Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Gvdz-pzzWrHe5PE_rdpDHTV6iCk.roa
File: Gvdz-pzzWrHe5PE_rdpDHTV6iCk.roa (raw, json)
Hash identifier: 9rIXBYMZSH4OJ4ES18xqc2bRC1uA4xjGAUR2/KQo7Dg=
Subject key identifier: 1A:F7:73:FA:9C:F3:5A:B1:DE:E4:F1:3F:AD:DA:43:1D:35:7A:88:29
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01843EA63209C5F5C786C150FEBB8F6CAD99
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Gvdz-pzzWrHe5PE_rdpDHTV6iCk.roa
Signing time: Thu 03 Nov 2022 17:59:49 +0000
ROA not before: Thu 03 Nov 2022 17:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21769
IP address blocks: 185.199.116.0/22 maxlen: 22
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
45.127.248.0/22 maxlen: 22
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
14.102.224.0/20 maxlen: 20
2a09:1e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:a6:32:09:c5:f5:c7:86:c1:50:fe:bb:8f:6c:ad:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 3 17:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1af773fa9cf35ab1dee4f13fadda431d357a8829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:e3:57:20:98:09:aa:5f:44:bf:50:4b:b0:
8c:75:69:ad:fe:58:24:07:3b:4d:e3:f1:a5:fa:cc:
55:58:fa:1c:33:36:ed:d4:b9:43:1c:18:bd:0f:f3:
b2:1e:7f:41:f0:97:3b:84:21:f4:70:60:4e:f8:0f:
1c:3c:ad:54:5f:81:b7:7c:0d:2f:4e:24:e1:05:ab:
bb:f5:12:e1:4b:69:25:09:17:95:bf:00:5f:5a:08:
1e:e3:28:6f:bb:81:4e:57:48:6d:c4:7d:6d:a1:74:
d9:95:83:2f:7f:38:97:0d:52:7f:4f:6e:d0:3e:46:
bb:83:33:9a:fd:bb:ba:ad:0a:9e:1e:7a:98:ec:5f:
30:4c:99:ed:1b:7a:90:2a:8e:4a:02:f6:67:e4:ec:
44:da:fd:8a:c9:1a:d4:d2:7b:9f:40:74:c5:42:71:
4c:9b:9f:0c:b4:65:b8:fe:21:15:78:89:4e:11:a8:
3c:27:68:3b:e7:1a:b0:d2:c9:77:c8:d7:84:e3:fa:
41:42:f7:f7:d5:f6:9b:f4:e6:e0:d2:73:4c:45:b6:
bb:71:6e:d0:f0:0f:c5:4e:c8:16:f4:eb:87:99:f2:
bd:ac:fe:53:bc:ef:f2:c4:79:c5:cf:49:70:4e:b4:
22:d9:bc:50:f8:cd:9f:6b:25:6e:e7:49:d9:2a:36:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:73:FA:9C:F3:5A:B1:DE:E4:F1:3F:AD:DA:43:1D:35:7A:88:29
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Gvdz-pzzWrHe5PE_rdpDHTV6iCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/20
45.127.248.0/22
103.41.44.0/22
103.63.28.0/22
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:bd:52:02:3d:46:49:f6:dc:71:4c:59:b8:0b:dd:2a:12:1b:
e8:1f:99:8b:5f:9b:bb:31:98:40:7d:64:65:92:45:f8:67:9d:
47:93:73:b8:6a:d2:1e:8a:18:3e:71:e3:2d:20:b4:1c:64:93:
3c:d7:c7:f7:70:28:ec:64:2e:8d:6f:8d:48:fb:85:ac:05:c4:
a5:3f:f1:df:bd:8d:98:86:62:95:28:68:5e:48:d8:30:fc:00:
ef:e1:fc:32:19:ce:74:0d:20:17:33:91:81:28:36:9f:9a:b2:
bd:e7:0e:a9:65:d8:ff:3a:01:38:17:83:16:97:3d:01:d1:46:
0b:82:88:75:d4:0c:65:70:e0:59:98:4b:d4:bf:69:e1:f5:88:
9f:81:18:b5:39:49:45:52:9b:e1:37:d9:ea:ab:0c:45:46:49:
cf:ff:c9:d2:36:a0:85:6e:ae:94:f1:33:e0:cf:81:c8:5f:85:
7a:bb:93:3c:7e:58:01:3b:5d:e5:bc:1d:9d:35:db:71:4e:82:
fd:f5:94:b8:41:9a:f0:bf:41:61:f0:15:92:f7:f9:f0:2c:2e:
0f:bc:c5:00:78:e3:24:af:26:67:01:05:24:7f:14:9c:3b:99:
5d:5f:f4:d9:f2:d8:22:ae:2b:d7:19:c3:dc:06:c6:44:ad:e2:
08:50:ef:53
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYQ+pjIJxfXHhsFQ/ruPbK2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjIxMTAzMTc1OTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWY3NzNmYTljZjM1YWIxZGVlNGYxM2ZhZGRhNDMxZDM1N2E4ODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSvjVyCYCapfRL9QS7CMdWmt/lgk
BztN4/Gl+sxVWPocMzbt1LlDHBi9D/OyHn9B8Jc7hCH0cGBO+A8cPK1UX4G3fA0v
TiThBau79RLhS2klCReVvwBfWgge4yhvu4FOV0htxH1toXTZlYMvfziXDVJ/T27Q
Pka7gzOa/bu6rQqeHnqY7F8wTJntG3qQKo5KAvZn5OxE2v2KyRrU0nufQHTFQnFM
m58MtGW4/iEVeIlOEag8J2g75xqw0sl3yNeE4/pBQvf31fab9Obg0nNMRba7cW7Q
8A/FTsgW9OuHmfK9rP5TvO/yxHnFz0lwTrQi2bxQ+M2fayVu50nZKjYRmQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFBr3c/qc81qx3uTxP63aQx01eogpMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvR3Zkei1wenpXckhlNVBFX3JkcERIVFY2aUNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQEDmbgAwQC
LX/4AwQCZyksAwQCZz8cAwQCucPUAwQCucPcAwQCucS8AwQCucd0AwQCwl0EMA0E
AgACMAcDBQMqCR6AMA0GCSqGSIb3DQEBCwUAA4IBAQBMvVICPUZJ9txxTFm4C90q
EhvoH5mLX5u7MZhAfWRlkkX4Z51Hk3O4atIeihg+ceMtILQcZJM818f3cCjsZC6N
b41I+4WsBcSlP/HfvY2YhmKVKGheSNgw/ADv4fwyGc50DSAXM5GBKDafmrK95w6p
Zdj/OgE4F4MWlz0B0UYLgoh11AxlcOBZmEvUv2nh9YifgRi1OUlFUpvhN9nqqwxF
RknP/8nSNqCFbq6U8TPgz4HIX4V6u5M8flgBO13lvB2dNdtxToL99ZS4QZrwv0Fh
8BWS9/nwLC4PvMUAeOMkryZnAQUkfxScO5ldX/TZ8tgirivXGcPcBsZEreIIUO9T
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-fra.rpki-client.org