Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gUKN4etsO2gjoxvmPI5WPWx-UEY.roa
File: gUKN4etsO2gjoxvmPI5WPWx-UEY.roa (raw, json)
Hash identifier: qlHuvpkU9XlT0bWQwI2en6euVnhn4VmyvAAqqdusgCE=
Subject key identifier: 81:42:8D:E1:EB:6C:3B:68:23:A3:1B:E6:3C:8E:56:3D:6C:7E:50:46
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 099A6116
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gUKN4etsO2gjoxvmPI5WPWx-UEY.roa
Signing time: Sat 01 Jan 2022 05:04:09 +0000
ROA not before: Sat 01 Jan 2022 05:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200030
IP address blocks: 178.156.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161112342 (0x99a6116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81428de1eb6c3b6823a31be63c8e563d6c7e5046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:36:29:d0:9a:d7:3e:52:52:b7:0d:6e:fc:
0e:f8:1d:f5:76:1a:c1:50:7d:96:74:55:73:b3:e8:
16:69:fa:d4:b8:ea:56:99:e4:7c:78:2c:5b:b8:c5:
55:c9:1e:78:83:7b:ee:6f:ac:70:a2:c1:d1:37:c6:
9f:27:17:87:5e:48:d0:c4:51:ae:2b:86:73:10:22:
85:d1:0b:e2:35:9b:45:88:b2:6f:ad:d5:a7:d9:7e:
0e:8b:87:d1:48:61:d2:20:c8:92:dd:3b:4a:15:cd:
37:ae:be:c7:10:0a:3c:a5:10:28:49:b7:ce:8e:54:
2d:96:bd:7f:0a:e1:56:84:1e:c5:a9:07:d9:54:0f:
56:26:fc:42:ad:59:95:81:21:54:1b:26:43:92:e3:
d4:1c:cf:4a:1e:0d:67:e9:6c:fc:16:19:e0:6b:0f:
56:b8:8f:67:15:fa:6c:f7:b1:32:5f:3a:d5:6e:14:
06:7e:f0:b8:7b:e5:6c:81:e0:c0:04:cb:07:99:12:
ec:eb:9a:69:dc:6d:81:20:4b:24:32:4e:49:bb:db:
53:3b:8e:a9:29:98:5e:65:9e:91:92:89:5d:f6:3c:
3c:24:a8:8a:76:df:16:c8:67:5c:e7:ff:a4:f5:1c:
37:d1:84:31:55:4a:41:17:c8:cf:23:a2:0f:b1:5b:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:42:8D:E1:EB:6C:3B:68:23:A3:1B:E6:3C:8E:56:3D:6C:7E:50:46
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gUKN4etsO2gjoxvmPI5WPWx-UEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.156.38.0/24
Signature Algorithm: sha256WithRSAEncryption
98:43:49:1f:d9:b6:9b:f3:48:e1:95:cb:8f:9c:f0:e2:2a:b9:
9c:28:e2:67:e9:44:68:13:4e:ab:61:1a:a0:5f:52:24:91:35:
92:dc:8e:6b:fa:fe:80:71:e7:27:00:a0:aa:ec:85:3d:70:d2:
36:37:dd:91:6b:ea:f8:d1:b3:38:04:6f:4a:66:0e:87:5d:66:
47:92:35:0d:fd:9d:ea:86:70:35:d5:0b:1b:69:a8:85:ef:90:
dd:c2:d8:6c:95:85:6f:87:9b:35:f8:af:ca:25:ee:4d:e4:e5:
a9:c8:64:89:33:77:10:d4:84:c9:37:61:cf:e5:a2:21:80:fd:
1c:c1:f2:fb:81:d7:35:8f:df:ce:1f:ce:0e:b1:8d:d3:8e:7c:
e9:45:3d:c3:75:2e:fa:16:8d:83:b8:90:4e:7b:72:e8:e3:66:
2a:c3:da:ed:ee:78:eb:46:1a:19:d3:80:18:b2:a1:ec:90:5e:
7c:fc:c6:35:dd:74:2f:99:e8:22:05:c1:ed:f0:7b:90:1c:61:
14:d4:08:43:16:f9:71:73:b3:9d:81:d8:be:17:1d:f5:ff:64:
cb:02:da:ae:ea:76:b7:c2:5c:7d:3f:f5:44:8f:94:e9:9f:15:
97:d9:17:57:2e:c8:85:85:d3:2d:30:a3:7f:33:aa:22:4a:b7:
5b:16:8f:8e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECZphFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YWFmMTdiMDAxNWRiYjdjZDk5MmYyNmNkZmYwMWM0ZTI2MjBiNzNlMB4XDTIyMDEw
MTA1MDQwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODE0MjhkZTFlYjZj
M2I2ODIzYTMxYmU2M2M4ZTU2M2Q2YzdlNTA0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAME7NinQmtc+UlK3DW78Dvgd9XYawVB9lnRVc7PoFmn61Ljq
VpnkfHgsW7jFVckeeIN77m+scKLB0TfGnycXh15I0MRRriuGcxAihdEL4jWbRYiy
b63Vp9l+DouH0Uhh0iDIkt07ShXNN66+xxAKPKUQKEm3zo5ULZa9fwrhVoQexakH
2VQPVib8Qq1ZlYEhVBsmQ5Lj1BzPSh4NZ+ls/BYZ4GsPVriPZxX6bPexMl861W4U
Bn7wuHvlbIHgwATLB5kS7OuaadxtgSBLJDJOSbvbUzuOqSmYXmWekZKJXfY8PCSo
inbfFshnXOf/pPUcN9GEMVVKQRfIzyOiD7FbOpECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSBQo3h62w7aCOjG+Y8jlY9bH5QRjAfBgNVHSMEGDAWgBTarxewAV27fNmS
8mzf8BxOJiC3PjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJxOFhzQUZkdTN6Wmt2SnMzX0FjVGlZZ3R6NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDUvYzg5NzNjLTNjZmEtNDYwNC04MTEwLWNmMDZkMTk4M2JhMS8x
L2dVS040ZXRzTzJnam94dm1QSTVXUFd4LVVFWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUv
Yzg5NzNjLTNjZmEtNDYwNC04MTEwLWNmMDZkMTk4M2JhMS8xLzJxOFhzQUZkdTN6
Wmt2SnMzX0FjVGlZZ3R6NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALKcJjANBgkqhkiG9w0BAQsFAAOC
AQEAmENJH9m2m/NI4ZXLj5zw4iq5nCjiZ+lEaBNOq2EaoF9SJJE1ktyOa/r+gHHn
JwCgquyFPXDSNjfdkWvq+NGzOARvSmYOh11mR5I1Df2d6oZwNdULG2mohe+Q3cLY
bJWFb4ebNfivyiXuTeTlqchkiTN3ENSEyTdhz+WiIYD9HMHy+4HXNY/fzh/ODrGN
04586UU9w3Uu+haNg7iQTnty6ONmKsPa7e5460YaGdOAGLKh7JBefPzGNd10L5no
IgXB7fB7kBxhFNQIQxb5cXOznYHYvhcd9f9kywLarup2t8JcfT/1RI+U6Z8Vl9kX
Vy7IhYXTLTCjfzOqIkq3WxaPjg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org