Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GP_tygGg-PC93zWr_Sl1ZovA38I.roa
File: GP_tygGg-PC93zWr_Sl1ZovA38I.roa (raw, json)
Hash identifier: Fw/wVqp7J1lcwt/5Mr90ws2NnBKF1S/luny0gTTh4yc=
Subject key identifier: 18:FF:ED:CA:01:A0:F8:F0:BD:DF:35:AB:FD:29:75:66:8B:C0:DF:C2
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E7254D22412CB7D95120399AC761
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GP_tygGg-PC93zWr_Sl1ZovA38I.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31261
IP address blocks: 81.23.0.0/21 maxlen: 21
81.23.9.0/24 maxlen: 24
81.23.8.0/23 maxlen: 23
81.23.14.0/24 maxlen: 24
37.16.80.0/22 maxlen: 22
185.68.145.0/24 maxlen: 24
83.220.32.0/19 maxlen: 19
185.68.146.0/23 maxlen: 23
77.242.15.0/24 maxlen: 24
217.171.152.0/21 maxlen: 21
188.164.214.0/23 maxlen: 23
185.196.246.0/23 maxlen: 23
185.6.172.0/22 maxlen: 22
185.6.174.0/24 maxlen: 24
188.68.189.0/24 maxlen: 24
188.164.212.0/24 maxlen: 24
89.107.141.0/24 maxlen: 24
89.107.142.0/23 maxlen: 23
188.164.209.0/24 maxlen: 24
77.74.79.0/24 maxlen: 24
5.8.177.0/24 maxlen: 24
91.198.212.0/24 maxlen: 24
94.124.192.0/21 maxlen: 21
77.74.72.0/22 maxlen: 22
77.220.211.0/24 maxlen: 24
77.74.78.0/24 maxlen: 24
77.220.209.0/24 maxlen: 24
185.22.24.0/24 maxlen: 24
77.74.77.0/24 maxlen: 24
109.73.12.0/23 maxlen: 23
93.191.16.0/21 maxlen: 21
93.191.23.0/24 maxlen: 24
109.73.0.0/22 maxlen: 22
109.73.4.0/22 maxlen: 22
109.73.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e7:25:4d:22:41:2c:b7:d9:51:20:39:9a:c7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18ffedca01a0f8f0bddf35abfd2975668bc0dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:2e:86:95:a8:c1:8a:89:4f:ae:7a:84:f8:
c5:91:ed:68:e3:e7:fe:00:76:e5:fe:a5:9e:d0:59:
4b:3a:25:1e:e7:ec:4e:6c:88:fe:d2:cf:98:8f:10:
f5:14:7d:26:38:32:a8:e0:a7:e6:b2:ee:ae:7a:75:
04:5f:3c:6b:a9:77:a3:e6:4a:98:9a:b0:a0:69:0e:
2e:14:e4:2a:55:6a:53:26:4a:9f:b4:45:64:ae:fb:
e4:39:b1:2e:83:7f:9b:02:0f:7e:60:41:c5:80:4a:
89:3e:80:ad:bc:8b:a5:16:9a:12:6f:30:48:55:e1:
b6:ff:ac:83:3f:da:72:e0:78:5a:b2:05:f8:47:60:
97:d3:e4:9d:69:e8:9a:2c:13:38:ae:7e:f8:5b:11:
16:8f:23:8f:10:ad:d6:29:d6:36:61:45:61:73:19:
ea:8d:a6:42:2a:1e:c9:82:36:10:3c:5b:d1:53:8d:
7d:da:95:36:ad:41:05:af:20:4e:b3:c1:47:36:89:
b5:41:8a:71:a2:17:c8:48:6b:6a:c6:7e:b3:d6:05:
97:92:99:28:25:71:fc:44:93:1e:c6:01:38:eb:c6:
35:bc:7e:b2:ca:a3:18:37:76:71:56:4a:c0:b5:f4:
05:92:41:52:5a:98:67:7d:01:d0:9c:7d:2a:66:bf:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:ED:CA:01:A0:F8:F0:BD:DF:35:AB:FD:29:75:66:8B:C0:DF:C2
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GP_tygGg-PC93zWr_Sl1ZovA38I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.177.0/24
37.16.80.0/22
77.74.72.0/22
