Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gcxjGjdRgeGM8k7287cLhVCLkZA.roa
File: gcxjGjdRgeGM8k7287cLhVCLkZA.roa (raw, json)
Hash identifier: zNzvpBgLKXAMsgAx2uk0DMYuIvP1i/nsp3MqhqE9PWc=
Subject key identifier: 81:CC:63:1A:37:51:81:E1:8C:F2:4E:F6:F3:B7:0B:85:50:8B:91:90
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0322E1A8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gcxjGjdRgeGM8k7287cLhVCLkZA.roa
Signing time: Sat 01 Jan 2022 01:54:23 +0000
ROA not before: Sat 01 Jan 2022 01:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51540
IP address blocks: 78.135.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52617640 (0x322e1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81cc631a375181e18cf24ef6f3b70b85508b9190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:7c:0d:cf:14:5f:e9:a8:9c:6f:b3:97:e1:
98:a3:53:9c:34:5f:54:4b:be:cb:94:b6:a9:c1:14:
cc:f0:7b:5e:d0:5a:f7:78:4b:bd:24:e3:74:a1:3e:
46:26:2e:a1:fe:b1:24:47:43:df:f2:7f:82:65:08:
6d:84:c8:68:2f:b7:e3:1e:a7:89:a0:6a:31:ef:cd:
4f:5f:c9:07:1b:58:d1:e9:49:8e:e8:88:e3:5c:95:
c7:d8:8d:51:81:e4:cd:21:fc:57:d4:3a:25:bb:d8:
54:39:39:f2:aa:de:70:54:c3:d0:e9:59:05:1e:f7:
41:93:c4:1c:52:e1:03:a2:07:54:e0:e1:39:c7:2a:
ca:fb:84:83:57:cb:51:73:58:18:a3:0e:eb:71:12:
b7:c9:6c:6c:2f:ec:b6:a9:85:fb:71:82:bf:77:ed:
85:4c:0a:32:96:1e:3a:2e:1c:3a:cb:4f:46:16:2c:
f6:e9:9e:75:54:e5:12:e4:75:a0:69:8a:54:36:89:
db:1e:a4:26:1d:6f:3c:31:aa:d0:ed:b3:d8:05:5f:
6c:e1:57:1f:22:08:4a:c9:4d:c5:83:d9:6a:88:ee:
7b:e9:e3:70:97:20:3b:53:50:bc:19:08:f8:8f:4c:
35:22:71:16:40:07:ff:89:3e:b1:a1:ae:c2:af:6b:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CC:63:1A:37:51:81:E1:8C:F2:4E:F6:F3:B7:0B:85:50:8B:91:90
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gcxjGjdRgeGM8k7287cLhVCLkZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4c:09:8d:68:03:7e:9c:6d:20:21:61:ae:67:f5:33:e6:e8:
b0:c4:5a:d2:e2:c1:86:21:ab:fc:cb:f0:30:54:2a:1b:f8:8a:
4b:64:8c:9e:cc:4c:78:f8:af:92:c0:0a:27:ca:a5:4b:b8:b0:
57:52:a6:90:d7:b1:c7:57:42:84:3a:8c:5b:f3:b6:18:98:9e:
e9:98:6a:22:0e:f2:ef:42:cd:a0:aa:7f:05:4b:b1:65:f8:64:
b5:ad:92:e4:06:8b:bf:1a:6b:de:12:f8:67:b1:11:7a:42:6c:
5e:e6:0b:35:6f:1b:14:e7:b0:bc:39:14:81:df:1a:30:25:12:
9e:04:42:85:2c:c9:b4:03:77:2e:e6:56:ce:8c:af:9d:35:f7:
6c:31:b0:3d:fe:cd:7b:f8:41:ac:ed:0e:45:62:7d:9b:6b:96:
12:3f:65:88:fd:69:9e:4b:81:e3:c8:bb:ef:61:60:54:ee:3b:
dd:97:77:6a:1f:c9:b9:33:d0:37:22:84:f9:a0:d4:ea:31:90:
ad:89:92:d5:7f:8d:60:b1:8c:42:0c:c4:41:ac:a7:86:1c:f9:
8b:9c:d2:33:04:fa:46:58:cc:85:97:fb:f9:f5:e4:6d:a5:43:
de:44:80:8d:2d:05:f5:8a:67:7c:3a:80:71:91:cf:e2:60:24:
c9:3c:e5:33
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAyLhqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OWQ1NzQ0N2UzNDIwYjg1Mzg3NWI2ZmE0MDM3MmFhZGUzMTkyY2EyMB4XDTIyMDEw
MTAxNTQyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODFjYzYzMWEzNzUx
ODFlMThjZjI0ZWY2ZjNiNzBiODU1MDhiOTE5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIdfA3PFF/pqJxvs5fhmKNTnDRfVEu+y5S2qcEUzPB7XtBa
93hLvSTjdKE+RiYuof6xJEdD3/J/gmUIbYTIaC+34x6niaBqMe/NT1/JBxtY0elJ
juiI41yVx9iNUYHkzSH8V9Q6JbvYVDk58qrecFTD0OlZBR73QZPEHFLhA6IHVODh
OccqyvuEg1fLUXNYGKMO63ESt8lsbC/stqmF+3GCv3fthUwKMpYeOi4cOstPRhYs
9umedVTlEuR1oGmKVDaJ2x6kJh1vPDGq0O2z2AVfbOFXHyIISslNxYPZaojue+nj
cJcgO1NQvBkI+I9MNSJxFkAH/4k+saGuwq9rKW0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSBzGMaN1GB4YzyTvbztwuFUIuRkDAfBgNVHSMEGDAWgBTJ1XRH40ILhTh1
tvpANyqt4xksojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lkVjBSLU5DQzRVNGRiYjZRRGNxcmVNWkxLSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGQvMTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8x
L2djeGpHamRSZ2VHTThrNzI4N2NMaFZDTGtaQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQv
MTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8xL3lkVjBSLU5DQzRV
NGRiYjZRRGNxcmVNWkxLSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE6HVDANBgkqhkiG9w0BAQsFAAOC
AQEAa0wJjWgDfpxtICFhrmf1M+bosMRa0uLBhiGr/MvwMFQqG/iKS2SMnsxMePiv
ksAKJ8qlS7iwV1KmkNexx1dChDqMW/O2GJie6ZhqIg7y70LNoKp/BUuxZfhkta2S
5AaLvxpr3hL4Z7ERekJsXuYLNW8bFOewvDkUgd8aMCUSngRChSzJtAN3LuZWzoyv
nTX3bDGwPf7Ne/hBrO0ORWJ9m2uWEj9liP1pnkuB48i772FgVO473Zd3ah/JuTPQ
NyKE+aDU6jGQrYmS1X+NYLGMQgzEQaynhhz5i5zSMwT6RljMhZf7+fXkbaVD3kSA
jS0F9YpnfDqAcZHP4mAkyTzlMw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org