Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gADl9WcNkMj2w3DV5qP8sfEqm90.roa
File: gADl9WcNkMj2w3DV5qP8sfEqm90.roa (raw, json)
Hash identifier: ZZlCGCYv5AMI0iHvdCfRED/zV+1uxtxY/y/gNetW0h0=
Subject key identifier: 80:00:E5:F5:67:0D:90:C8:F6:C3:70:D5:E6:A3:FC:B1:F1:2A:9B:DD
Certificate issuer: /CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Certificate serial: 01499DA1
Authority key identifier: 80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gADl9WcNkMj2w3DV5qP8sfEqm90.roa
Signing time: Mon 04 Apr 2022 10:11:25 +0000
ROA not before: Mon 04 Apr 2022 10:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.126.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21601697 (0x1499da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Validity
Not Before: Apr 4 10:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8000e5f5670d90c8f6c370d5e6a3fcb1f12a9bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:8d:1e:40:50:68:69:50:3a:7c:ec:33:b6:
89:25:24:76:85:f9:3c:5b:1a:63:5e:de:48:dc:1a:
e8:24:be:f4:05:3f:fb:53:67:6c:34:5a:a8:17:07:
95:5e:74:0b:ed:ac:c1:62:51:5b:05:a6:35:9a:fe:
4a:29:93:e0:08:58:a2:11:38:ef:30:df:2e:05:30:
2e:00:21:15:91:65:04:91:ed:36:9d:52:da:6f:58:
10:7e:cf:dc:f3:d6:54:52:82:8c:f3:ac:c3:84:ea:
32:ae:14:9e:d0:db:02:8a:ea:6c:33:e3:d9:3c:c4:
5f:54:f5:a3:e6:5b:a2:c2:56:2a:46:5c:0b:d0:24:
26:88:f2:70:30:ec:5b:bb:73:b5:10:3d:66:9b:9e:
42:53:c3:ee:80:28:05:79:24:de:28:b3:e6:ca:f3:
5b:5e:bb:82:66:13:a5:46:56:65:ae:97:28:b9:7b:
5f:92:d6:38:a8:90:d7:43:f2:0d:f2:b2:2a:73:60:
db:73:3e:22:5d:ef:4c:94:f7:8d:04:ea:72:d5:16:
b7:d0:65:85:71:b3:2f:ff:47:a3:f8:bc:cb:24:16:
ac:68:e3:80:21:08:67:23:f7:b7:05:53:13:d0:d3:
c8:50:56:9f:9e:82:a5:0b:74:9a:fa:d4:fd:3d:01:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:E5:F5:67:0D:90:C8:F6:C3:70:D5:E6:A3:FC:B1:F1:2A:9B:DD
X509v3 Authority Key Identifier:
keyid:80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gADl9WcNkMj2w3DV5qP8sfEqm90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
Signature Algorithm: sha256WithRSAEncryption
21:31:66:47:ce:e1:a8:c7:01:d5:3e:d2:57:c6:14:39:24:4a:
bc:f0:4b:86:81:7b:39:86:5a:cd:1e:6d:d8:46:7f:1b:b5:20:
55:9c:1c:a7:ba:5c:1b:47:7f:d8:72:4c:87:51:00:51:88:ec:
d6:e5:83:d9:fb:18:31:fc:af:96:09:9a:18:18:65:2f:b1:cc:
f5:ce:d9:75:90:f0:13:2b:d9:1d:26:f2:75:08:66:3e:73:ad:
8a:c6:a6:b4:f3:99:33:83:55:3b:dd:20:da:aa:0f:3d:c1:77:
62:8f:ff:fb:71:a0:6d:d2:16:54:f1:f0:97:04:aa:64:43:1f:
b2:9c:aa:fa:e9:d7:10:62:f7:35:ab:3c:b9:5f:fc:fa:4f:0c:
87:3f:6f:b4:d3:11:0b:81:89:e0:30:b4:4d:da:07:bb:aa:00:
df:ea:96:93:9b:bb:bc:b1:76:71:65:89:17:a8:34:4a:33:8b:
8f:09:86:12:e8:90:64:6a:a5:54:3e:84:c7:29:2b:b3:a6:8d:
e9:63:03:35:67:cb:73:0a:24:f7:ad:ad:3e:4d:fd:83:66:92:
bf:85:62:40:98:dc:45:86:40:38:33:ec:c3:4f:6b:77:5d:dc:
51:97:f2:c4:9a:1b:1b:44:d3:a2:33:f6:83:c7:1f:29:1b:9a:
51:c6:ae:34
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAUmdoTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MGQwNjFmZTM2MjgxMWRjZTc2NGU2OWE3YTk5YjhmNmJlNWYyYTAzMB4XDTIyMDQw
NDEwMTEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODAwMGU1ZjU2NzBk
OTBjOGY2YzM3MGQ1ZTZhM2ZjYjFmMTJhOWJkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANY9jR5AUGhpUDp87DO2iSUkdoX5PFsaY17eSNwa6CS+9AU/
+1NnbDRaqBcHlV50C+2swWJRWwWmNZr+SimT4AhYohE47zDfLgUwLgAhFZFlBJHt
Np1S2m9YEH7P3PPWVFKCjPOsw4TqMq4UntDbAorqbDPj2TzEX1T1o+ZbosJWKkZc
C9AkJojycDDsW7tztRA9ZpueQlPD7oAoBXkk3iiz5srzW167gmYTpUZWZa6XKLl7
X5LWOKiQ10PyDfKyKnNg23M+Il3vTJT3jQTqctUWt9BlhXGzL/9Ho/i8yyQWrGjj
gCEIZyP3twVTE9DTyFBWn56CpQt0mvrU/T0BFFUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSAAOX1Zw2QyPbDcNXmo/yx8Sqb3TAfBgNVHSMEGDAWgBSA0GH+NigR3Odk
5pp6mbj2vl8qAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dOQmhfallvRWR6blpPYWFlcG00OXI1ZktnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvMzFmYTYyLWNkNDAtNDA0NS04NjkyLWZmZWE1YmNjOGQ3Mi8x
L2dBRGw5V2NOa01qMnczRFY1cVA4c2ZFcW05MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
MzFmYTYyLWNkNDAtNDA0NS04NjkyLWZmZWE1YmNjOGQ3Mi8xL2dOQmhfallvRWR6
blpPYWFlcG00OXI1ZktnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB+ajANBgkqhkiG9w0BAQsFAAOC
AQEAITFmR87hqMcB1T7SV8YUOSRKvPBLhoF7OYZazR5t2EZ/G7UgVZwcp7pcG0d/
2HJMh1EAUYjs1uWD2fsYMfyvlgmaGBhlL7HM9c7ZdZDwEyvZHSbydQhmPnOtisam
tPOZM4NVO90g2qoPPcF3Yo//+3GgbdIWVPHwlwSqZEMfspyq+unXEGL3Nas8uV/8
+k8Mhz9vtNMRC4GJ4DC0TdoHu6oA3+qWk5u7vLF2cWWJF6g0SjOLjwmGEuiQZGql
VD6Exykrs6aN6WMDNWfLcwok962tPk39g2aSv4ViQJjcRYZAODPsw09rd13cUZfy
xJobG0TTojP2g8cfKRuaUcauNA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:13 2023 by rpki-client on console-fra.rpki-client.org