Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GTF4mYFCoDLn-6Xce7L8PrQfi3k.roa
File: GTF4mYFCoDLn-6Xce7L8PrQfi3k.roa (raw, json)
Hash identifier: 9ymZWpd9ydwJU3SWmSaCcFWY3Tw+zOJvqPOqYiNQciE=
Subject key identifier: 19:31:78:99:81:42:A0:32:E7:FB:A5:DC:7B:B2:FC:3E:B4:1F:8B:79
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018340FFE5E1DF257EAAA2BAFFBBF61AAB61
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GTF4mYFCoDLn-6Xce7L8PrQfi3k.roa
Signing time: Thu 15 Sep 2022 11:54:15 +0000
ROA not before: Thu 15 Sep 2022 11:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205361
IP address blocks: 185.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:ff:e5:e1:df:25:7e:aa:a2:ba:ff:bb:f6:1a:ab:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 15 11:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=193178998142a032e7fba5dc7bb2fc3eb41f8b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:82:fe:87:3b:5b:b1:26:99:96:b1:ea:bc:
1c:30:e5:bd:bb:a0:bd:c8:ce:87:ea:b5:8e:5a:2b:
b5:63:82:a2:e6:1a:0f:ff:ed:30:2e:81:6c:af:4f:
66:a9:0c:ca:a0:8e:31:05:34:e8:9b:cd:30:1e:66:
e6:60:f8:48:e1:a4:91:0e:6a:48:40:83:3a:0c:a1:
c3:af:51:fa:20:6d:be:99:3d:8e:53:1d:b7:e9:d6:
72:10:25:bc:c5:a9:5f:10:77:59:3f:ca:ab:22:47:
b4:5c:66:27:76:86:22:b1:f9:06:43:de:1c:f2:39:
b4:4b:e7:db:b4:a2:c3:5c:07:f1:35:6d:1b:f7:3e:
48:a5:ff:92:eb:df:58:e1:c2:84:c6:2b:3f:fe:e6:
f6:b4:0a:f4:91:e8:48:e3:11:7f:9d:63:b8:f0:29:
11:27:61:b0:0a:6b:9d:f1:e9:df:b1:ac:6b:c6:c8:
48:46:3f:8e:5b:a5:0e:53:67:c6:23:b2:30:9f:c4:
7e:8b:0e:0f:6c:41:c1:b0:43:44:ed:95:b8:45:12:
df:21:37:a6:d4:73:09:ee:ea:bc:23:32:83:69:f2:
2c:81:ef:bf:39:a9:fd:90:bb:4d:39:21:bd:53:c7:
91:ff:0e:94:cc:e8:30:1f:35:15:07:95:f2:fa:07:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:78:99:81:42:A0:32:E7:FB:A5:DC:7B:B2:FC:3E:B4:1F:8B:79
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GTF4mYFCoDLn-6Xce7L8PrQfi3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3e:1e:38:10:01:98:8d:39:18:a1:17:c9:69:e2:ca:dd:ee:
b1:18:9e:2e:e0:a3:0a:04:fe:f9:a7:26:a2:24:26:4c:ac:41:
f7:b9:3c:33:42:cc:96:bb:68:80:7c:62:7a:09:a7:60:b9:3e:
82:91:70:d3:a5:69:eb:78:45:3e:4f:82:e3:cf:d9:81:32:0e:
fc:8b:81:da:d4:14:80:75:58:22:bd:d7:f6:36:9d:d3:0d:af:
d3:e8:0c:da:c7:20:a9:9d:04:cc:f2:c0:ea:aa:14:dc:3c:7a:
25:c3:a1:b1:9c:b4:44:96:9c:8d:96:52:b3:9f:35:16:68:6d:
69:11:86:10:69:aa:81:db:52:75:6b:27:64:a4:3c:c3:fe:8c:
97:49:e3:37:b6:a5:59:6e:d6:25:a8:41:60:1d:7b:72:98:bb:
02:38:12:fa:76:62:2d:4d:2a:59:85:5e:5e:e1:b4:18:3f:24:
f1:8f:14:f3:d0:a1:12:0b:e1:24:38:67:d3:9d:b3:08:11:d7:
20:9e:68:3b:a6:e8:6d:c0:88:09:b3:ad:7f:d6:31:8a:7c:a4:
b7:95:a6:3c:ba:21:ee:2d:7b:0d:dd:bb:80:09:c7:33:4e:aa:
3c:05:95:ee:11:2b:a6:2e:cd:1a:42:8c:9f:ea:da:af:76:e3:
10:86:ea:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNA/+Xh3yV+qqK6/7v2GqthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjIwOTE1MTE1NDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTMxNzg5OTgxNDJhMDMyZTdmYmE1ZGM3YmIyZmMzZWI0MWY4Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOSC/oc7W7EmmZax6rwcMOW9u6C9
yM6H6rWOWiu1Y4Ki5hoP/+0wLoFsr09mqQzKoI4xBTTom80wHmbmYPhI4aSRDmpI
QIM6DKHDr1H6IG2+mT2OUx236dZyECW8xalfEHdZP8qrIke0XGYndoYisfkGQ94c
8jm0S+fbtKLDXAfxNW0b9z5Ipf+S699Y4cKExis//ub2tAr0kehI4xF/nWO48CkR
J2GwCmud8enfsaxrxshIRj+OW6UOU2fGI7Iwn8R+iw4PbEHBsENE7ZW4RRLfITem
1HMJ7uq8IzKDafIsge+/Oan9kLtNOSG9U8eR/w6UzOgwHzUVB5Xy+gcEnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkxeJmBQqAy5/ul3Huy/D60H4t5MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvR1RGNG1ZRkNvRExuLTZYY2U3TDhQclFmaTNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueEAMA0G
CSqGSIb3DQEBCwUAA4IBAQBGPh44EAGYjTkYoRfJaeLK3e6xGJ4u4KMKBP75pyai
JCZMrEH3uTwzQsyWu2iAfGJ6CadguT6CkXDTpWnreEU+T4Ljz9mBMg78i4Ha1BSA
dVgivdf2Np3TDa/T6AzaxyCpnQTM8sDqqhTcPHolw6GxnLRElpyNllKznzUWaG1p
EYYQaaqB21J1aydkpDzD/oyXSeM3tqVZbtYlqEFgHXtymLsCOBL6dmItTSpZhV5e
4bQYPyTxjxTz0KESC+EkOGfTnbMIEdcgnmg7puhtwIgJs61/1jGKfKS3laY8uiHu
LXsN3buACcczTqo8BZXuESumLs0aQoyf6tqvduMQhurw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org