Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gtHz9vTDDc1ZC66uTiEaI7bq4w8.roa
File: gtHz9vTDDc1ZC66uTiEaI7bq4w8.roa (raw, json)
Hash identifier: +/aT9SUt5CGDjRlp6Cymxi3ONhByB202iLhid2H1Hts=
Subject key identifier: 82:D1:F3:F6:F4:C3:0D:CD:59:0B:AE:AE:4E:21:1A:23:B6:EA:E3:0F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E5326C9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gtHz9vTDDc1ZC66uTiEaI7bq4w8.roa
Signing time: Tue 10 May 2022 10:23:03 +0000
ROA not before: Tue 10 May 2022 10:23:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48115
IP address blocks: 94.156.36.0/24 maxlen: 24
94.156.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508765897 (0x1e5326c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 10 10:23:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82d1f3f6f4c30dcd590baeae4e211a23b6eae30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:ec:8d:97:ed:73:5d:c3:82:b2:85:32:01:
bd:4e:2a:7e:56:46:b7:f0:9b:31:19:c9:99:df:0c:
ed:1b:b4:05:0d:0a:68:63:f1:89:ca:15:15:b1:ce:
7c:c1:fa:3c:ea:37:0c:4b:9c:3f:70:35:41:d7:26:
f2:1a:09:3b:29:30:38:b8:2b:6f:9c:d5:7a:df:ff:
f6:db:45:30:51:17:51:b2:83:1d:6d:52:b7:fd:0e:
80:6f:ed:d8:b9:34:5f:cc:9a:91:9b:e6:18:31:04:
33:9c:30:ec:cc:06:b2:0b:cd:49:30:73:58:f4:87:
e6:d4:21:eb:c5:57:d6:fe:7c:01:e2:74:39:fb:e8:
11:e1:7e:13:93:e8:98:6e:f4:f9:7d:c1:78:69:99:
f2:4d:88:93:33:93:0e:16:7f:14:c8:5e:30:ff:a3:
3f:b7:32:36:a2:0d:45:19:be:2d:f7:0a:4c:51:c5:
1f:0d:51:76:27:39:8b:4b:2f:51:d2:ce:81:78:c2:
92:8c:27:89:eb:87:61:96:ca:e9:e3:99:ef:47:d3:
c3:41:c0:e8:08:ba:85:34:39:40:90:d2:b4:c3:1f:
f7:16:d5:4d:17:ac:07:f5:59:fb:1b:d3:75:38:9c:
f5:d8:89:5f:3f:15:e9:62:27:d4:96:d7:7d:5f:6b:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:F3:F6:F4:C3:0D:CD:59:0B:AE:AE:4E:21:1A:23:B6:EA:E3:0F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gtHz9vTDDc1ZC66uTiEaI7bq4w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.36.0/24
94.156.101.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7a:e6:84:cd:a4:68:ca:27:36:5c:b7:f9:d0:2e:b6:89:d3:
c8:43:f3:78:fa:2a:d5:47:e3:d0:bd:57:11:3f:26:51:1c:c7:
e1:ab:8b:48:5b:dd:76:f3:73:f5:90:2a:67:44:13:9e:01:81:
fc:d6:a9:ef:36:12:92:10:80:f3:29:aa:46:42:67:0e:d7:a9:
c5:6b:81:6a:06:eb:2d:1a:9c:6d:8c:e2:0d:25:a9:94:8d:41:
fe:ea:e5:c3:de:d5:cb:f3:51:14:8f:8f:ca:dd:ec:40:cc:9d:
9a:95:33:3f:4a:8c:5c:23:5d:6b:bb:1f:b0:cf:41:47:b0:fd:
7b:3d:15:7f:6f:27:f4:1a:a6:32:85:17:96:de:51:20:37:18:
83:2e:85:fa:e4:0b:0a:4a:a1:40:6a:2d:45:74:dc:8d:30:8d:
15:98:b3:5d:60:28:dd:45:b3:08:4d:e9:e9:37:b1:b7:6b:2f:
bd:12:81:9f:b7:e1:61:ff:a5:20:af:4e:a4:09:ec:d3:f6:c7:
f6:03:5c:ee:c3:07:d6:48:8f:2d:52:08:1b:6c:9c:b8:a8:3c:
a3:24:44:b7:fc:e5:6b:f2:b4:ee:e7:5e:82:0e:ba:ba:e9:e8:
ec:9a:af:82:61:ce:f0:2e:f1:4c:33:40:e9:84:03:25:59:c2:
8d:ab:2e:a1
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHlMmyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDUx
MDEwMjMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJkMWYzZjZmNGMz
MGRjZDU5MGJhZWFlNGUyMTFhMjNiNmVhZTMwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIsQ7I2X7XNdw4KyhTIBvU4qflZGt/CbMRnJmd8M7Ru0BQ0K
aGPxicoVFbHOfMH6POo3DEucP3A1Qdcm8hoJOykwOLgrb5zVet//9ttFMFEXUbKD
HW1St/0OgG/t2Lk0X8yakZvmGDEEM5ww7MwGsgvNSTBzWPSH5tQh68VX1v58AeJ0
OfvoEeF+E5PomG70+X3BeGmZ8k2IkzOTDhZ/FMheMP+jP7cyNqINRRm+LfcKTFHF
Hw1Rdic5i0svUdLOgXjCkownieuHYZbK6eOZ70fTw0HA6Ai6hTQ5QJDStMMf9xbV
TResB/VZ+xvTdTic9diJXz8V6WIn1JbXfV9rVY0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSC0fP29MMNzVkLrq5OIRojturjDzAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L2d0SHo5dlRERGMxWkM2NnVUaUVhSTdicTR3OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF6cJAMEAF6cZTANBgkqhkiG9w0B
AQsFAAOCAQEAYnrmhM2kaMonNly3+dAutonTyEPzePoq1Ufj0L1XET8mURzH4auL
SFvddvNz9ZAqZ0QTngGB/Nap7zYSkhCA8ymqRkJnDtepxWuBagbrLRqcbYziDSWp
lI1B/urlw97Vy/NRFI+Pyt3sQMydmpUzP0qMXCNda7sfsM9BR7D9ez0Vf28n9Bqm
MoUXlt5RIDcYgy6F+uQLCkqhQGotRXTcjTCNFZizXWAo3UWzCE3p6Text2svvRKB
n7fhYf+lIK9OpAns0/bH9gNc7sMH1kiPLVIIG2ycuKg8oyREt/zla/K07udegg66
uuno7JqvgmHO8C7xTDNA6YQDJVnCjasuoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:40 2024 by rpki-client on console-ams.rpki-client.org