Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/gmVjuJ_dBlh4B0HEs3vKLUAIPzM.roa
File: gmVjuJ_dBlh4B0HEs3vKLUAIPzM.roa (raw, json)
Hash identifier: XmaeQ+6WQpwIHl1bImOKoVNIDcVRtuzcZUCA3M8EcIo=
Subject key identifier: 82:65:63:B8:9F:DD:06:58:78:07:41:C4:B3:7B:CA:2D:40:08:3F:33
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 18651996
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/gmVjuJ_dBlh4B0HEs3vKLUAIPzM.roa
Signing time: Sat 01 Jan 2022 11:04:42 +0000
ROA not before: Sat 01 Jan 2022 11:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199743
IP address blocks: 185.48.68.0/22 maxlen: 22
91.217.210.0/24 maxlen: 24
2a01:9660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409278870 (0x18651996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Jan 1 11:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=826563b89fdd0658780741c4b37bca2d40083f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:e5:08:f8:d7:49:aa:56:fb:a2:37:ce:42:
8c:7c:f2:94:c9:56:07:f8:1e:f6:f7:66:0b:5d:4a:
20:1b:b2:53:d4:8a:3d:10:af:4c:1e:00:d4:e6:59:
d6:b8:81:fd:d6:82:a5:8c:c7:eb:2a:b5:8d:00:ce:
3f:dd:53:91:3b:b5:6d:e3:64:20:3d:27:20:6f:d9:
6d:4c:da:a5:86:b7:6d:b7:d0:5f:8b:f1:35:63:1d:
b3:d1:75:41:83:56:ff:73:8e:60:38:db:f8:5d:5a:
ab:24:14:48:9b:cf:85:0d:8d:2a:ef:c3:d1:78:f7:
bb:70:05:a8:23:c1:5e:ae:9b:94:67:d4:63:eb:a4:
3e:cc:a2:ca:42:08:73:c8:b8:28:f0:b4:1a:c4:ca:
6f:d0:c0:d6:3e:df:7d:99:11:eb:73:04:00:d1:1c:
8d:fc:85:33:04:51:ab:ed:50:41:ab:4e:9b:d4:77:
4d:ec:c7:91:ec:65:00:7a:79:49:ab:86:c3:a6:20:
92:6b:2f:1f:ae:d2:6b:31:00:89:2b:ec:12:2d:f7:
eb:b4:d9:47:9e:d3:67:bf:49:4d:63:21:68:2a:22:
a0:31:f5:b1:fd:3b:32:d9:aa:c2:9b:f1:5c:89:12:
c6:b0:a9:9b:5f:12:c3:ff:af:ae:90:6e:06:1b:83:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:63:B8:9F:DD:06:58:78:07:41:C4:B3:7B:CA:2D:40:08:3F:33
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/gmVjuJ_dBlh4B0HEs3vKLUAIPzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.210.0/24
185.48.68.0/22
IPv6:
2a01:9660::/32
Signature Algorithm: sha256WithRSAEncryption
a5:ef:d2:5c:2f:fa:e2:f7:27:ce:dd:37:ac:47:28:79:51:b2:
f3:95:38:c3:8c:bb:ea:f1:ed:5f:e1:90:de:c7:ae:49:8e:e8:
98:93:30:27:1c:9e:3a:4d:45:b4:b6:d9:d5:17:cb:10:80:fa:
40:b9:a1:bb:61:aa:a9:ff:01:0e:ee:6b:01:f5:39:c3:38:8c:
0c:66:b0:34:fb:54:24:90:99:05:14:a9:44:95:f0:8d:1b:d3:
36:a7:8b:d1:62:aa:83:05:dd:f6:67:80:81:61:a5:43:4b:3e:
13:c8:f4:ea:df:fe:8d:a9:ca:ab:ec:70:12:5e:9f:6e:3b:ca:
60:ee:3f:03:c2:fb:09:50:68:fc:91:ed:09:61:ce:63:ee:c6:
a4:04:d4:cf:42:5d:af:63:a7:f9:df:27:fd:2c:6f:40:66:15:
60:ac:7e:d9:1c:7c:8c:75:46:1f:27:5f:65:a5:5f:d2:dc:88:
1d:b7:ad:3f:be:6b:c2:e3:fd:f3:42:d8:a8:e1:64:fe:9f:6d:
43:d6:c1:de:a0:fd:b1:b3:b4:65:85:23:94:94:d2:1b:d0:98:
ea:db:77:be:27:d9:73:e5:b3:e9:5f:ec:70:49:af:4f:00:70:
18:9a:e8:96:ac:be:95:3b:5c:15:8f:dc:ae:8a:a9:64:a9:5a:
01:f4:e6:de
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEGGUZljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NTBiNmI0MjU2MDBhMjVhNmRjMTMyZGU1MTQ3OTdlMmFhNGIwMjQ3MB4XDTIyMDEw
MTExMDQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODI2NTYzYjg5ZmRk
MDY1ODc4MDc0MWM0YjM3YmNhMmQ0MDA4M2YzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIR5Qj410mqVvuiN85CjHzylMlWB/ge9vdmC11KIBuyU9SK
PRCvTB4A1OZZ1riB/daCpYzH6yq1jQDOP91TkTu1beNkID0nIG/ZbUzapYa3bbfQ
X4vxNWMds9F1QYNW/3OOYDjb+F1aqyQUSJvPhQ2NKu/D0Xj3u3AFqCPBXq6blGfU
Y+ukPsyiykIIc8i4KPC0GsTKb9DA1j7ffZkR63MEANEcjfyFMwRRq+1QQatOm9R3
TezHkexlAHp5SauGw6YgkmsvH67SazEAiSvsEi3367TZR57TZ79JTWMhaCoioDH1
sf07MtmqwpvxXIkSxrCpm18Sw/+vrpBuBhuDDhcCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSCZWO4n90GWHgHQcSze8otQAg/MzAfBgNVHSMEGDAWgBT1C2tCVgCiWm3B
Mt5RR5fiqksCRzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlRdHJRbFlBb2xwdHdUTGVVVWVYNHFwTEFrYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvYTlmY2M5LTY3YjItNDRkNi1iNTY2LTEwMGY4NGZlOTUwYy8x
L2dtVmp1Sl9kQmxoNEIwSEVzM3ZLTFVBSVB6TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
YTlmY2M5LTY3YjItNDRkNi1iNTY2LTEwMGY4NGZlOTUwYy8xLzlRdHJRbFlBb2xw
dHdUTGVVVWVYNHFwTEFrYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAFvZ0gMEArkwRDANBAIAAjAHAwUA
KgGWYDANBgkqhkiG9w0BAQsFAAOCAQEApe/SXC/64vcnzt03rEcoeVGy85U4w4y7
6vHtX+GQ3seuSY7omJMwJxyeOk1FtLbZ1RfLEID6QLmhu2Gqqf8BDu5rAfU5wziM
DGawNPtUJJCZBRSpRJXwjRvTNqeL0WKqgwXd9meAgWGlQ0s+E8j06t/+janKq+xw
El6fbjvKYO4/A8L7CVBo/JHtCWHOY+7GpATUz0Jdr2On+d8n/SxvQGYVYKx+2Rx8
jHVGHydfZaVf0tyIHbetP75rwuP980LYqOFk/p9tQ9bB3qD9sbO0ZYUjlJTSG9CY
6tt3vifZc+Wz6V/scEmvTwBwGJrolqy+lTtcFY/croqpZKlaAfTm3g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:23 2023 by rpki-client on console-ams.rpki-client.org