Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/zGbY2ekEvuITxh3bg3981Mnk9vM.roa
File: zGbY2ekEvuITxh3bg3981Mnk9vM.roa (raw, json)
Hash identifier: aPFNy6is6yzKelVqVKRQrI3K2X564AozkDh81TOCTps=
Subject key identifier: CC:66:D8:D9:E9:04:BE:E2:13:C6:1D:DB:83:7F:7C:D4:C9:E4:F6:F3
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 32F5A665
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/zGbY2ekEvuITxh3bg3981Mnk9vM.roa
Signing time: Sat 01 Jan 2022 05:58:39 +0000
ROA not before: Sat 01 Jan 2022 05:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44725
IP address blocks: 5.250.192.0/19 maxlen: 19
37.114.128.0/18 maxlen: 18
185.91.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854959717 (0x32f5a665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Jan 1 05:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc66d8d9e904bee213c61ddb837f7cd4c9e4f6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:ba:58:cd:30:83:d4:bc:e6:de:e8:f3:1c:
a7:0c:f4:85:f7:f2:46:6c:cc:98:9b:1d:0a:72:d3:
84:29:2c:64:96:b6:c1:2d:5a:2d:f3:11:9b:67:d9:
62:6d:c7:c7:bf:af:59:3f:4c:0f:e2:61:f7:3c:eb:
b7:a0:45:23:ff:c6:fe:45:13:65:57:24:b5:44:bb:
70:de:44:05:1c:e5:54:45:c3:e4:81:7f:91:34:b1:
9c:36:85:15:88:9a:4f:d4:a8:62:15:73:db:61:48:
51:13:c8:d0:9e:6f:63:3d:cc:28:58:39:9b:a4:8f:
be:51:42:58:46:2d:fa:5b:7a:b3:c3:a6:fe:1b:f7:
bc:6e:ef:6b:b8:23:dc:07:33:c1:eb:5d:a7:22:9a:
17:ec:e7:7a:40:b7:7f:7e:8b:69:5f:d7:b4:a3:05:
93:35:9e:c4:93:db:72:3b:b9:b1:7b:0e:03:d7:14:
39:5a:3e:3e:1a:25:5c:08:5d:88:48:b0:2b:1d:6b:
29:97:b5:f3:48:9d:2d:ac:6e:a2:a7:98:7e:fe:ef:
2b:39:b6:60:35:9f:64:af:a9:1b:f2:3e:8b:5d:08:
72:b8:de:bf:9a:ea:e5:99:1e:3d:61:1d:b9:60:a7:
84:5e:78:cd:99:a6:3c:75:e6:74:4f:5c:7f:05:7b:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:D8:D9:E9:04:BE:E2:13:C6:1D:DB:83:7F:7C:D4:C9:E4:F6:F3
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/zGbY2ekEvuITxh3bg3981Mnk9vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.192.0/19
37.114.128.0/18
185.91.208.0/22
Signature Algorithm: sha256WithRSAEncryption
34:a7:1d:a2:3b:fb:93:97:04:a4:e7:ea:f6:57:d3:e9:b1:6c:
5d:da:93:91:3f:52:16:b0:d1:34:ea:ca:17:ae:b8:ff:af:72:
2e:97:f5:56:5e:93:c5:4a:70:41:ec:79:75:9e:32:ec:c9:b4:
a2:08:10:b3:28:88:25:7e:be:96:8a:b8:29:ab:35:87:2c:df:
17:a5:cd:40:56:b1:51:86:36:2b:69:80:a7:99:05:06:bb:13:
f2:ec:9f:dc:80:b1:12:aa:bd:d3:59:75:9b:e1:b6:c1:db:00:
40:cc:06:0c:d1:ca:49:60:7e:d0:3c:52:67:03:9d:43:ca:92:
2a:61:df:12:87:f2:bd:a3:40:cd:f2:1b:5d:5a:6c:c3:a7:50:
e9:fd:89:32:b9:f0:f6:7f:c0:9e:fc:11:f0:ce:16:e2:a4:a4:
d5:da:00:dd:49:d0:18:7c:92:fc:c8:5b:0a:f9:e0:32:e5:2a:
b3:0a:f2:e9:59:19:f4:3a:b8:71:5a:a0:78:e7:58:91:ee:f4:
4f:5b:c5:f8:9a:60:fb:dd:f5:db:f6:e1:64:f0:24:d0:51:6e:
e7:4d:74:97:b0:00:f9:36:2c:1d:78:bd:46:72:21:76:ab:9a:
de:fc:45:5e:57:de:06:88:13:21:1c:fd:6b:7e:57:23:f0:90:
e6:2c:e6:68
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEMvWmZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTA0Y2UyOGVhZTY4MmM5N2FjZDJkODYyZmVlMjg5N2MzYjA5NmZkMB4XDTIyMDEw
MTA1NTgzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M2NmQ4ZDllOTA0
YmVlMjEzYzYxZGRiODM3ZjdjZDRjOWU0ZjZmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHLuljNMIPUvObe6PMcpwz0hffyRmzMmJsdCnLThCksZJa2
wS1aLfMRm2fZYm3Hx7+vWT9MD+Jh9zzrt6BFI//G/kUTZVcktUS7cN5EBRzlVEXD
5IF/kTSxnDaFFYiaT9SoYhVz22FIURPI0J5vYz3MKFg5m6SPvlFCWEYt+lt6s8Om
/hv3vG7va7gj3AczwetdpyKaF+znekC3f36LaV/XtKMFkzWexJPbcju5sXsOA9cU
OVo+PholXAhdiEiwKx1rKZe180idLaxuoqeYfv7vKzm2YDWfZK+pG/I+i10Icrje
v5rq5ZkePWEduWCnhF54zZmmPHXmdE9cfwV7rDECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTMZtjZ6QS+4hPGHduDf3zUyeT28zAfBgNVHSMEGDAWgBQZBM4o6uaCyXrN
LYYv7iiXw7CW/TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dRVE9LT3JtZ3NsNnpTMkdMLTRvbDhPd2x2MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvZDA0OGY2LTM0MWMtNGM2NC1iM2Q5LTE1ZDVkZWIyMjhkZC8x
L3pHYlkyZWtFdnVJVHhoM2JnMzk4MU1uazl2TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
ZDA0OGY2LTM0MWMtNGM2NC1iM2Q5LTE1ZDVkZWIyMjhkZC8xL0dRVE9LT3JtZ3Ns
NnpTMkdMLTRvbDhPd2x2MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEBQX6wAMEBiVygAMEArlb0DANBgkq
hkiG9w0BAQsFAAOCAQEANKcdojv7k5cEpOfq9lfT6bFsXdqTkT9SFrDRNOrKF664
/69yLpf1Vl6TxUpwQex5dZ4y7Mm0oggQsyiIJX6+loq4Kas1hyzfF6XNQFaxUYY2
K2mAp5kFBrsT8uyf3ICxEqq901l1m+G2wdsAQMwGDNHKSWB+0DxSZwOdQ8qSKmHf
EofyvaNAzfIbXVpsw6dQ6f2JMrnw9n/AnvwR8M4W4qSk1doA3UnQGHyS/MhbCvng
MuUqswry6VkZ9Dq4cVqgeOdYke70T1vF+Jpg+9312/bhZPAk0FFu5010l7AA+TYs
HXi9RnIhdqua3vxFXlfeBogTIRz9a35XI/CQ5izmaA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:31 2023 by rpki-client on console-ams.rpki-client.org