Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/gqTsKTgA_kJ3Du7cD_yTwpIpQ6A.roa
File: gqTsKTgA_kJ3Du7cD_yTwpIpQ6A.roa (raw, json)
Hash identifier: 9J6PyS3Dri8u2rh39zWk/LtIWrLEOr4R/AGLWVbRQPs=
Subject key identifier: 82:A4:EC:29:38:00:FE:42:77:0E:EE:DC:0F:FC:93:C2:92:29:43:A0
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16DC59A0
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/gqTsKTgA_kJ3Du7cD_yTwpIpQ6A.roa
Signing time: Sat 01 Jan 2022 12:01:35 +0000
ROA not before: Sat 01 Jan 2022 12:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61276
IP address blocks: 141.101.196.0/24 maxlen: 24
37.18.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383539616 (0x16dc59a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82a4ec293800fe42770eeedc0ffc93c2922943a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:77:f7:3a:51:69:1f:c2:a2:8f:f6:6a:ef:
7e:d7:cc:8e:7a:97:c9:bc:1a:f3:39:69:e6:10:ff:
9a:56:a6:b8:9e:28:23:70:ca:eb:40:cf:21:fa:f8:
cd:d8:75:a4:36:99:eb:90:d9:aa:0f:c6:50:69:b4:
64:46:fb:83:af:40:47:b3:58:ee:41:7b:38:28:40:
28:97:bb:95:e6:63:f5:87:8f:32:62:79:31:d4:81:
4e:ae:a4:0a:f4:d5:04:a0:8c:09:dd:c8:a9:2a:b0:
20:ed:53:0d:cb:92:e1:54:66:53:ce:9d:5c:17:5d:
a7:94:68:7c:38:4e:34:cd:1f:ed:ff:09:07:54:7a:
83:70:1e:4a:7e:5e:f5:8b:c1:b7:ca:2f:7f:58:1f:
6d:e7:c9:43:4d:2b:64:ce:b3:d0:ed:0d:f9:7e:94:
c0:57:b0:75:57:a4:63:49:4a:a9:e8:64:51:20:47:
c6:c5:b6:53:5f:75:b5:19:71:1f:c6:90:c2:62:58:
9f:4d:1f:7c:94:e8:ad:16:78:a8:9f:63:1b:60:ca:
cd:b1:9f:b5:de:0e:7f:43:4c:10:c4:03:25:d9:8f:
09:54:a8:a6:27:11:ab:b2:61:b8:91:21:77:0a:ee:
c4:f6:4d:0c:c3:c7:15:a3:41:fd:f5:02:ab:e3:63:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A4:EC:29:38:00:FE:42:77:0E:EE:DC:0F:FC:93:C2:92:29:43:A0
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/gqTsKTgA_kJ3Du7cD_yTwpIpQ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.21.0/24
141.101.196.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ab:45:c9:c3:33:f8:0b:3e:e5:85:69:87:c5:39:a0:c6:bf:
e9:8f:e1:33:17:37:f6:5c:bb:a7:38:9c:db:d0:b6:ae:e5:41:
ef:a9:d7:01:f8:bc:7a:dd:cf:ae:98:5c:5c:4d:cd:fe:99:02:
43:2d:30:16:c9:b0:e2:7f:a7:9f:43:f5:a6:58:80:56:46:fb:
97:81:97:53:01:c7:57:19:a3:fd:e7:08:ab:ec:e8:98:ff:43:
7e:20:32:f1:50:41:8e:ca:e1:c7:5f:ff:c8:14:05:c0:ee:0c:
48:3a:92:4a:65:46:4e:c0:b2:6b:74:72:a3:22:7c:10:06:b2:
4d:e0:34:4b:d5:bc:14:9e:c0:8e:4a:57:f5:e3:c1:35:06:09:
11:d6:2d:7c:73:3f:31:6a:13:c4:5f:d6:57:f7:b1:25:a6:06:
d7:10:12:6f:28:8a:55:21:ab:28:93:d8:7b:45:57:18:85:92:
67:cf:2f:23:8c:8e:2c:4f:7e:01:1b:ae:9a:5b:cb:0b:90:20:
33:59:41:bb:7b:4b:e1:81:b2:f8:fd:92:1c:6c:9c:44:a5:85:
84:c3:cc:a3:5c:31:d9:a2:3d:78:27:3e:d6:42:f7:81:c1:d7:
f5:7f:bd:64:9e:68:35:40:fa:2d:9e:b5:a2:a5:f0:d3:9a:bd:
49:fa:bd:1b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFtxZoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDEzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJhNGVjMjkzODAw
ZmU0Mjc3MGVlZWRjMGZmYzkzYzI5MjI5NDNhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfqd/c6UWkfwqKP9mrvftfMjnqXybwa8zlp5hD/mlamuJ4o
I3DK60DPIfr4zdh1pDaZ65DZqg/GUGm0ZEb7g69AR7NY7kF7OChAKJe7leZj9YeP
MmJ5MdSBTq6kCvTVBKCMCd3IqSqwIO1TDcuS4VRmU86dXBddp5RofDhONM0f7f8J
B1R6g3AeSn5e9YvBt8ovf1gfbefJQ00rZM6z0O0N+X6UwFewdVekY0lKqehkUSBH
xsW2U191tRlxH8aQwmJYn00ffJTorRZ4qJ9jG2DKzbGftd4Of0NMEMQDJdmPCVSo
picRq7JhuJEhdwruxPZNDMPHFaNB/fUCq+NjQ6kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSCpOwpOAD+QncO7twP/JPCkilDoDAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L2dxVHNLVGdBX2tKM0R1N2NEX3lUd3BJcFE2QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACUSFQMEAI1lxDANBgkqhkiG9w0B
AQsFAAOCAQEAKKtFycMz+As+5YVph8U5oMa/6Y/hMxc39ly7pzic29C2ruVB76nX
Afi8et3PrphcXE3N/pkCQy0wFsmw4n+nn0P1pliAVkb7l4GXUwHHVxmj/ecIq+zo
mP9DfiAy8VBBjsrhx1//yBQFwO4MSDqSSmVGTsCya3RyoyJ8EAayTeA0S9W8FJ7A
jkpX9ePBNQYJEdYtfHM/MWoTxF/WV/exJaYG1xASbyiKVSGrKJPYe0VXGIWSZ88v
I4yOLE9+ARuumlvLC5AgM1lBu3tL4YGy+P2SHGycRKWFhMPMo1wx2aI9eCc+1kL3
gcHX9X+9ZJ5oNUD6LZ61oqXw05q9Sfq9Gw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org