77.74.77.0-77.74.79.255
77.220.209.0/24
77.220.211.0/24
77.242.15.0/24
81.23.0.0-81.23.9.255
81.23.14.0/24
83.220.32.0/19
89.107.141.0-89.107.143.255
91.198.212.0/24
93.191.16.0/21
94.124.192.0/21
109.73.0.0-109.73.13.255
185.6.172.0/22
185.22.24.0/24
185.68.145.0-185.68.147.255
185.196.246.0/23
188.68.189.0/24
188.164.209.0/24
188.164.212.0/24
188.164.214.0/23
217.171.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:96:c1:6a:9c:dc:ed:33:4c:26:29:91:88:bb:16:7f:5a:c2:
9a:99:28:12:06:eb:6a:68:a8:0d:64:32:b6:65:77:08:50:27:
ae:fb:1c:0a:f3:b3:6b:fc:82:45:d1:76:17:64:80:67:7e:4e:
86:23:97:39:87:02:33:4d:61:4e:5d:3f:6b:1c:3f:1b:47:38:
fd:b5:43:28:b2:76:84:1f:b5:b3:7d:47:de:dd:44:01:9d:95:
1b:5b:c7:fd:b6:b6:03:94:26:db:fc:da:d5:53:b0:14:8e:6d:
34:02:ba:9b:42:b9:9a:f9:57:83:fc:cc:88:be:98:11:ef:03:
1b:d6:92:8a:5e:6e:93:70:bf:c5:38:26:68:75:b9:57:d4:b0:
18:2e:10:78:b7:1f:b9:15:f9:f4:5b:31:ef:31:be:08:70:88:
29:7d:20:8e:9f:00:4b:fa:09:ea:30:bf:2c:2e:f2:97:5d:21:
84:63:8c:90:8a:da:6a:e3:54:91:61:ad:31:1d:87:1b:01:c4:
6a:17:51:d7:09:91:2a:05:fd:d1:eb:03:6c:5e:8d:27:f8:0f:
4d:2e:e6:fd:a3:52:0e:c6:04:82:77:06:cb:52:26:d2:bb:8d:
da:31:24:ce:7f:d4:ee:40:cc:56:53:87:50:a0:fa:13:31:1e:
de:38:e8:49
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAYVu1OclTSJBLLfZUSA5msdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGZmZWRjYTAxYTBmOGYwYmRkZjM1YWJmZDI5NzU2NjhiYzBkZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BwuhpWowYqJT656hPjFke1o4+f+
AHbl/qWe0FlLOiUe5+xObIj+0s+YjxD1FH0mODKo4Kfmsu6uenUEXzxrqXej5kqY
mrCgaQ4uFOQqVWpTJkqftEVkrvvkObEug3+bAg9+YEHFgEqJPoCtvIulFpoSbzBI
VeG2/6yDP9py4HhasgX4R2CX0+SdaeiaLBM4rn74WxEWjyOPEK3WKdY2YUVhcxnq
jaZCKh7JgjYQPFvRU4192pU2rUEFryBOs8FHNom1QYpxohfISGtqxn6z1gWXkpko
JXH8RJMexgE468Y1vH6yyqMYN3ZxVkrAtfQFkkFSWphnfQHQnH0qZr+hZQIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFBj/7coBoPjwvd81q/0pdWaLwN/CMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvR1BfdHlnR2ctUEM5M3pXcl9TbDFab3ZBMzhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBAAF
CLEDBAIlEFADBAJNSkgwDAMEAE1KTQMEBE1KQAMEAE3c0QMEAE3c0wMEAE3yDzAL
AwMAURcDBAFRFwgDBABRFw4DBAVT3CAwDAMEAFlrjQMEBFlrgAMEAFvG1AMEA12/
EAMEA158wDALAwMAbUkDBAFtSQwDBAK5BqwDBAC5FhgwDAMEALlEkQMEArlEkAME
AbnE9gMEALxEvQMEALyk0QMEALyk1AMEAbyk1gMEA9mrmDANBgkqhkiG9w0BAQsF
AAOCAQEAopbBapzc7TNMJimRiLsWf1rCmpkoEgbramioDWQytmV3CFAnrvscCvOz
a/yCRdF2F2SAZ35OhiOXOYcCM01hTl0/axw/G0c4/bVDKLJ2hB+1s31H3t1EAZ2V
G1vH/ba2A5Qm2/za1VOwFI5tNAK6m0K5mvlXg/zMiL6YEe8DG9aSil5uk3C/xTgm
aHW5V9SwGC4QeLcfuRX59Fsx7zG+CHCIKX0gjp8AS/oJ6jC/LC7yl10hhGOMkIra
auNUkWGtMR2HGwHEahdR1wmRKgX90esDbF6NJ/gPTS7m/aNSDsYEgncGy1Im0ruN
2jEkzn/U7kDMVlOHUKD6EzEe3jjoSQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:16 2025 by rpki-client