Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/g5Cx3UioCSPwu9YXzSyNKyafFOw.roa
File: g5Cx3UioCSPwu9YXzSyNKyafFOw.roa (raw, json)
Hash identifier: NC+7IN3vcg2DA18EqrrOykzFdDVtq5oWc4kbpmlEMCE=
Subject key identifier: 83:90:B1:DD:48:A8:09:23:F0:BB:D6:17:CD:2C:8D:2B:26:9F:14:EC
Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial: 061888F6
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/g5Cx3UioCSPwu9YXzSyNKyafFOw.roa
Signing time: Sat 01 Jan 2022 14:58:42 +0000
ROA not before: Sat 01 Jan 2022 14:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 195.49.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102271222 (0x61888f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Validity
Not Before: Jan 1 14:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8390b1dd48a80923f0bbd617cd2c8d2b269f14ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:b2:be:d3:b5:0d:b0:9b:91:89:88:83:48:
8d:06:b6:55:85:f9:bd:95:be:25:23:59:8c:75:02:
4a:cd:70:80:08:93:62:f0:ca:ca:8a:88:fa:54:ac:
d7:e2:3c:34:8a:20:ad:05:44:7b:72:e4:37:d4:64:
24:ba:8a:1c:c2:7a:25:3b:4d:01:39:a9:0e:41:04:
da:01:c5:7b:b8:b5:8e:99:da:b9:6f:66:c2:4c:16:
7d:cb:bb:d2:11:e5:be:7c:ba:34:36:e8:9e:52:f5:
ef:b5:66:4e:54:4c:d5:32:9d:e4:d4:00:5c:ce:2f:
ce:95:c9:cb:6c:f4:6b:19:a5:20:89:6e:35:27:9d:
1a:85:4c:f1:16:d3:34:39:73:49:da:69:26:3d:82:
40:c0:99:d7:e9:73:38:43:d0:93:89:82:d2:3d:8e:
e8:71:53:18:aa:10:e1:c1:fb:b1:9f:08:3e:e5:33:
24:9c:02:be:64:a5:3c:d0:e3:13:13:06:d3:96:b4:
c0:08:73:0b:a1:46:62:a8:5d:5f:78:ec:90:76:8d:
43:a1:ed:e5:82:40:b8:39:0c:d2:45:bc:bb:5d:62:
d7:76:eb:25:3a:0f:56:7f:96:64:16:c0:6c:24:33:
29:a0:e1:7a:9a:db:3a:0c:26:5b:08:df:1d:67:0a:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:B1:DD:48:A8:09:23:F0:BB:D6:17:CD:2C:8D:2B:26:9F:14:EC
X509v3 Authority Key Identifier:
keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/g5Cx3UioCSPwu9YXzSyNKyafFOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.236.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:e8:6f:fa:6d:e0:ca:84:cc:ce:78:ad:9a:9c:a8:ca:f3:1b:
f7:83:dd:f9:3a:10:ee:58:4c:d1:41:a4:a6:39:a1:b5:1a:72:
8c:36:fa:20:3f:b7:07:cb:6e:80:7e:38:06:c1:c0:76:da:8e:
84:94:a1:b8:16:9b:7a:ad:4d:8f:e3:f9:eb:72:4d:ad:4f:27:
e4:34:5f:71:7c:ac:53:ff:3f:95:ff:33:3d:58:a8:e2:b7:2d:
71:07:2b:99:49:69:5f:63:b3:38:90:7e:51:aa:bf:77:3a:96:
06:ca:18:a1:8d:d7:4d:01:5f:4e:4b:0f:93:f1:66:a3:d7:68:
d4:da:28:30:1a:68:b7:4d:c0:9c:03:8e:4b:e2:50:e5:40:65:
c0:a0:c4:c8:0d:25:4b:c1:f4:4c:d2:29:81:ff:0c:0a:d4:69:
b7:4c:a1:9c:3c:47:08:36:1c:5d:bc:8f:75:01:c0:e7:ae:0b:
89:64:ad:09:45:0e:12:94:8e:f8:96:0b:61:13:6e:8c:52:30:
3f:52:53:77:15:8b:e7:d3:66:24:ed:75:f7:e1:3f:a6:bf:0a:
69:85:e2:88:7d:64:c6:80:13:8e:78:90:67:4d:ff:36:74:7a:
1d:c9:f7:27:53:39:f4:f4:1e:93:12:f0:f3:01:0c:b6:92:04:
e4:ee:7b:e2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBhiI9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTRmODAwMWMzMGNhYzU0NmUzZjkyMTAzYjRiMTI3MzJkZmNiZjUyMB4XDTIyMDEw
MTE0NTg0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODM5MGIxZGQ0OGE4
MDkyM2YwYmJkNjE3Y2QyYzhkMmIyNjlmMTRlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpisr7TtQ2wm5GJiINIjQa2VYX5vZW+JSNZjHUCSs1wgAiT
YvDKyoqI+lSs1+I8NIogrQVEe3LkN9RkJLqKHMJ6JTtNATmpDkEE2gHFe7i1jpna
uW9mwkwWfcu70hHlvny6NDbonlL177VmTlRM1TKd5NQAXM4vzpXJy2z0axmlIIlu
NSedGoVM8RbTNDlzSdppJj2CQMCZ1+lzOEPQk4mC0j2O6HFTGKoQ4cH7sZ8IPuUz
JJwCvmSlPNDjExMG05a0wAhzC6FGYqhdX3jskHaNQ6Ht5YJAuDkM0kW8u11i13br
JToPVn+WZBbAbCQzKaDheprbOgwmWwjfHWcK/LUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSDkLHdSKgJI/C71hfNLI0rJp8U7DAfBgNVHSMEGDAWgBQaT4ABwwysVG4/
khA7SxJzLfy/UjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0drLUFBY01NckZSdVA1SVFPMHNTY3kzOHYxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvZDZjODZkLTZjNjUtNGEyNS1hOGZhLTM4ZDRmMzIxMTg5Ni8x
L2c1Q3gzVWlvQ1NQd3U5WVh6U3lOS3lhZkZPdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
ZDZjODZkLTZjNjUtNGEyNS1hOGZhLTM4ZDRmMzIxMTg5Ni8xL0drLUFBY01NckZS
dVA1SVFPMHNTY3kzOHYxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcMx7DANBgkqhkiG9w0BAQsFAAOC
AQEAPuhv+m3gyoTMznitmpyoyvMb94Pd+ToQ7lhM0UGkpjmhtRpyjDb6ID+3B8tu
gH44BsHAdtqOhJShuBabeq1Nj+P563JNrU8n5DRfcXysU/8/lf8zPVio4rctcQcr
mUlpX2OzOJB+Uaq/dzqWBsoYoY3XTQFfTksPk/Fmo9do1NooMBpot03AnAOOS+JQ
5UBlwKDEyA0lS8H0TNIpgf8MCtRpt0yhnDxHCDYcXbyPdQHA564LiWStCUUOEpSO
+JYLYRNujFIwP1JTdxWL59NmJO119+E/pr8KaYXiiH1kxoATjniQZ03/NnR6Hcn3
J1M59PQekxLw8wEMtpIE5O574g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:21 2024 by rpki-client on console-ams.rpki-client.org