Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/GqNoFOcKG3esvfkt70YZdkXQRVc.roa
File: GqNoFOcKG3esvfkt70YZdkXQRVc.roa (raw, json)
Hash identifier: hdiqWGLFOtQdLgSISpqBONZe5Y3k+bkrjMdKvErcXA8=
Subject key identifier: 1A:A3:68:14:E7:0A:1B:77:AC:BD:F9:2D:EF:46:19:76:45:D0:45:57
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 050B82
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/GqNoFOcKG3esvfkt70YZdkXQRVc.roa
Signing time: Thu 09 Jun 2022 11:39:04 +0000
ROA not before: Thu 09 Jun 2022 11:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44350
IP address blocks: 185.161.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330626 (0x50b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jun 9 11:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1aa36814e70a1b77acbdf92def46197645d04557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:75:cb:7a:01:e7:7b:5a:fb:aa:15:2e:66:
0e:5f:b2:0b:a0:ca:13:de:28:28:1e:34:a5:26:6e:
c4:f9:b7:a6:92:b9:50:0e:34:e6:08:b1:fb:27:8f:
d6:f0:08:04:ce:ac:00:94:ea:e7:9f:bf:5b:e8:57:
97:32:d0:67:f6:43:45:2d:e9:eb:1c:0a:de:35:eb:
06:05:e1:02:a2:da:bb:20:2e:c9:67:56:c2:94:ec:
2e:c4:20:a8:c7:17:bb:11:95:46:b9:b6:83:ae:25:
6f:5d:af:a9:63:fb:7c:85:5c:73:2f:32:f3:8f:57:
b8:06:0a:51:35:fb:08:ee:40:dd:e2:97:63:03:6c:
b9:98:d8:3c:19:5e:c5:d2:e2:d5:18:3d:13:4a:80:
58:82:94:b7:de:88:1d:23:3e:a4:b6:48:d7:fa:18:
db:89:b5:70:e4:3e:3e:4b:97:2e:5a:5f:98:36:12:
b9:4e:37:89:40:5f:69:02:e5:06:a8:28:93:af:c6:
d8:f4:af:15:a8:f6:e8:97:21:b0:7e:2f:e3:e6:2e:
8a:58:df:2c:96:2c:27:b8:5d:ce:ca:e1:07:3f:cf:
4e:9c:7a:d1:f0:1c:7b:fb:81:a5:d9:ea:06:78:8e:
55:85:af:52:8d:45:7f:04:60:0f:32:4e:49:9a:c0:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:68:14:E7:0A:1B:77:AC:BD:F9:2D:EF:46:19:76:45:D0:45:57
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/GqNoFOcKG3esvfkt70YZdkXQRVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0b:71:48:10:7e:8d:6f:fb:a9:5c:be:b9:93:59:a9:f8:3f:
ab:b8:6f:54:4d:24:b3:80:f6:0b:07:04:bb:ad:97:ab:78:04:
b8:0c:16:52:6a:d7:40:bb:68:d1:bb:54:a5:43:22:7a:fd:75:
41:92:c4:c3:5a:29:db:38:d2:16:ff:0f:6a:43:fa:37:8a:e4:
3a:21:a0:b9:5c:43:0b:1f:7b:6b:a5:e9:ec:94:9b:ae:dd:8d:
9d:9c:fe:16:40:20:b5:e9:5d:0c:b1:a0:31:5a:65:57:5f:cd:
9b:2e:f7:6e:f9:87:43:90:6a:ae:57:3f:68:3e:67:ad:2a:68:
5a:3f:3a:fa:03:a1:32:df:11:3c:8b:16:64:40:b2:d8:55:34:
f9:7d:26:89:c2:22:c0:07:db:20:31:10:86:2a:f6:38:39:a0:
e9:25:11:04:04:46:4c:e1:c4:dc:6e:5a:91:2a:02:d1:75:59:
c7:52:c7:e3:cc:81:22:53:f9:13:e5:44:8f:c5:1d:6c:f9:f4:
62:dc:29:3d:2b:73:de:63:18:bb:8b:ae:3f:96:22:16:88:0e:
d5:2a:9d:23:91:51:15:9b:88:6c:10:03:c7:49:f3:a5:2a:9b:
e9:f6:a1:4b:2c:d7:dd:8b:1c:26:4e:28:3f:3d:dd:70:3e:5b:
d7:ba:36:52
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDBQuCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1NWY0MTAwHhcNMjIwNjA5
MTEzOTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxYWEzNjgxNGU3MGEx
Yjc3YWNiZGY5MmRlZjQ2MTk3NjQ1ZDA0NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnBd1y3oB53ta+6oVLmYOX7ILoMoT3igoHjSlJm7E+bemkrlQ
DjTmCLH7J4/W8AgEzqwAlOrnn79b6FeXMtBn9kNFLenrHAreNesGBeECotq7IC7J
Z1bClOwuxCCoxxe7EZVGubaDriVvXa+pY/t8hVxzLzLzj1e4BgpRNfsI7kDd4pdj
A2y5mNg8GV7F0uLVGD0TSoBYgpS33ogdIz6ktkjX+hjbibVw5D4+S5cuWl+YNhK5
TjeJQF9pAuUGqCiTr8bY9K8VqPbolyGwfi/j5i6KWN8sliwnuF3OyuEHP89OnHrR
8Bx7+4Gl2eoGeI5Vha9SjUV/BGAPMk5JmsB6wwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFBqjaBTnCht3rL35Le9GGXZF0EVXMB8GA1UdIwQYMBaAFNlHsoE0ir2sJMK9
FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYyLzEv
R3FOb0ZPY0tHM2VzdmZrdDcwWVpka1hRUlZjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9k
Njk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYyLzEvMlVleWdUU0t2YXdr
d3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaGhMA0GCSqGSIb3DQEBCwUAA4IB
AQAPC3FIEH6Nb/upXL65k1mp+D+ruG9UTSSzgPYLBwS7rZereAS4DBZSatdAu2jR
u1SlQyJ6/XVBksTDWinbONIW/w9qQ/o3iuQ6IaC5XEMLH3trpenslJuu3Y2dnP4W
QCC16V0MsaAxWmVXX82bLvdu+YdDkGquVz9oPmetKmhaPzr6A6Ey3xE8ixZkQLLY
VTT5fSaJwiLAB9sgMRCGKvY4OaDpJREEBEZM4cTcblqRKgLRdVnHUsfjzIEiU/kT
5USPxR1s+fRi3Ck9K3PeYxi7i64/liIWiA7VKp0jkVEVm4hsEAPHSfOlKpvp9qFL
LNfdixwmTig/Pd1wPlvXujZS
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:53 2023 by rpki-client on console-fra.rpki-client.org