Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gw3ybEZLMx0zdXVnq5JGzteT9iU.roa
File: gw3ybEZLMx0zdXVnq5JGzteT9iU.roa (raw, json)
Hash identifier: 3SDmEQT2oJ/wcC691KvexsZCrzFkpZgcuOzcIfzv/iU=
Subject key identifier: 83:0D:F2:6C:46:4B:33:1D:33:75:75:67:AB:92:46:CE:D7:93:F6:25
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0A63D72A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gw3ybEZLMx0zdXVnq5JGzteT9iU.roa
Signing time: Wed 13 Apr 2022 08:33:52 +0000
ROA not before: Wed 13 Apr 2022 08:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48658
IP address blocks: 45.131.64.0/24 maxlen: 24
45.137.203.0/24 maxlen: 24
5.252.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174315306 (0xa63d72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Apr 13 08:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=830df26c464b331d33757567ab9246ced793f625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:c3:f1:7d:2b:68:7a:af:58:2b:a0:cb:11:
f3:d6:25:06:73:47:83:e6:17:d7:58:ab:19:ef:05:
91:5f:b7:7f:ca:45:f2:98:73:b0:ca:bb:5d:a7:08:
e1:f1:e7:1d:b2:05:df:ac:05:24:97:d7:fa:52:e9:
29:15:be:18:d9:98:ff:c6:ec:55:bd:b2:38:5b:cd:
04:ad:fd:5f:3e:15:3c:f5:ff:59:53:f7:4d:b9:67:
a2:c5:2a:31:95:f8:3c:56:32:eb:aa:42:2e:90:d2:
89:1f:73:cb:d1:92:76:3b:14:a2:0f:a8:3d:93:25:
07:12:7b:0e:93:3a:75:c6:6e:74:c1:2d:cb:3e:9e:
37:d0:c0:87:e0:ff:aa:5c:12:2b:b9:00:da:47:89:
dc:0e:a5:b6:56:18:f5:2b:b0:4f:73:0d:9b:5e:35:
9d:de:4c:99:d2:75:8a:6a:1c:84:ee:70:d1:5e:d6:
0a:36:f9:df:5e:63:f6:c9:1c:ea:e3:00:c6:c5:68:
a1:e6:10:74:68:d4:69:5c:d3:0d:2c:ed:81:50:64:
59:14:50:98:58:5d:41:bd:1a:f7:d6:1f:2f:80:5e:
1e:0b:8e:32:a8:9e:26:02:89:a3:5a:e0:60:07:97:
56:a1:8f:fd:23:4c:22:ad:2e:4b:73:98:39:cf:0b:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0D:F2:6C:46:4B:33:1D:33:75:75:67:AB:92:46:CE:D7:93:F6:25
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gw3ybEZLMx0zdXVnq5JGzteT9iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.100.0/22
45.131.64.0/24
45.137.203.0/24
Signature Algorithm: sha256WithRSAEncryption
40:10:92:a9:59:00:68:54:de:a7:77:cf:57:df:a8:99:57:ac:
41:16:48:a3:f7:39:b9:85:8e:18:fc:65:ba:99:77:ef:7c:f4:
9e:fc:bd:89:d9:61:36:57:e6:f9:89:df:a9:7d:c3:a6:e6:e7:
57:5d:b0:80:15:1b:06:99:31:05:7f:56:9b:cb:46:83:56:bc:
e8:0c:e7:5b:f3:eb:20:6e:b7:db:f9:bd:61:d4:77:65:c6:af:
80:79:83:9d:ab:b2:f6:b8:b8:03:68:8a:07:d7:03:2f:f7:e5:
f1:ee:9e:7f:29:5c:b4:9e:93:d8:08:50:a5:48:7d:3b:ce:0b:
fa:e9:97:35:04:20:3a:c2:2a:7f:9d:d6:c0:18:ee:d7:07:ee:
4a:49:1f:6e:ab:26:45:e4:55:af:13:6a:0f:1d:d3:7c:84:af:
7d:b4:5b:91:c6:5a:c7:b3:41:ad:17:87:d3:a9:e2:16:6c:e0:
69:8e:45:38:95:33:e4:e5:39:3e:71:44:3e:1a:8f:84:c6:c1:
c8:6e:a3:3d:15:f8:0c:fe:3e:a9:09:bd:83:d1:87:70:f7:0b:
61:8e:fc:1e:42:5f:2a:61:45:82:3a:db:f0:6c:a9:e7:55:ce:
55:44:70:e1:94:d8:ba:9b:b2:cc:a2:af:0c:4d:25:97:09:ea:
82:c6:b4:35
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECmPXKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjA0MTViZmM0M2IzOGU5Y2ZkMWExMjk5NTIwMmU4NzYzNzUyZmRlMB4XDTIyMDQx
MzA4MzM1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODMwZGYyNmM0NjRi
MzMxZDMzNzU3NTY3YWI5MjQ2Y2VkNzkzZjYyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZrw/F9K2h6r1groMsR89YlBnNHg+YX11irGe8FkV+3f8pF
8phzsMq7XacI4fHnHbIF36wFJJfX+lLpKRW+GNmY/8bsVb2yOFvNBK39Xz4VPPX/
WVP3TblnosUqMZX4PFYy66pCLpDSiR9zy9GSdjsUog+oPZMlBxJ7DpM6dcZudMEt
yz6eN9DAh+D/qlwSK7kA2keJ3A6ltlYY9SuwT3MNm141nd5MmdJ1imochO5w0V7W
Cjb5315j9skc6uMAxsVooeYQdGjUaVzTDSztgVBkWRRQmFhdQb0a99YfL4BeHguO
MqieJgKJo1rgYAeXVqGP/SNMIq0uS3OYOc8LeHsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSDDfJsRkszHTN1dWerkkbO15P2JTAfBgNVHSMEGDAWgBQbBBW/xDs46c/R
oSmVIC6HY3Uv3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8x
L2d3M3liRVpMTXgwemRYVm5xNUpHenRlVDlpVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8xL0d3UVZ2OFE3T09u
UDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAgX8ZAMEAC2DQAMEAC2JyzANBgkq
hkiG9w0BAQsFAAOCAQEAQBCSqVkAaFTep3fPV9+omVesQRZIo/c5uYWOGPxlupl3
73z0nvy9idlhNlfm+YnfqX3DpubnV12wgBUbBpkxBX9Wm8tGg1a86AznW/PrIG63
2/m9YdR3ZcavgHmDnauy9ri4A2iKB9cDL/fl8e6efylctJ6T2AhQpUh9O84L+umX
NQQgOsIqf53WwBju1wfuSkkfbqsmReRVrxNqDx3TfISvfbRbkcZax7NBrReH06ni
FmzgaY5FOJUz5OU5PnFEPhqPhMbByG6jPRX4DP4+qQm9g9GHcPcLYY78HkJfKmFF
gjrb8Gyp51XOVURw4ZTYupuyzKKvDE0llwnqgsa0NQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org