Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/GqiPvwYkQu5pqqFt6n8MEs7_5FM.roa
File: GqiPvwYkQu5pqqFt6n8MEs7_5FM.roa (raw, json)
Hash identifier: OxZqr67TxWO645gTd8/hmF3hL172Ml372S5I1+h2Doo=
Subject key identifier: 1A:A8:8F:BF:06:24:42:EE:69:AA:A1:6D:EA:7F:0C:12:CE:FF:E4:53
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 01856CE6163034D272DA958DB6C14B9ECA02
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/GqiPvwYkQu5pqqFt6n8MEs7_5FM.roa
Signing time: Sun 01 Jan 2023 10:34:56 +0000
ROA not before: Sun 01 Jan 2023 10:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44882
IP address blocks: 109.230.160.0/21 maxlen: 21
109.230.176.0/20 maxlen: 20
109.230.128.0/19 maxlen: 19
2a01:98c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:16:30:34:d2:72:da:95:8d:b6:c1:4b:9e:ca:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Jan 1 10:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aa88fbf062442ee69aaa16dea7f0c12ceffe453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:d7:e9:4f:8a:91:aa:09:23:6c:6e:40:4c:
4d:f1:9e:19:c0:0c:4b:0c:9e:c3:96:65:59:3e:e6:
47:2e:d4:f6:fb:33:6a:fa:58:d0:53:cb:6f:d1:6e:
ce:0f:1d:43:9e:d5:fb:6b:e4:55:18:10:8d:c7:7c:
a4:f6:00:ad:90:71:02:5c:0f:06:69:15:f3:d4:b1:
94:ae:ce:25:25:99:27:0b:b0:5f:b6:66:99:93:75:
cf:1e:2e:6f:29:f5:db:5d:3a:70:6f:58:b7:e5:d4:
b8:65:7d:31:74:a5:fd:cc:f2:3f:da:31:15:b2:0c:
37:dd:2d:65:dd:ec:7d:ee:39:b8:92:ba:6b:6c:8a:
e2:8b:14:e8:69:cd:6b:dd:62:18:5c:ac:72:bb:71:
55:a3:31:c0:b8:3c:e3:35:9f:77:c8:6f:61:34:0b:
a1:a0:b0:64:9c:07:c8:82:13:be:aa:c1:f9:9f:e6:
7d:b5:ff:14:cf:a4:ef:ca:2b:28:e4:7a:7e:8f:b6:
f6:1d:f7:78:22:ff:c5:fb:cd:91:38:2d:3d:72:e4:
2f:ea:3c:00:93:94:e5:49:a9:e6:fb:8e:4a:b5:68:
f1:8f:d2:79:20:9e:61:5b:80:94:72:19:6e:ca:cb:
3e:16:20:b4:ea:9e:00:6f:01:ee:b4:4b:cb:fc:22:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A8:8F:BF:06:24:42:EE:69:AA:A1:6D:EA:7F:0C:12:CE:FF:E4:53
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/GqiPvwYkQu5pqqFt6n8MEs7_5FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.128.0-109.230.167.255
109.230.176.0/20
IPv6:
2a01:98c0::/48
Signature Algorithm: sha256WithRSAEncryption
39:72:ab:2e:9e:d2:94:51:09:1e:1f:20:f3:71:4f:52:85:c2:
cb:d5:9f:24:34:12:58:3f:8b:7b:5f:53:5e:9c:aa:09:29:9c:
f5:00:ae:63:50:19:20:95:a6:8b:3e:5b:8b:a8:cd:21:dd:17:
cb:f8:2d:b4:b2:f4:b6:7e:b3:cb:fa:49:6b:23:9e:88:3a:33:
02:3d:0d:15:72:5a:d8:59:ee:7c:a8:68:11:b9:df:9d:de:d1:
6f:4d:d7:19:a4:33:7d:a1:4e:16:3f:ce:7c:75:dc:dd:7f:e5:
5f:77:48:61:c0:5c:3b:82:c5:f3:83:0f:a7:1c:36:12:51:b7:
55:5a:20:e4:07:d6:e0:ba:bf:c4:54:18:81:93:27:1f:c5:c1:
b7:79:a0:96:5e:f1:f3:9a:49:0f:bb:b1:71:c3:12:a9:d5:be:
50:0d:38:a5:fc:d8:e3:5e:3d:8b:a9:84:43:33:b8:85:dd:51:
56:6b:7d:a1:34:9e:56:2b:c7:44:7a:71:94:6f:a0:2a:94:f2:
4d:6f:7a:35:7f:b5:7a:e4:a9:6b:a1:87:08:ba:95:03:76:b3:
a9:74:da:6c:cd:4d:87:98:c7:4b:e3:0f:ea:5d:de:0d:ac:68:
70:cc:1a:9d:cf:69:b8:87:7f:85:eb:7a:73:f2:ae:df:b0:0c:
40:d3:cd:fb
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAYVs5hYwNNJy2pWNtsFLnsoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTJjYWE3ZTE4YWYyZGZiZGIzYTYyNjlkYTJlMDZkZWRj
YjZjZjAwHhcNMjMwMTAxMTAzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWE4OGZiZjA2MjQ0MmVlNjlhYWExNmRlYTdmMGMxMmNlZmZlNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlDX6U+KkaoJI2xuQExN8Z4ZwAxL
DJ7DlmVZPuZHLtT2+zNq+ljQU8tv0W7ODx1DntX7a+RVGBCNx3yk9gCtkHECXA8G
aRXz1LGUrs4lJZknC7BftmaZk3XPHi5vKfXbXTpwb1i35dS4ZX0xdKX9zPI/2jEV
sgw33S1l3ex97jm4krprbIriixToac1r3WIYXKxyu3FVozHAuDzjNZ93yG9hNAuh
oLBknAfIghO+qsH5n+Z9tf8Uz6Tvyiso5Hp+j7b2Hfd4Iv/F+82ROC09cuQv6jwA
k5TlSanm+45KtWjxj9J5IJ5hW4CUchluyss+FiC06p4AbwHutEvL/CJswwIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFBqoj78GJELuaaqhbep/DBLO/+RTMB8GA1UdIwQY
MBaAFGPiyqfhivLfvbOmJp2i4G3ty2zwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQt
NTM4YWYxMDE3NTA5LzEvR3FpUHZ3WWtRdTVwcXFGdDZuOE1FczdfNUZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQtNTM4YWYxMDE3NTA5
LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAdt5oAD
BANt5qADBARt5rAwDwQCAAIwCQMHACoBmMAAADANBgkqhkiG9w0BAQsFAAOCAQEA
OXKrLp7SlFEJHh8g83FPUoXCy9WfJDQSWD+Le19TXpyqCSmc9QCuY1AZIJWmiz5b
i6jNId0Xy/gttLL0tn6zy/pJayOeiDozAj0NFXJa2FnufKhoEbnfnd7Rb03XGaQz
faFOFj/OfHXc3X/lX3dIYcBcO4LF84MPpxw2ElG3VVog5AfW4Lq/xFQYgZMnH8XB
t3mgll7x85pJD7uxccMSqdW+UA04pfzY4149i6mEQzO4hd1RVmt9oTSeVivHRHpx
lG+gKpTyTW96NX+1euSpa6GHCLqVA3azqXTabM1Nh5jHS+MP6l3eDaxocMwanc9p
uId/het6c/Ku37AMQNPN+w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:17 2025 by rpki-client