Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/gxo0FOVEkQc-gYnrpBGQYmVtgdc.roa
File: gxo0FOVEkQc-gYnrpBGQYmVtgdc.roa (raw, json)
Hash identifier: e52AUniylxtyGSdMX4Dpa3M3Cj2doU318U5kaXlbF+c=
Subject key identifier: 83:1A:34:14:E5:44:91:07:3E:81:89:EB:A4:11:90:62:65:6D:81:D7
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0182A64990065406FFA3E03A962AB13FE011
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/gxo0FOVEkQc-gYnrpBGQYmVtgdc.roa
Signing time: Tue 16 Aug 2022 10:53:34 +0000
ROA not before: Tue 16 Aug 2022 10:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 164.215.96.0/22 maxlen: 22
85.158.145.0/24 maxlen: 24
164.215.103.0/24 maxlen: 24
85.158.148.0/22 maxlen: 22
85.158.146.0/24 maxlen: 24
109.205.211.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:49:90:06:54:06:ff:a3:e0:3a:96:2a:b1:3f:e0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 16 10:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=831a3414e54491073e8189eba4119062656d81d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:8c:06:f9:d8:00:67:56:5c:3e:c2:ee:6b:
c0:62:35:9e:6d:d3:aa:dd:2b:ab:b8:80:86:9b:24:
6f:22:61:90:83:6b:9e:3f:a3:b5:12:38:7d:9c:fc:
f3:d2:94:36:b2:0a:03:04:f6:c1:e6:2a:51:cc:2e:
20:44:5a:89:7a:13:14:15:0c:d5:2c:f1:1a:09:42:
85:d9:15:d4:56:48:6c:ca:6d:b1:98:36:c6:fd:8a:
ad:ac:fb:91:d7:38:cf:23:02:9f:a0:7c:9c:28:9c:
7d:b8:c3:15:41:d6:cd:cc:30:4a:23:75:eb:f0:a8:
e1:8d:1f:a7:24:aa:01:c2:7d:c4:88:b9:15:0c:23:
4f:63:b2:87:54:d5:8d:c9:2f:79:9d:89:20:cc:3e:
98:05:f4:b5:c9:1c:da:79:13:49:e6:2f:f4:d7:de:
ff:14:a2:1d:c7:eb:58:42:73:ae:ac:60:c7:43:00:
ae:18:f9:1f:03:a3:45:5e:4e:c2:e8:b6:4f:1f:cf:
5d:fb:79:5b:1d:df:57:a3:ea:40:a7:be:01:4b:2c:
c2:d0:7c:5a:51:8f:ee:61:f4:56:fa:2d:04:04:1e:
65:74:de:64:84:3f:fa:04:63:3f:c1:37:44:b6:dc:
7b:dc:46:bf:1d:61:5c:76:38:01:37:19:14:21:bb:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:34:14:E5:44:91:07:3E:81:89:EB:A4:11:90:62:65:6D:81:D7
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/gxo0FOVEkQc-gYnrpBGQYmVtgdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.145.0-85.158.146.255
85.158.148.0/22
109.205.211.0-109.205.212.255
164.215.96.0/22
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
de:5e:72:f4:42:f0:47:82:a1:39:69:c5:d3:bf:bb:45:ef:4b:
e6:c4:03:a9:34:2d:a7:46:31:18:f1:15:58:b0:48:a0:55:4f:
b7:71:0e:09:85:3a:67:01:13:4f:2d:70:19:c8:2a:86:c9:74:
be:de:11:5a:b0:4c:d1:03:50:a7:a4:64:5e:8d:36:29:47:5b:
71:ee:77:bb:40:18:44:b5:eb:0a:be:8c:3e:0e:1b:bf:bb:c8:
1d:3b:72:e9:12:cd:47:17:f1:3e:95:63:ce:9f:16:85:65:bf:
b5:a8:2d:65:05:6e:03:1e:6a:c0:f3:6d:eb:af:50:e2:90:df:
5b:31:d5:dd:92:cc:8a:53:3e:94:1d:51:4a:8c:eb:94:5b:2e:
40:21:da:09:e6:bb:7d:92:10:6b:92:38:13:ed:ea:d9:e1:ea:
a2:a4:29:a1:5d:4d:52:b0:65:f6:d6:c7:5d:70:f2:7c:a7:f6:
0d:c5:c7:dd:2f:28:09:d4:5b:68:21:43:b5:f5:f3:5f:49:31:
d9:d1:08:d3:36:b1:2c:91:b9:46:ea:83:dc:8a:53:57:fd:a8:
7b:d8:01:91:6e:1a:81:1d:12:51:f2:fd:5d:c6:75:08:20:a8:
31:cc:f4:a2:0a:2d:70:75:c8:e7:06:cf:5b:26:2d:93:c3:b8:
1d:4c:ce:74
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYKmSZAGVAb/o+A6liqxP+ARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjIwODE2MTA1MzM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzFhMzQxNGU1NDQ5MTA3M2U4MTg5ZWJhNDExOTA2MjY1NmQ4MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpyMBvnYAGdWXD7C7mvAYjWebdOq
3SuruICGmyRvImGQg2ueP6O1Ejh9nPzz0pQ2sgoDBPbB5ipRzC4gRFqJehMUFQzV
LPEaCUKF2RXUVkhsym2xmDbG/YqtrPuR1zjPIwKfoHycKJx9uMMVQdbNzDBKI3Xr
8KjhjR+nJKoBwn3EiLkVDCNPY7KHVNWNyS95nYkgzD6YBfS1yRzaeRNJ5i/0197/
FKIdx+tYQnOurGDHQwCuGPkfA6NFXk7C6LZPH89d+3lbHd9Xo+pAp74BSyzC0Hxa
UY/uYfRW+i0EBB5ldN5khD/6BGM/wTdEttx73Ea/HWFcdjgBNxkUIbuzJwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFIMaNBTlRJEHPoGJ66QRkGJlbYHXMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvZ3hvMEZPVkVrUWMtZ1lucnBCR1FZbVZ0Z2RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBABVnpED
BABVnpIDBAJVnpQwDAMEAG3N0wMEAG3N1AMEAqTXYAMEAKTXZzANBgkqhkiG9w0B
AQsFAAOCAQEA3l5y9ELwR4KhOWnF07+7Re9L5sQDqTQtp0YxGPEVWLBIoFVPt3EO
CYU6ZwETTy1wGcgqhsl0vt4RWrBM0QNQp6RkXo02KUdbce53u0AYRLXrCr6MPg4b
v7vIHTty6RLNRxfxPpVjzp8WhWW/tagtZQVuAx5qwPNt669Q4pDfWzHV3ZLMilM+
lB1RSozrlFsuQCHaCea7fZIQa5I4E+3q2eHqoqQpoV1NUrBl9tbHXXDyfKf2DcXH
3S8oCdRbaCFDtfXzX0kx2dEI0zaxLJG5RuqD3IpTV/2oe9gBkW4agR0SUfL9XcZ1
CCCoMcz0ogotcHXI5wbPWyYtk8O4HUzOdA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org