4e:
1c:de:1c:99:cb:8a:f1:11:e3:e0:a2:0c:37:4e:04:
e3:4f:11:d6:ab:a7:df:95:50:26:80:8a:b0:90:78:
ee:02:37:79:08:4a:87:f3:48:d6:f2:46:de:40:a3:
ed:45:04:21:43:f7:f3:46:94:81:c8:2f:b2:5e:a8:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:AB:79:CF:C5:B8:10:72:4E:4D:7A:03:42:CC:C6:47:23:23:94
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GWWrec_FuBByTk16A0LMxkcjI5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.246.0/24
45.138.72.0/24
91.103.253.0/24
185.94.166.0/24
185.125.51.0/24
185.172.130.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:17:c3:d1:44:bb:d0:ab:4f:66:c7:91:66:13:37:15:20:c0:
7b:86:c4:87:87:80:25:c7:c9:69:f3:fd:47:2d:10:4c:dd:57:
89:af:54:f6:c6:e9:72:00:c7:33:57:75:38:7e:b1:03:37:71:
5e:7b:f9:ea:da:85:bf:29:e9:58:8d:96:69:6f:fe:54:16:fa:
6e:d2:31:a3:d6:9e:d5:85:0a:0e:c4:2c:99:e9:25:d3:ba:25:
9e:a6:ac:6b:a2:3f:cf:00:f8:b4:95:fb:38:68:4a:51:9a:18:
56:ef:a2:c9:49:5d:22:76:06:43:6a:a6:e6:2b:b6:08:aa:24:
20:2f:04:ae:2a:6b:dc:30:41:94:1b:8c:58:e4:89:be:07:9f:
ba:7a:9b:4a:ba:5b:0c:cf:5c:4b:b7:e1:78:0a:a5:27:86:46:
01:5c:82:00:30:f8:64:f7:b6:27:29:bf:29:76:d0:ee:5e:a8:
b1:57:e0:4c:a5:46:15:49:03:62:90:a4:f8:5c:46:7c:f7:1f:
47:7b:4e:b2:d0:ae:9d:11:64:14:ce:e6:2c:6e:38:3f:13:4a:
9a:aa:f0:62:75:b8:44:e8:2b:df:97:4b:a8:18:ed:d2:f9:7f:
a3:b9:ed:5c:19:ba:ec:06:c2:79:cf:dd:18:1a:e2:bf:86:28:
25:92:be:32
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYP1VfKjpLGpF3JTwrwBGhDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIxMDIwMTIxOTU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTY1YWI3OWNmYzViODEwNzI0ZTRkN2EwMzQyY2NjNjQ3MjMyMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGk4y2jKAXAQfBW8JxEuKEpvyaiA
UWQHxRjlGeRGYdy8LjOg7StVYgllUprO011rDEyZDu7qcHKxOAiqTqz60IvduP5y
n2YZ8Q2os6Ilpnm11+jDXODjEz54QLcDSsqlfIVfXhLL6gueG/erfu6hty7KBAgF
ZKRgtnqv2MJ6D8KSkv+1E+QyOw12/m2Zff22sq5dhpUNm3y3OXHM0Unfm6dwwaUT
h8+zYkG7kTrpyb1FH6WclNb9F5TTw4uboykekE4c3hyZy4rxEePgogw3TgTjTxHW
q6fflVAmgIqwkHjuAjd5CEqH80jW8kbeQKPtRQQhQ/fzRpSByC+yXqgiBwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBllq3nPxbgQck5NegNCzMZHIyOUMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvR1dXcmVjX0Z1QkJ5VGsxNkEwTE14a2NqSTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALYX2AwQA
LYpIAwQAW2f9AwQAuV6mAwQAuX0zAwQBuayCMA0GCSqGSIb3DQEBCwUAA4IBAQB/
F8PRRLvQq09mx5FmEzcVIMB7hsSHh4Alx8lp8/1HLRBM3VeJr1T2xulyAMczV3U4
frEDN3Fee/nq2oW/KelYjZZpb/5UFvpu0jGj1p7VhQoOxCyZ6SXTuiWepqxroj/P
APi0lfs4aEpRmhhW76LJSV0idgZDaqbmK7YIqiQgLwSuKmvcMEGUG4xY5Im+B5+6
eptKulsMz1xLt+F4CqUnhkYBXIIAMPhk97YnKb8pdtDuXqixV+BMpUYVSQNikKT4
XEZ89x9He06y0K6dEWQUzuYsbjg/E0qaqvBidbhE6Cvfl0uoGO3S+X+jue1cGbrs
BsJ5z90YGuK/higlkr4y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org