Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/Gn7xFLi795lYh_DpZ98XdrNxfP0.roa
File: Gn7xFLi795lYh_DpZ98XdrNxfP0.roa (raw, json)
Hash identifier: KQkMiw++pyCo5d2Pm1fRJCgbaT2mhXPEyWklMyoq8Dw=
Subject key identifier: 1A:7E:F1:14:B8:BB:F7:99:58:87:F0:E9:67:DF:17:76:B3:71:7C:FD
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 023E7A85
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/Gn7xFLi795lYh_DpZ98XdrNxfP0.roa
Signing time: Sat 01 Jan 2022 07:54:15 +0000
ROA not before: Sat 01 Jan 2022 07:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42893
IP address blocks: 146.66.192.0/20 maxlen: 20
178.252.64.0/18 maxlen: 18
146.66.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37649029 (0x23e7a85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Jan 1 07:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a7ef114b8bbf7995887f0e967df1776b3717cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:83:00:c5:a3:ab:90:71:bc:59:f1:8c:a6:
54:84:2a:4d:a2:90:ab:bf:f9:9a:c3:19:90:95:03:
39:12:65:34:27:0f:89:6e:dd:e4:af:06:6f:24:9f:
d7:2c:60:03:24:76:d6:31:3b:a0:14:1c:6c:9a:52:
7e:36:ab:58:d4:6e:16:71:65:1a:7a:cd:ab:07:11:
be:bf:0b:07:ab:be:d4:8b:5a:b0:db:01:79:0c:87:
bb:f0:e4:dd:08:ad:64:04:06:a2:f6:83:3f:0b:d9:
4c:0b:8c:d8:ca:d6:d7:e0:71:34:b8:53:d9:65:dc:
26:14:6c:6a:ab:b5:ee:6a:75:8b:88:68:9a:b4:2c:
5f:cf:ce:c6:ff:43:e8:c1:30:9b:ee:8e:31:04:2a:
6a:b1:17:6a:8a:6b:26:41:4c:4e:e6:b0:66:7c:18:
90:10:c5:8a:a2:8d:30:55:4c:d0:27:c7:b4:e3:cf:
b7:83:47:30:f6:94:ad:2f:45:f6:70:12:de:d0:99:
89:d3:1e:31:a2:4f:1f:a0:12:5f:81:46:42:e1:f2:
4a:af:1d:09:ff:3f:cb:b7:fa:75:52:34:5d:c3:3d:
b1:53:2c:e9:41:c6:82:91:46:b8:d8:76:01:be:20:
d7:88:1e:53:5a:c1:00:06:b5:04:44:c8:66:10:31:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7E:F1:14:B8:BB:F7:99:58:87:F0:E9:67:DF:17:76:B3:71:7C:FD
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/Gn7xFLi795lYh_DpZ98XdrNxfP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.160.0-146.66.207.255
178.252.64.0/18
Signature Algorithm: sha256WithRSAEncryption
77:6e:50:f9:ca:0b:7c:71:9d:67:4c:31:7d:99:e2:81:37:4a:
3b:f8:d2:3e:31:5f:28:8d:b3:95:25:cc:d6:01:67:6e:92:3e:
30:fa:26:d8:0a:e7:63:ab:b3:a1:90:9a:c7:52:23:b5:0b:05:
63:02:97:72:63:1a:76:d9:3f:d3:cf:00:cc:95:13:39:08:55:
26:da:a5:90:87:49:71:bb:b2:f6:a5:fd:35:52:38:34:96:fd:
aa:a4:67:83:d7:51:8a:45:d5:5d:2f:6d:63:f8:3d:73:40:33:
c3:a0:ec:fd:fb:30:f2:b8:ce:95:e8:af:2d:5e:a1:79:60:e9:
f0:09:73:18:44:25:1c:16:49:93:c3:ec:44:09:d5:37:c2:eb:
46:08:c3:e7:61:d7:4c:04:10:2e:57:f8:63:2b:eb:eb:ed:a5:
44:eb:9c:19:0b:8f:dd:29:b9:d5:27:a5:40:6f:12:a7:e8:41:
49:c9:21:74:3d:87:ae:f5:e4:d3:a0:9e:18:ca:84:db:ec:1f:
dd:8a:a8:c8:91:24:e1:8e:1c:24:55:fe:34:50:d8:92:81:35:
44:df:f6:5c:4e:99:88:b5:04:26:0f:87:e5:0a:b1:9e:8b:1d:
b5:f5:79:3c:65:80:10:a1:6f:93:62:89:25:59:1c:c8:ea:e9:
cb:70:bc:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEAj56hTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MzE5NmM4OWU1NTRkYmU0Nzc0NTIyNzU5OTA2ZTI1ODFhMTc0Njk0MB4XDTIyMDEw
MTA3NTQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWE3ZWYxMTRiOGJi
Zjc5OTU4ODdmMGU5NjdkZjE3NzZiMzcxN2NmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMh9gwDFo6uQcbxZ8YymVIQqTaKQq7/5msMZkJUDORJlNCcP
iW7d5K8GbySf1yxgAyR21jE7oBQcbJpSfjarWNRuFnFlGnrNqwcRvr8LB6u+1Ita
sNsBeQyHu/Dk3QitZAQGovaDPwvZTAuM2MrW1+BxNLhT2WXcJhRsaqu17mp1i4ho
mrQsX8/Oxv9D6MEwm+6OMQQqarEXaoprJkFMTuawZnwYkBDFiqKNMFVM0CfHtOPP
t4NHMPaUrS9F9nAS3tCZidMeMaJPH6ASX4FGQuHySq8dCf8/y7f6dVI0XcM9sVMs
6UHGgpFGuNh2Ab4g14geU1rBAAa1BETIZhAxckkCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQafvEUuLv3mViH8Oln3xd2s3F8/TAfBgNVHSMEGDAWgBQDGWyJ5VTb5HdF
InWZBuJYGhdGlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0F4bHNpZVZVMi1SM1JTSjFtUWJpV0JvWFJwUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2IvOWVkNzZiLTM1YTYtNGE5ZC05ZmE2LTg1MTdhOGYzNTVhZS8x
L0duN3hGTGk3OTVsWWhfRHBaOThYZHJOeGZQMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Iv
OWVkNzZiLTM1YTYtNGE5ZC05ZmE2LTg1MTdhOGYzNTVhZS8xL0F4bHNpZVZVMi1S
M1JTSjFtUWJpV0JvWFJwUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQFkkKgAwQEkkLAAwQGsvxAMA0G
CSqGSIb3DQEBCwUAA4IBAQB3blD5ygt8cZ1nTDF9meKBN0o7+NI+MV8ojbOVJczW
AWdukj4w+ibYCudjq7OhkJrHUiO1CwVjApdyYxp22T/TzwDMlRM5CFUm2qWQh0lx
u7L2pf01Ujg0lv2qpGeD11GKRdVdL21j+D1zQDPDoOz9+zDyuM6V6K8tXqF5YOnw
CXMYRCUcFkmTw+xECdU3wutGCMPnYddMBBAuV/hjK+vr7aVE65wZC4/dKbnVJ6VA
bxKn6EFJySF0PYeu9eTToJ4YyoTb7B/diqjIkSThjhwkVf40UNiSgTVE3/ZcTpmI
tQQmD4flCrGeix219Xk8ZYAQoW+TYoklWRzI6unLcLxU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:04 2024 by rpki-client on console-ams.rpki-client.org