Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/2GsUOBl_FQ9xQq6raogvJbkqY0U.roa
File: 2GsUOBl_FQ9xQq6raogvJbkqY0U.roa (raw, json)
Hash identifier: RzZ5TrCz2CWxufEPhMjqt2lABeaoEfvuTshe9MkALC4=
Subject key identifier: D8:6B:14:38:19:7F:15:0F:71:42:AE:AB:6A:88:2F:25:B9:2A:63:45
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 35B38E5C
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/2GsUOBl_FQ9xQq6raogvJbkqY0U.roa
Signing time: Sat 01 Jan 2022 16:06:27 +0000
ROA not before: Sat 01 Jan 2022 16:06:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3209
IP address blocks: 188.74.38.0/24 maxlen: 24
2a03:4b20:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900959836 (0x35b38e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 16:06:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d86b1438197f150f7142aeab6a882f25b92a6345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:51:27:89:61:c7:53:4e:84:45:87:a3:50:
cf:34:f4:66:ae:0c:30:d2:86:87:3b:ee:3c:b2:e8:
86:0c:ca:09:67:75:62:09:ee:81:58:0f:42:a4:35:
3d:e1:ab:cb:b9:d3:ad:da:d6:9b:76:69:d5:8a:86:
81:54:1e:8c:94:9f:52:15:4e:f0:1f:f3:61:63:72:
ea:9d:f9:72:26:bd:91:bb:25:b7:c9:7a:e6:8f:c4:
93:b8:54:1e:ea:cd:e5:65:51:53:18:28:0d:23:fc:
44:64:14:42:24:ea:96:e7:d8:0c:d5:e9:59:23:d5:
dc:7c:77:4c:95:2e:4d:f2:ee:d0:72:b0:13:7a:91:
e6:66:ae:c9:39:e1:56:c1:c2:62:80:65:b9:93:45:
90:3a:cb:55:9d:44:c6:51:47:c9:9d:a6:05:c0:2d:
23:cb:e4:91:b5:51:5b:6f:66:99:e4:04:e8:52:bb:
56:df:ab:81:9e:63:95:b6:1b:09:bc:36:ae:16:c3:
d5:eb:cd:e8:92:90:e2:61:7a:02:ad:8a:87:ac:47:
05:33:1c:f5:c8:bb:f2:a8:80:c7:2d:e9:63:03:25:
80:5f:5e:f5:c5:b8:0d:03:de:a2:be:a9:b5:5a:25:
be:4e:af:86:2d:06:ff:b6:27:db:13:65:cd:02:c7:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:14:38:19:7F:15:0F:71:42:AE:AB:6A:88:2F:25:B9:2A:63:45
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/2GsUOBl_FQ9xQq6raogvJbkqY0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.38.0/24
IPv6:
2a03:4b20:f000::/36
Signature Algorithm: sha256WithRSAEncryption
41:e4:51:6d:db:6a:13:3d:45:23:ac:c4:91:19:83:f9:96:61:
18:55:30:ec:96:15:2f:67:02:15:c4:1a:58:3d:55:f3:69:aa:
82:f0:d4:34:11:44:75:9f:ba:d9:da:bf:14:35:3e:ac:79:fc:
41:59:09:76:98:22:5e:7a:0c:7f:75:24:d8:8e:59:c0:33:6a:
0e:c5:8c:c7:cc:eb:cb:96:63:a1:ae:7b:19:6f:8c:39:d4:86:
32:06:e4:d9:74:b9:94:e6:c9:c8:97:65:46:28:7a:39:81:7b:
17:d9:27:d7:de:a3:54:d8:88:18:d0:40:a3:17:9f:f9:da:8a:
44:b9:47:29:57:f1:ab:4e:ec:98:0d:48:41:c7:b4:76:54:14:
e6:11:01:ea:ae:6a:6d:50:44:ba:ea:cf:db:24:48:fd:f7:b6:
a2:20:c5:fa:d3:2b:60:5e:b4:15:fc:4d:74:b6:88:7c:45:da:
12:fe:3f:76:6a:2b:ee:6d:27:a7:1f:8c:75:de:be:97:98:b6:
b8:84:4f:cb:a8:b9:14:7b:4c:e6:a9:29:69:e4:21:be:23:f3:
db:85:da:28:6b:2e:4d:79:dd:b1:52:fe:a3:a1:20:64:ac:7b:
b0:a3:ed:29:85:58:96:e5:43:fb:9e:83:59:a2:5a:e0:9c:0d:
45:d0:24:cd
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIENbOOXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MzlmMWE2ZTg0YzAyNzdlZmNiNTZkOTQyYjBlYjVlNDU2NDcxMTI5MB4XDTIyMDEw
MTE2MDYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDg2YjE0MzgxOTdm
MTUwZjcxNDJhZWFiNmE4ODJmMjViOTJhNjM0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMs8USeJYcdTToRFh6NQzzT0Zq4MMNKGhzvuPLLohgzKCWd1
YgnugVgPQqQ1PeGry7nTrdrWm3Zp1YqGgVQejJSfUhVO8B/zYWNy6p35cia9kbsl
t8l65o/Ek7hUHurN5WVRUxgoDSP8RGQUQiTqlufYDNXpWSPV3Hx3TJUuTfLu0HKw
E3qR5mauyTnhVsHCYoBluZNFkDrLVZ1ExlFHyZ2mBcAtI8vkkbVRW29mmeQE6FK7
Vt+rgZ5jlbYbCbw2rhbD1evN6JKQ4mF6Aq2Kh6xHBTMc9ci78qiAxy3pYwMlgF9e
9cW4DQPeor6ptVolvk6vhi0G/7Yn2xNlzQLHv4UCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBTYaxQ4GX8VD3FCrqtqiC8luSpjRTAfBgNVHSMEGDAWgBTjnxpuhMAnfvy1
bZQrDrXkVkcRKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzQ1OGFib1RBSjM3OHRXMlVLdzYxNUZaSEVTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2UvMTYwYTc3LTc1NmQtNDQxYS04NmMzLTBlNTM5Mjc1N2Y4Mi8x
LzJHc1VPQmxfRlE5eFFxNnJhb2d2SmJrcVkwVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Uv
MTYwYTc3LTc1NmQtNDQxYS04NmMzLTBlNTM5Mjc1N2Y4Mi8xLzQ1OGFib1RBSjM3
OHRXMlVLdzYxNUZaSEVTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEALxKJjAOBAIAAjAIAwYEKgNLIPAw
DQYJKoZIhvcNAQELBQADggEBAEHkUW3bahM9RSOsxJEZg/mWYRhVMOyWFS9nAhXE
Glg9VfNpqoLw1DQRRHWfutnavxQ1Pqx5/EFZCXaYIl56DH91JNiOWcAzag7FjMfM
68uWY6GuexlvjDnUhjIG5Nl0uZTmyciXZUYoejmBexfZJ9feo1TYiBjQQKMXn/na
ikS5RylX8atO7JgNSEHHtHZUFOYRAequam1QRLrqz9skSP33tqIgxfrTK2BetBX8
TXS2iHxF2hL+P3ZqK+5tJ6cfjHXevpeYtriET8uouRR7TOapKWnkIb4j89uF2ihr
Lk153bFS/qOhIGSse7Cj7SmFWJblQ/ueg1miWuCcDUXQJM0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org