Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/G8RoPc43Nw6VqEBiA4_4fV55nFc.roa
File: G8RoPc43Nw6VqEBiA4_4fV55nFc.roa (raw, json)
Hash identifier: ukk07rBJhXwXb7sdIXLvT7Zg3ZfXb95yYt2xMKDqy+s=
Subject key identifier: 1B:C4:68:3D:CE:37:37:0E:95:A8:40:62:03:8F:F8:7D:5E:79:9C:57
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 024111
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/G8RoPc43Nw6VqEBiA4_4fV55nFc.roa
Signing time: Fri 08 Apr 2022 08:59:31 +0000
ROA not before: Fri 08 Apr 2022 08:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49136
IP address blocks: 109.229.96.0/19 maxlen: 19
94.231.128.0/20 maxlen: 20
94.231.136.0/24 maxlen: 24
81.162.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147729 (0x24111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Apr 8 08:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bc4683dce37370e95a84062038ff87d5e799c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:37:ab:c1:61:29:f5:7d:32:39:a5:e1:07:
51:9a:85:47:40:c5:f3:15:65:ab:9d:9b:36:5c:32:
72:f1:7c:0a:e2:b8:a9:93:8d:8d:7b:02:c3:2f:c9:
d0:6d:b0:bd:a7:06:50:5b:32:52:f3:23:87:e9:18:
34:c7:85:7b:f6:f4:8a:ec:b5:ec:0e:f9:8e:39:71:
ca:37:85:d2:5b:07:01:24:4e:c4:df:94:d3:1b:72:
3a:2a:68:48:fc:ab:a9:3b:0c:27:f3:52:f3:ca:a3:
55:43:89:f8:78:2c:68:38:50:80:d4:b2:a0:6e:26:
09:a5:95:32:12:4e:7a:19:16:db:a8:93:53:5e:c9:
e6:49:53:b2:b3:20:8f:77:09:27:a3:94:cc:ca:1f:
ac:27:e1:94:a2:21:25:c2:0c:e0:68:ed:61:ff:19:
cd:5d:b4:32:af:2a:bc:48:af:84:aa:21:85:c8:6d:
d1:1c:4c:d5:31:4d:ea:b7:cd:e2:77:ce:f8:02:c0:
52:a6:4b:e6:90:54:f8:83:32:c6:a2:b7:75:54:97:
be:e3:6c:f7:f9:02:93:fd:a2:1f:4d:75:6f:fb:32:
31:11:f7:d0:e8:d5:81:89:4f:bb:a5:52:6b:1e:d3:
1f:f8:dc:9a:ff:9e:d5:e4:a3:f9:8b:15:bc:c5:8b:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C4:68:3D:CE:37:37:0E:95:A8:40:62:03:8F:F8:7D:5E:79:9C:57
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/G8RoPc43Nw6VqEBiA4_4fV55nFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.32.0/20
94.231.128.0/20
109.229.96.0/19
Signature Algorithm: sha256WithRSAEncryption
11:44:09:4a:8b:24:46:7f:94:49:7d:60:3d:bc:5a:89:f7:04:
2a:3a:01:db:b1:bb:2f:3d:90:61:04:40:ab:6c:fc:1c:a9:4a:
6d:42:96:71:d6:68:34:0b:9f:a1:53:ce:72:86:4e:ac:f2:27:
e4:51:d9:ff:bf:ef:bf:ff:ec:13:b5:f3:3b:9c:37:5e:d9:0c:
bc:69:5c:fe:56:83:1b:82:9e:c6:2d:53:c4:cd:2c:7d:05:6a:
dd:ab:0b:d2:07:9b:2d:5b:01:df:3b:73:a7:f8:0a:bb:d7:13:
b3:a6:ad:3f:54:fa:02:69:22:e4:31:3e:d4:91:1f:f9:47:b0:
c6:de:c0:bd:74:80:78:0f:61:db:be:31:9b:ea:19:a5:b0:16:
65:e7:25:3f:72:9a:68:dc:60:36:09:b6:15:63:91:7e:07:e1:
c6:1d:42:e6:73:01:1a:b4:39:a5:d0:53:f9:97:21:54:16:8c:
5a:0a:ec:f6:32:18:85:b9:c7:99:7d:04:79:27:58:ff:19:cc:
4a:f2:95:22:0d:33:4a:4a:ab:45:29:57:23:1c:ad:6e:33:da:
a3:bb:f9:45:92:13:6a:07:44:87:58:e4:06:9d:f4:67:63:ac:
77:7b:72:49:13:e3:d8:3b:09:35:c7:9c:a8:83:32:36:1f:b9:
8f:51:8a:30
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDAkERMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
MWM5NjUyNTU3OTg3YTJhMDU4MGNjNWM2NWUzNjQ2YjAxZGEzYmIwHhcNMjIwNDA4
MDg1OTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxYmM0NjgzZGNlMzcz
NzBlOTVhODQwNjIwMzhmZjg3ZDVlNzk5YzU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl4g3q8FhKfV9Mjml4QdRmoVHQMXzFWWrnZs2XDJy8XwK4rip
k42NewLDL8nQbbC9pwZQWzJS8yOH6Rg0x4V79vSK7LXsDvmOOXHKN4XSWwcBJE7E
35TTG3I6KmhI/KupOwwn81LzyqNVQ4n4eCxoOFCA1LKgbiYJpZUyEk56GRbbqJNT
XsnmSVOysyCPdwkno5TMyh+sJ+GUoiElwgzgaO1h/xnNXbQyryq8SK+EqiGFyG3R
HEzVMU3qt83id874AsBSpkvmkFT4gzLGord1VJe+42z3+QKT/aIfTXVv+zIxEffQ
6NWBiU+7pVJrHtMf+Nya/57V5KP5ixW8xYvp1QIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFBvEaD3ONzcOlahAYgOP+H1eeZxXMB8GA1UdIwQYMBaAFLgcllJVeYeioFgM
xcZeNkawHaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUtZmEwZDJlNDdlNmYxLzEv
RzhSb1BjNDNOdzZWcUVCaUE0XzRmVjU1bkZjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9h
YWIwNTQtZWQ1MC00YWE2LWFjZWUtZmEwZDJlNDdlNmYxLzEvdUJ5V1VsVjVoNktn
V0F6RnhsNDJSckFkbzdzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUaIgAwQEXueAAwQFbeVgMA0GCSqG
SIb3DQEBCwUAA4IBAQARRAlKiyRGf5RJfWA9vFqJ9wQqOgHbsbsvPZBhBECrbPwc
qUptQpZx1mg0C5+hU85yhk6s8ifkUdn/v++//+wTtfM7nDde2Qy8aVz+VoMbgp7G
LVPEzSx9BWrdqwvSB5stWwHfO3On+Aq71xOzpq0/VPoCaSLkMT7UkR/5R7DG3sC9
dIB4D2HbvjGb6hmlsBZl5yU/cppo3GA2CbYVY5F+B+HGHULmcwEatDml0FP5lyFU
FoxaCuz2MhiFuceZfQR5J1j/GcxK8pUiDTNKSqtFKVcjHK1uM9qju/lFkhNqB0SH
WOQGnfRnY6x3e3JJE+PYOwk1x5yogzI2H7mPUYow
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:36 2024 by rpki-client on console-ams.rpki-client.org