Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GTE1p2AIJSbS7FFTbT7VCv9_K-0.roa
File: GTE1p2AIJSbS7FFTbT7VCv9_K-0.roa (raw, json)
Hash identifier: 2VzCVNGoH4LnqvlUwuwMbggV2P+yxSSwxrmVLQEECx8=
Subject key identifier: 19:31:35:A7:60:08:25:26:D2:EC:51:53:6D:3E:D5:0A:FF:7F:2B:ED
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18F3BDC0
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GTE1p2AIJSbS7FFTbT7VCv9_K-0.roa
Signing time: Mon 28 Feb 2022 23:19:18 +0000
ROA not before: Mon 28 Feb 2022 23:19:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 185.172.167.0/24 maxlen: 32
195.85.49.0/24 maxlen: 32
185.226.74.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418627008 (0x18f3bdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 28 23:19:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=193135a760082526d2ec51536d3ed50aff7f2bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:cd:e2:96:0f:72:6b:fb:f1:cc:d0:81:a7:
8c:32:f8:69:cd:fa:18:ea:e9:c7:3c:93:50:91:5b:
5d:b5:bf:4a:a6:49:fc:ae:26:7f:41:d4:f1:c3:8a:
8f:75:69:eb:ea:26:75:85:d7:fe:a3:33:29:b1:d7:
86:81:d7:1c:29:c8:32:c3:48:51:6f:57:9c:bc:60:
81:8e:b3:44:43:6e:0a:fb:a8:d0:e3:df:9d:5f:9b:
f4:b9:c2:66:b1:02:ad:73:f2:5b:57:0c:b6:d4:97:
40:e3:3e:74:1c:b7:fc:ae:5a:ff:ba:0c:b4:8b:d7:
de:b9:ce:53:15:9e:bf:5a:db:38:eb:d6:80:d8:af:
c3:72:6f:aa:63:39:be:d0:07:ac:15:17:46:e1:a8:
f2:0b:27:63:be:cb:ca:4c:d6:35:07:02:6e:d9:f7:
0d:e9:da:79:fb:53:97:0d:f7:21:08:04:c3:62:fe:
5c:89:7f:41:e8:39:9b:1b:41:75:2b:e1:aa:ab:59:
df:10:f3:fb:cc:b4:de:59:11:e3:98:f3:97:f3:a8:
a4:da:96:46:03:39:7d:6e:32:91:5b:fb:06:e6:7f:
af:cf:21:8c:be:c8:9a:69:1a:c4:ea:5a:93:2d:d5:
01:36:3d:e5:19:eb:fe:eb:c0:82:65:8f:e9:9f:18:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:35:A7:60:08:25:26:D2:EC:51:53:6D:3E:D5:0A:FF:7F:2B:ED
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GTE1p2AIJSbS7FFTbT7VCv9_K-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
185.226.74.0/24
195.85.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:70:6b:23:cd:9a:78:88:9c:91:ef:75:c0:26:a3:59:24:c7:
4d:e2:f7:b3:5b:54:3a:cf:aa:bf:76:1c:5b:c6:62:65:e4:90:
18:29:21:bd:ea:40:62:8a:2e:4f:9a:92:28:f2:6d:ea:21:4b:
90:08:1c:5d:54:1a:11:4b:68:d6:a8:fd:3e:40:6a:9f:f0:8e:
e7:c8:1d:99:2e:57:8c:81:e9:9c:48:c7:b2:c0:b3:bd:fd:7a:
12:e1:99:a3:da:f3:8a:96:f0:8f:1d:4b:df:d0:93:48:2b:49:
f6:19:fc:1b:9f:9a:aa:c2:b9:bc:c1:61:43:67:15:19:05:7a:
4c:4c:08:1c:83:84:56:e8:8c:f3:a1:1f:db:4e:99:57:58:5e:
6f:8e:9a:43:39:d4:aa:71:27:e7:ef:39:a5:dd:2c:a8:e2:80:
64:8b:d4:d6:64:83:b4:44:84:d2:c2:10:f4:df:a5:9e:92:bc:
0d:6b:15:16:13:4b:b1:ab:58:6d:72:61:41:be:a3:96:04:53:
4f:20:cd:94:6b:09:b7:7d:c0:ca:65:d3:d0:20:cb:4d:88:dd:
c6:aa:64:c5:5a:a4:fe:9d:c5:b9:7a:a8:3c:e4:b9:ac:7f:fb:
97:ee:f1:63:e4:2d:2b:98:a9:34:19:b3:95:61:95:f3:ec:c2:
e4:15:fd:69
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEGPO9wDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDIy
ODIzMTkxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTkzMTM1YTc2MDA4
MjUyNmQyZWM1MTUzNmQzZWQ1MGFmZjdmMmJlZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYZzeKWD3Jr+/HM0IGnjDL4ac36GOrpxzyTUJFbXbW/SqZJ
/K4mf0HU8cOKj3Vp6+omdYXX/qMzKbHXhoHXHCnIMsNIUW9XnLxggY6zRENuCvuo
0OPfnV+b9LnCZrECrXPyW1cMttSXQOM+dBy3/K5a/7oMtIvX3rnOUxWev1rbOOvW
gNivw3JvqmM5vtAHrBUXRuGo8gsnY77LykzWNQcCbtn3DenaeftTlw33IQgEw2L+
XIl/Qeg5mxtBdSvhqqtZ3xDz+8y03lkR45jzl/OopNqWRgM5fW4ykVv7BuZ/r88h
jL7ImmkaxOpaky3VATY95Rnr/uvAgmWP6Z8YkR8CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQZMTWnYAglJtLsUVNtPtUK/38r7TAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L0dURTFwMkFJSlNiUzdGRlRiVDdWQ3Y5X0stMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEALmspwMEALniSgMEAMNVMTANBgkq
hkiG9w0BAQsFAAOCAQEAvXBrI82aeIicke91wCajWSTHTeL3s1tUOs+qv3YcW8Zi
ZeSQGCkhvepAYoouT5qSKPJt6iFLkAgcXVQaEUto1qj9PkBqn/CO58gdmS5XjIHp
nEjHssCzvf16EuGZo9rzipbwjx1L39CTSCtJ9hn8G5+aqsK5vMFhQ2cVGQV6TEwI
HIOEVuiM86Ef206ZV1heb46aQznUqnEn5+85pd0sqOKAZIvU1mSDtESE0sIQ9N+l
npK8DWsVFhNLsatYbXJhQb6jlgRTTyDNlGsJt33AymXT0CDLTYjdxqpkxVqk/p3F
uXqoPOS5rH/7l+7xY+QtK5ipNBmzlWGV8+zC5BX9aQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org