Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/guZHD4yqYfH7XJ8CfpdzCF2hfTg.roa
File: guZHD4yqYfH7XJ8CfpdzCF2hfTg.roa (raw, json)
Hash identifier: w7fSadYnMImkMHHCOX12D+wj4sF5zFoIUr34A9CPU8A=
Subject key identifier: 82:E6:47:0F:8C:AA:61:F1:FB:5C:9F:02:7E:97:73:08:5D:A1:7D:38
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 0C6EA87A
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/guZHD4yqYfH7XJ8CfpdzCF2hfTg.roa
Signing time: Sat 01 Jan 2022 05:02:24 +0000
ROA not before: Sat 01 Jan 2022 05:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50247
IP address blocks: 185.178.236.0/22 maxlen: 22
109.196.80.0/20 maxlen: 20
109.95.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208578682 (0xc6ea87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Jan 1 05:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82e6470f8caa61f1fb5c9f027e9773085da17d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:82:89:30:9f:a5:d2:70:a5:a3:db:44:12:
27:64:99:25:db:b6:64:ce:2a:99:56:ce:4e:1e:72:
7e:45:3c:46:24:93:86:7d:1a:ed:77:ed:99:4a:cf:
62:18:5b:35:24:7b:fa:84:23:69:60:04:9b:34:38:
04:5b:91:0c:8d:c9:f9:ec:e7:9d:2f:d2:77:38:65:
b5:90:4b:91:51:e6:c2:9f:7a:e7:05:7f:e5:f4:a8:
5a:7e:d9:44:c9:64:0c:3e:db:4f:b3:16:e5:df:e5:
b8:21:7d:29:b1:e9:e2:6c:95:81:a7:ed:e6:8f:f7:
fa:7b:85:34:10:84:33:fb:1d:d9:54:2b:7c:da:41:
59:bd:59:f8:32:35:0b:3b:23:2e:83:eb:d2:8d:05:
b9:2f:50:84:a0:40:d6:52:97:95:60:84:e4:66:f4:
6c:58:c3:0f:a5:37:a7:94:64:ed:9a:6e:73:b3:9d:
24:bf:63:e0:b0:8c:38:14:e1:c9:3b:69:cb:6a:94:
db:7a:37:f7:0f:f9:1a:cc:eb:ad:01:30:37:b6:7e:
3f:52:a1:c3:09:a9:f7:a6:aa:4e:65:83:b8:e8:c5:
61:9c:c4:7c:34:60:06:50:74:8e:0f:d2:c5:43:c5:
ec:cf:ce:40:25:1b:ae:14:f3:1d:7a:01:76:f2:8a:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E6:47:0F:8C:AA:61:F1:FB:5C:9F:02:7E:97:73:08:5D:A1:7D:38
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/guZHD4yqYfH7XJ8CfpdzCF2hfTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.88.0/21
109.196.80.0/20
185.178.236.0/22
Signature Algorithm: sha256WithRSAEncryption
49:f2:2d:6c:bc:e2:eb:60:77:a2:df:a2:bf:c0:37:fa:55:47:
f0:20:52:58:92:db:4f:29:d9:13:b7:15:8c:fc:9f:7e:18:06:
ff:d9:92:44:7f:6b:5f:e5:47:f3:af:a2:bd:1d:9b:b5:b1:06:
99:75:2e:95:a6:41:19:72:2f:95:24:15:63:1a:2b:eb:fa:9f:
79:b7:c8:29:cd:49:d3:e3:61:80:4f:c3:13:04:57:63:eb:45:
23:08:ea:1e:d1:4d:da:5d:03:1b:6b:03:33:5c:5a:12:2a:ab:
ae:c0:20:2d:78:a0:fa:25:80:01:c0:6a:26:74:6e:1f:bb:ad:
db:fb:b7:b8:51:2c:41:5e:ff:e4:49:7f:6d:5f:e1:b3:05:f8:
af:e1:0f:cc:93:17:19:7a:b3:83:c6:34:71:ca:fc:de:53:14:
5e:bb:b1:47:25:5b:91:ac:34:12:40:66:72:81:0b:4b:0a:52:
79:e4:cb:7f:0c:d4:89:bd:3f:24:c9:83:81:f6:fc:44:02:d7:
d8:73:87:d0:07:56:0a:e0:b5:6f:60:fb:30:3f:a8:f4:12:a6:
51:6f:a2:98:17:f6:dd:91:89:b5:d1:af:a6:de:af:54:01:91:
1e:bb:b7:b2:ec:2d:06:1e:d1:8b:43:59:3f:ed:e8:9b:e3:b5:
bf:36:8f:ba
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEDG6oejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGJkYzM3NmExNTlkMDVlMmFmOTcxNzZhM2ViYTgzNjBlNjBkMTc2MB4XDTIyMDEw
MTA1MDIyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJlNjQ3MGY4Y2Fh
NjFmMWZiNWM5ZjAyN2U5NzczMDg1ZGExN2QzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMYlgokwn6XScKWj20QSJ2SZJdu2ZM4qmVbOTh5yfkU8RiST
hn0a7XftmUrPYhhbNSR7+oQjaWAEmzQ4BFuRDI3J+eznnS/SdzhltZBLkVHmwp96
5wV/5fSoWn7ZRMlkDD7bT7MW5d/luCF9KbHp4myVgaft5o/3+nuFNBCEM/sd2VQr
fNpBWb1Z+DI1CzsjLoPr0o0FuS9QhKBA1lKXlWCE5Gb0bFjDD6U3p5Rk7Zpuc7Od
JL9j4LCMOBThyTtpy2qU23o39w/5GszrrQEwN7Z+P1Khwwmp96aqTmWDuOjFYZzE
fDRgBlB0jg/SxUPF7M/OQCUbrhTzHXoBdvKKGJsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSC5kcPjKph8ftcnwJ+l3MIXaF9ODAfBgNVHSMEGDAWgBS0vcN2oVnQXir5
cXaj66g2DmDRdjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RMM0RkcUZaMEY0cS1YRjJvLXVvTmc1ZzBYWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTMvNDBlYTE0LWRjNTAtNGFhMC1hYTg1LTI4ZDAxMDYwMzUyOS8x
L2d1WkhENHlxWWZIN1hKOENmcGR6Q0YyaGZUZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMv
NDBlYTE0LWRjNTAtNGFhMC1hYTg1LTI4ZDAxMDYwMzUyOS8xL3RMM0RkcUZaMEY0
cS1YRjJvLXVvTmc1ZzBYWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEA21fWAMEBG3EUAMEArmy7DANBgkq
hkiG9w0BAQsFAAOCAQEASfItbLzi62B3ot+iv8A3+lVH8CBSWJLbTynZE7cVjPyf
fhgG/9mSRH9rX+VH86+ivR2btbEGmXUulaZBGXIvlSQVYxor6/qfebfIKc1J0+Nh
gE/DEwRXY+tFIwjqHtFN2l0DG2sDM1xaEiqrrsAgLXig+iWAAcBqJnRuH7ut2/u3
uFEsQV7/5El/bV/hswX4r+EPzJMXGXqzg8Y0ccr83lMUXruxRyVbkaw0EkBmcoEL
SwpSeeTLfwzUib0/JMmDgfb8RALX2HOH0AdWCuC1b2D7MD+o9BKmUW+imBf23ZGJ
tdGvpt6vVAGRHru3suwtBh7Ri0NZP+3om+O1vzaPug==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-fra.rpki-client.org