Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gTELWC8G4twhd3_IiWRdoKBzAUg.roa
File: gTELWC8G4twhd3_IiWRdoKBzAUg.roa (raw, json)
Hash identifier: EtNhCkM+Dlmr+caZvZ6F5QletYmi6QKui1Ye4ZunbmY=
Subject key identifier: 81:31:0B:58:2F:06:E2:DC:21:77:7F:C8:89:64:5D:A0:A0:73:01:48
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 01856CF879B75DC8F7D6EFD460F8E247EDFC
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gTELWC8G4twhd3_IiWRdoKBzAUg.roa
Signing time: Sun 01 Jan 2023 10:55:01 +0000
ROA not before: Sun 01 Jan 2023 10:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29518
IP address blocks: 185.63.72.0/24 maxlen: 24
185.63.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:79:b7:5d:c8:f7:d6:ef:d4:60:f8:e2:47:ed:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Jan 1 10:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81310b582f06e2dc21777fc889645da0a0730148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:a4:5f:3e:10:e3:41:24:b7:8e:6b:2e:0a:
9d:b4:45:b4:d4:d7:8b:42:67:b3:83:b4:a0:c5:84:
47:9e:e4:f5:cd:b7:43:3e:61:d6:a3:4b:2a:46:a1:
f7:e4:9f:65:55:40:96:81:d7:7e:c6:46:1f:e3:e4:
af:5a:e0:78:83:c1:33:a0:81:9b:a3:ff:3a:3a:33:
0a:2d:34:51:89:4f:a7:ed:c1:fe:b1:28:5f:ab:b8:
bf:3c:1b:e7:69:09:93:a3:00:fa:52:4b:1b:40:d7:
0f:a8:ae:a5:ac:e1:4a:60:a5:23:b4:b7:4c:4c:4a:
0b:03:cd:45:9a:46:3f:15:fc:12:6e:3b:84:6a:41:
77:23:7a:67:39:38:08:38:e3:38:7b:55:d4:0b:7e:
58:d5:2c:3f:b6:2d:29:6f:1a:b8:ca:54:20:00:c1:
e5:7d:5d:f8:c7:ca:44:53:a6:b2:a7:59:93:0a:2c:
5c:b9:ea:36:b3:a8:9f:6b:59:79:e7:3a:1a:8b:cd:
be:c5:10:91:76:db:23:ca:7a:18:36:0d:15:80:5d:
63:d0:d5:23:05:f2:08:a4:3c:0d:2a:8a:2c:8c:dc:
13:46:8d:3d:e4:f6:cd:da:92:ef:6a:e1:3d:5f:3a:
5e:41:3b:13:92:fa:98:77:ae:b8:88:c6:0f:5b:a0:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:0B:58:2F:06:E2:DC:21:77:7F:C8:89:64:5D:A0:A0:73:01:48
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gTELWC8G4twhd3_IiWRdoKBzAUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.72.0/24
185.63.74.0/24
Signature Algorithm: sha256WithRSAEncryption
41:68:70:14:e3:d9:fd:ba:13:f0:f8:ff:4a:44:e4:3c:29:50:
08:0e:78:5d:87:1e:86:97:c0:db:e3:f6:8e:39:aa:bb:f3:54:
db:b7:83:30:d5:f4:7f:c6:3f:8a:0e:da:ee:ef:35:a9:4d:c0:
5a:f2:a9:96:74:55:71:b0:41:d3:00:f8:03:e6:50:28:0b:0a:
eb:e7:fe:c3:ef:5b:dd:2e:b8:df:84:77:36:3c:a2:4e:6d:45:
05:c3:3d:a3:8e:89:b7:04:ab:d7:5e:8f:71:0a:0c:d5:55:1f:
cd:e0:c0:71:87:b4:7f:25:f8:36:15:31:4d:90:a5:cd:45:d8:
5b:cd:25:e4:65:a1:10:ed:f6:42:d8:65:03:96:5e:9d:4e:cb:
c5:ad:48:80:6e:48:0b:57:bf:06:cc:bf:05:f3:d6:cc:18:ef:
99:59:2c:78:42:73:4c:f4:94:ed:29:32:4e:72:39:4d:c6:d0:
0f:91:77:61:14:fb:75:8f:f6:63:bd:34:e9:39:c4:71:45:9c:
37:88:8b:9b:80:84:22:71:6d:6e:21:6d:3d:f7:4a:9a:f0:eb:
c9:80:c7:ba:5e:0c:f7:bf:33:ba:9b:c6:03:60:36:26:59:48:
71:84:04:f9:01:c2:d7:dd:64:54:90:11:a7:aa:2c:c2:4b:99:
fc:15:ad:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVs+Hm3Xcj31u/UYPjiR+38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjM3Y2NmMzkzZjUyZTBiNTZmYjU4ZWUzNWFmNTQ0MTFk
YWY2NDQwHhcNMjMwMTAxMTA1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTMxMGI1ODJmMDZlMmRjMjE3NzdmYzg4OTY0NWRhMGEwNzMwMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLKkXz4Q40Ekt45rLgqdtEW01NeL
Qmezg7SgxYRHnuT1zbdDPmHWo0sqRqH35J9lVUCWgdd+xkYf4+SvWuB4g8EzoIGb
o/86OjMKLTRRiU+n7cH+sShfq7i/PBvnaQmTowD6UksbQNcPqK6lrOFKYKUjtLdM
TEoLA81FmkY/FfwSbjuEakF3I3pnOTgIOOM4e1XUC35Y1Sw/ti0pbxq4ylQgAMHl
fV34x8pEU6ayp1mTCixcueo2s6ifa1l55zoai82+xRCRdtsjynoYNg0VgF1j0NUj
BfIIpDwNKoosjNwTRo095PbN2pLvauE9XzpeQTsTkvqYd664iMYPW6CCLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIExC1gvBuLcIXd/yIlkXaCgcwFIMB8GA1UdIwQY
MBaAFDtjfM85P1LgtW+1juNa9UQR2vZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYt
MzA3MzNkMzcwZGYzLzEvZ1RFTFdDOEc0dHdoZDNfSWlXUmRvS0J6QVVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYtMzA3MzNkMzcwZGYz
LzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuT9IAwQA
uT9KMA0GCSqGSIb3DQEBCwUAA4IBAQBBaHAU49n9uhPw+P9KROQ8KVAIDnhdhx6G
l8Db4/aOOaq781Tbt4Mw1fR/xj+KDtru7zWpTcBa8qmWdFVxsEHTAPgD5lAoCwrr
5/7D71vdLrjfhHc2PKJObUUFwz2jjom3BKvXXo9xCgzVVR/N4MBxh7R/Jfg2FTFN
kKXNRdhbzSXkZaEQ7fZC2GUDll6dTsvFrUiAbkgLV78GzL8F89bMGO+ZWSx4QnNM
9JTtKTJOcjlNxtAPkXdhFPt1j/ZjvTTpOcRxRZw3iIubgIQicW1uIW0990qa8OvJ
gMe6Xgz3vzO6m8YDYDYmWUhxhAT5AcLX3WRUkBGnqizCS5n8Fa1F
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:48 2025 by rpki-client