Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/gRRk5Hj-QigI4Uqfv_UNgtn1vIA.roa
File: gRRk5Hj-QigI4Uqfv_UNgtn1vIA.roa (raw, json)
Hash identifier: odhRG3axx/czBl/1muJjVtniGD9uV4TkT1B9oWtmxkI=
Subject key identifier: 81:14:64:E4:78:FE:42:28:08:E1:4A:9F:BF:F5:0D:82:D9:F5:BC:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 02385E
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/gRRk5Hj-QigI4Uqfv_UNgtn1vIA.roa
Signing time: Mon 30 May 2022 10:52:14 +0000
ROA not before: Mon 30 May 2022 10:52:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24867
IP address blocks: 78.40.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145502 (0x2385e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: May 30 10:52:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=811464e478fe422808e14a9fbff50d82d9f5bc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:69:bc:51:e8:88:d4:15:e9:a8:f3:33:64:
83:4e:ee:c6:e1:bb:5a:62:9c:84:cf:aa:42:8a:6c:
49:7f:2f:a5:4c:c4:90:f2:82:bb:8d:13:8a:db:2d:
62:20:04:66:fb:ab:de:08:30:4d:c4:ec:17:3e:a3:
f0:0d:c1:59:51:e3:ec:91:c0:d2:63:c2:e5:71:01:
c5:0e:d3:9c:eb:f7:e3:04:ae:86:9a:c7:22:58:df:
25:02:00:58:1c:7f:7e:cd:21:10:bb:99:b7:2c:13:
7a:41:88:87:da:16:70:fe:2a:db:3d:15:e7:20:6d:
9c:61:6e:88:0c:2b:2f:78:54:19:ca:56:a1:64:f4:
86:87:35:42:4c:9e:0b:fb:46:27:dd:aa:90:9b:d7:
a0:1f:60:13:7f:44:1b:8a:1e:b2:9a:54:bd:99:8d:
37:6c:5b:c7:b8:ce:a2:50:fd:df:1a:11:d8:83:df:
cb:c4:2f:a9:e0:0d:f0:db:79:e9:72:a2:68:5b:83:
61:88:08:a3:1d:a7:17:1b:67:9b:04:d3:2a:51:92:
80:45:dd:45:e1:61:05:9f:66:ac:b9:f5:be:6c:24:
3e:9b:b6:1b:5d:f3:13:d2:f3:1c:ab:f0:72:19:08:
ec:67:a2:54:8b:3c:d1:29:f6:4e:a6:1a:3a:ed:ca:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:14:64:E4:78:FE:42:28:08:E1:4A:9F:BF:F5:0D:82:D9:F5:BC:80
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/gRRk5Hj-QigI4Uqfv_UNgtn1vIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.152.0/21
Signature Algorithm: sha256WithRSAEncryption
26:c3:b8:6f:4d:4c:f4:d7:05:31:e0:fe:b8:a7:6a:e8:bb:16:
70:4e:0f:2a:19:4d:67:86:73:2a:ff:7e:78:78:5a:ec:a0:63:
9a:04:da:f5:96:bd:4c:8a:72:13:2f:a7:a2:17:5a:1a:9b:f1:
ef:89:8d:18:88:28:33:90:50:43:91:6c:e9:fd:9e:25:6c:55:
cd:1c:cb:d8:b1:48:c0:e0:c6:db:68:20:2b:e5:9a:34:16:fd:
38:b0:b2:93:3a:ad:d9:f0:34:67:9e:6e:ec:9c:c6:79:fe:bd:
cf:e7:fd:cc:51:73:e0:aa:fb:c9:df:41:9e:97:87:97:3e:f0:
ab:a5:08:d2:2c:07:09:00:f1:49:cb:76:60:9e:bc:68:69:3b:
f3:21:22:a3:c7:98:c3:2e:12:fb:1a:a7:b4:c8:02:c8:98:f2:
97:26:19:f4:1d:9b:56:39:2e:8a:ba:72:d8:50:55:ca:7e:0e:
a4:d5:05:e4:8b:38:6f:48:a5:10:89:c9:9a:8c:d0:b5:c1:ac:
62:d7:e2:80:fd:e7:0f:74:9f:31:cd:ea:2a:32:1e:e2:73:a1:
ed:f5:dd:8c:64:05:5f:14:41:28:e7:a7:c8:b1:13:67:6e:a7:
13:db:b7:00:3b:32:fc:ce:fb:2b:81:1b:79:a9:c9:af:6c:15:
f2:03:3a:cd
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAjheMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz
YzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1YzhmNmQ5ODAwHhcNMjIwNTMw
MTA1MjE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MTE0NjRlNDc4ZmU0
MjI4MDhlMTRhOWZiZmY1MGQ4MmQ5ZjViYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA27VpvFHoiNQV6ajzM2SDTu7G4btaYpyEz6pCimxJfy+lTMSQ
8oK7jROK2y1iIARm+6veCDBNxOwXPqPwDcFZUePskcDSY8LlcQHFDtOc6/fjBK6G
msciWN8lAgBYHH9+zSEQu5m3LBN6QYiH2hZw/irbPRXnIG2cYW6IDCsveFQZylah
ZPSGhzVCTJ4L+0Yn3aqQm9egH2ATf0Qbih6ymlS9mY03bFvHuM6iUP3fGhHYg9/L
xC+p4A3w23npcqJoW4NhiAijHacXG2ebBNMqUZKARd1F4WEFn2asufW+bCQ+m7Yb
XfMT0vMcq/ByGQjsZ6JUizzRKfZOpho67cqdhQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIEUZOR4/kIoCOFKn7/1DYLZ9byAMB8GA1UdIwQYMBaAFGPDRFXA1OT8O6Lx
xG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0YjllLzEv
Z1JSazVIai1RaWdJNFVxZnZfVU5ndG4xdklBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8z
NTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3
b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTiiYMA0GCSqGSIb3DQEBCwUAA4IB
AQAmw7hvTUz01wUx4P64p2rouxZwTg8qGU1nhnMq/354eFrsoGOaBNr1lr1MinIT
L6eiF1oam/HviY0YiCgzkFBDkWzp/Z4lbFXNHMvYsUjA4MbbaCAr5Zo0Fv04sLKT
Oq3Z8DRnnm7snMZ5/r3P5/3MUXPgqvvJ30Gel4eXPvCrpQjSLAcJAPFJy3Zgnrxo
aTvzISKjx5jDLhL7Gqe0yALImPKXJhn0HZtWOS6KunLYUFXKfg6k1QXkizhvSKUQ
icmajNC1waxi1+KA/ecPdJ8xzeoqMh7ic6Ht9d2MZAVfFEEo56fIsRNnbqcT27cA
OzL8zvsrgRt5qcmvbBXyAzrN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:02 2024 by rpki-client on console-fra.rpki-client.org