Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/GQWmCvutKMKs49G9voXhbRKdr60.roa
File: GQWmCvutKMKs49G9voXhbRKdr60.roa (raw, json)
Hash identifier: ipCNquDmwnJQQnSXJyH6CIJiGBQeEHnFwOd+TWb5sTI=
Subject key identifier: 19:05:A6:0A:FB:AD:28:C2:AC:E3:D1:BD:BE:85:E1:6D:12:9D:AF:AD
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 02E0915E
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/GQWmCvutKMKs49G9voXhbRKdr60.roa
Signing time: Sat 01 Jan 2022 10:04:30 +0000
ROA not before: Sat 01 Jan 2022 10:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2914
IP address blocks: 185.232.204.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48271710 (0x2e0915e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jan 1 10:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1905a60afbad28c2ace3d1bdbe85e16d129dafad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:45:57:08:c6:41:8f:aa:ab:c6:57:0e:6e:
d6:15:7d:d3:39:ea:f3:83:e1:5a:5e:9b:67:2c:09:
fb:e6:8e:eb:74:29:be:5c:ad:b5:16:dc:d7:15:cd:
e9:7a:8d:f3:ba:20:3a:98:a8:68:cb:62:92:03:d9:
10:ea:4c:4d:9f:2e:5e:a6:4e:ee:c1:dd:3a:2a:88:
31:27:9c:ac:d4:7a:73:d1:c1:1c:dc:09:d6:45:de:
7d:2e:67:91:78:ed:64:cf:0c:b8:7e:f0:4c:cc:06:
10:94:e8:e3:c0:84:fb:eb:48:d5:e7:eb:11:c0:b6:
96:0a:ba:dc:d1:cb:a2:fd:7d:0d:c8:2b:55:89:d7:
43:94:53:a7:ef:58:8a:00:1d:25:71:21:af:15:da:
61:9d:68:54:01:dd:aa:6c:c3:32:f6:d6:66:08:1e:
fe:07:55:e9:c4:12:1c:75:34:fd:b2:28:56:ca:81:
64:6e:fc:b9:61:65:29:ec:31:a3:01:cd:85:68:ca:
28:3d:f2:80:eb:39:e2:95:59:cf:b7:ec:ee:a3:30:
7b:c2:e4:dc:91:ad:e1:8f:2e:76:da:11:19:72:5f:
ae:9a:31:b8:db:fd:7f:52:b0:80:3c:7c:f3:07:ad:
bf:65:59:b5:fb:74:f3:f7:3b:00:9d:9b:dd:b1:3c:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:05:A6:0A:FB:AD:28:C2:AC:E3:D1:BD:BE:85:E1:6D:12:9D:AF:AD
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/GQWmCvutKMKs49G9voXhbRKdr60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.204.0/22
Signature Algorithm: sha256WithRSAEncryption
47:9b:c8:4f:f3:08:73:ef:10:03:2b:dc:83:bb:2f:23:cc:f7:
e2:a5:08:a1:a2:90:6e:72:13:ee:ce:d8:e8:a8:33:4d:61:eb:
dc:9a:ef:b3:5b:52:d4:47:2a:7e:77:0e:0a:ef:2e:da:30:7d:
89:da:e6:7b:34:42:ad:81:25:55:18:cc:52:a9:72:f0:38:44:
f5:62:ad:2c:1d:10:4e:6b:90:09:a0:03:b3:7e:31:5a:26:f4:
bb:01:ba:99:a0:9f:0a:3a:c8:29:69:6c:8a:4b:f0:95:6c:19:
97:d5:ae:b9:6f:a5:31:72:d4:74:10:c3:7b:cc:1a:df:32:e9:
c9:62:84:84:e9:e2:2c:39:1e:22:6c:7f:8d:db:c5:9a:2c:aa:
74:c6:d6:7a:30:32:94:53:52:e3:70:17:7c:57:60:eb:5f:3f:
20:cb:d3:44:f4:14:35:26:68:9e:9b:8b:85:ea:64:fb:d1:86:
3c:53:13:56:ec:54:64:42:e6:c0:83:be:0f:46:5e:49:1b:a5:
70:2c:14:19:31:b9:8d:ee:13:9d:b7:18:23:3f:56:8f:48:5c:
71:3c:9f:31:22:b6:9b:b8:9a:5c:71:e5:f7:07:56:5a:86:aa:
5b:03:cc:70:c6:68:10:6d:b5:35:9d:e8:c0:2b:74:e8:43:fe:
d7:3d:2f:42
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAuCRXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MWVlY2Q3MWMxOTNlNGFjMzBlZDAzZDBiOWYwNWRhMTAxYzYwM2QyMB4XDTIyMDEw
MTEwMDQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTkwNWE2MGFmYmFk
MjhjMmFjZTNkMWJkYmU4NWUxNmQxMjlkYWZhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANncRVcIxkGPqqvGVw5u1hV90znq84PhWl6bZywJ++aO63Qp
vlyttRbc1xXN6XqN87ogOpioaMtikgPZEOpMTZ8uXqZO7sHdOiqIMSecrNR6c9HB
HNwJ1kXefS5nkXjtZM8MuH7wTMwGEJTo48CE++tI1efrEcC2lgq63NHLov19Dcgr
VYnXQ5RTp+9YigAdJXEhrxXaYZ1oVAHdqmzDMvbWZgge/gdV6cQSHHU0/bIoVsqB
ZG78uWFlKewxowHNhWjKKD3ygOs54pVZz7fs7qMwe8Lk3JGt4Y8udtoRGXJfrpox
uNv9f1KwgDx88wetv2VZtft08/c7AJ2b3bE89Y8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQZBaYK+60owqzj0b2+heFtEp2vrTAfBgNVHSMEGDAWgBQR7s1xwZPkrDDt
A9C58F2hAcYD0jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VlN05jY0dUNUt3dzdRUFF1ZkJkb1FIR0E5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvNGZkOTVhLTUxNTctNGExYi1iODY4LTEzODk5NWM5OWI5Ny8x
L0dRV21DdnV0S01LczQ5Rzl2b1hoYlJLZHI2MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
NGZkOTVhLTUxNTctNGExYi1iODY4LTEzODk5NWM5OWI5Ny8xL0VlN05jY0dUNUt3
dzdRUFF1ZkJkb1FIR0E5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnozDANBgkqhkiG9w0BAQsFAAOC
AQEAR5vIT/MIc+8QAyvcg7svI8z34qUIoaKQbnIT7s7Y6KgzTWHr3Jrvs1tS1Ecq
fncOCu8u2jB9idrmezRCrYElVRjMUqly8DhE9WKtLB0QTmuQCaADs34xWib0uwG6
maCfCjrIKWlsikvwlWwZl9WuuW+lMXLUdBDDe8wa3zLpyWKEhOniLDkeImx/jdvF
miyqdMbWejAylFNS43AXfFdg618/IMvTRPQUNSZonpuLhepk+9GGPFMTVuxUZELm
wIO+D0ZeSRulcCwUGTG5je4TnbcYIz9Wj0hccTyfMSK2m7iaXHHl9wdWWoaqWwPM
cMZoEG21NZ3owCt06EP+1z0vQg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:34 2023 by rpki-client on console-fra.rpki-client.org