Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Gd78Wo1GqJCOAfBHm3OF7PDbSuk.roa
File: Gd78Wo1GqJCOAfBHm3OF7PDbSuk.roa (raw, json)
Hash identifier: 4d3aK32qB05qyIvCDdGbKignKnDaNxPF6pKHjXz5Rzk=
Subject key identifier: 19:DE:FC:5A:8D:46:A8:90:8E:01:F0:47:9B:73:85:EC:F0:DB:4A:E9
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 13673896
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Gd78Wo1GqJCOAfBHm3OF7PDbSuk.roa
Signing time: Sat 01 Jan 2022 05:58:21 +0000
ROA not before: Sat 01 Jan 2022 05:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24640
IP address blocks: 80.86.182.0/23 maxlen: 23
80.86.181.0/24 maxlen: 24
81.209.180.0/22 maxlen: 22
81.209.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325531798 (0x13673896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19defc5a8d46a8908e01f0479b7385ecf0db4ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:ae:b1:37:b1:88:95:1a:a2:ff:1e:14:ed:
a1:12:20:09:9c:91:fa:8d:5c:8f:79:d1:5e:b9:51:
87:1a:ed:ff:79:13:1d:e6:73:db:21:14:15:72:8c:
e2:ed:37:02:f3:30:06:89:d7:ce:04:d3:bf:47:b5:
75:1a:92:88:78:8c:77:db:2a:64:3c:bb:f0:86:64:
2a:12:3c:c8:64:eb:c7:53:4c:29:2c:b2:b1:1c:2a:
fa:6c:13:5c:e6:c8:3b:84:e0:67:20:4a:ca:2f:d3:
c0:bb:d4:49:28:24:23:7a:f0:61:08:b5:78:d9:aa:
5a:79:87:e8:0b:8e:ac:03:d0:f2:9b:fa:f2:b8:29:
b9:44:30:0c:74:22:f9:07:a8:0f:81:4f:0d:3a:98:
53:2b:a4:1d:cc:42:56:1d:34:08:76:e6:0d:cf:01:
4c:91:29:70:40:61:9b:bb:41:53:1b:40:9f:e0:7a:
e2:68:0d:05:7d:6e:c6:49:09:a1:05:23:cc:20:e2:
ed:91:bd:b7:60:38:0f:4e:17:45:59:83:f3:5b:72:
ed:e0:67:e0:5f:8e:e9:a5:79:c6:43:30:51:b1:ca:
38:54:2c:a9:4e:8e:db:4a:e6:77:61:0d:b2:23:91:
fb:f0:95:75:ee:9d:21:d4:35:cd:df:53:83:f9:f9:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:FC:5A:8D:46:A8:90:8E:01:F0:47:9B:73:85:EC:F0:DB:4A:E9
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Gd78Wo1GqJCOAfBHm3OF7PDbSuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.181.0-80.86.183.255
81.209.180.0/22
81.209.196.0/22
Signature Algorithm: sha256WithRSAEncryption
20:08:99:40:41:6f:4c:bb:0a:ca:d4:11:b2:02:a8:c5:f0:39:
d8:62:bf:d8:c8:ce:8d:b9:bc:bd:a6:a3:26:25:f1:6f:64:48:
63:35:ae:3a:c4:86:6c:15:36:b4:ce:c9:b3:89:50:ef:7e:c8:
ac:7a:4e:a9:9b:2e:ae:62:a9:91:e8:57:20:0a:5f:3b:72:f6:
5b:75:20:70:c7:49:58:98:63:5b:b7:3e:10:25:46:60:2b:4f:
60:87:79:cc:aa:a2:7f:6a:06:e6:09:44:e5:ac:90:ab:8a:30:
b4:0e:57:16:99:0b:32:8d:b3:2e:a9:e9:21:7b:aa:e4:d7:fa:
0d:ee:25:1a:d4:e4:a8:01:af:19:39:fa:0e:3b:39:47:34:13:
ac:90:96:9b:36:02:e4:67:13:33:c2:38:a5:71:ad:fa:d2:70:
bb:b7:57:af:30:e2:6c:7a:98:64:aa:77:fd:d4:ca:9f:58:00:
aa:aa:0f:85:6f:f8:ce:ef:de:47:b0:5e:0c:45:f8:de:75:e5:
32:be:25:e6:ec:f2:1e:48:55:00:c2:b7:b7:fe:29:ab:81:3c:
2e:35:50:a9:96:dc:e6:79:2c:23:50:71:06:3b:2c:1d:71:b6:
41:45:b6:01:53:71:ef:4c:c8:92:86:f8:44:2d:33:e8:19:83:
c3:0b:54:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEE2c4ljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZmU5MGZkZTk3ODRhOTFkOTNhN2EyYWY1OWQ0ZDA0M2YxMTcxZmJhMB4XDTIyMDEw
MTA1NTgyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTlkZWZjNWE4ZDQ2
YTg5MDhlMDFmMDQ3OWI3Mzg1ZWNmMGRiNGFlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJAPrrE3sYiVGqL/HhTtoRIgCZyR+o1cj3nRXrlRhxrt/3kT
HeZz2yEUFXKM4u03AvMwBonXzgTTv0e1dRqSiHiMd9sqZDy78IZkKhI8yGTrx1NM
KSyysRwq+mwTXObIO4TgZyBKyi/TwLvUSSgkI3rwYQi1eNmqWnmH6AuOrAPQ8pv6
8rgpuUQwDHQi+QeoD4FPDTqYUyukHcxCVh00CHbmDc8BTJEpcEBhm7tBUxtAn+B6
4mgNBX1uxkkJoQUjzCDi7ZG9t2A4D04XRVmD81ty7eBn4F+O6aV5xkMwUbHKOFQs
qU6O20rmd2ENsiOR+/CVde6dIdQ1zd9Tg/n596sCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBQZ3vxajUaokI4B8Eebc4Xs8NtK6TAfBgNVHSMEGDAWgBQf6Q/el4SpHZOn
oq9Z1NBD8RcfujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gta1AzcGVFcVIyVHA2S3ZXZFRRUV9FWEg3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvYTk0NWY3LTUzYjMtNGRiNS1hZTA0LTIzNzcyZTdmOTJlMy8x
L0dkNzhXbzFHcUpDT0FmQkhtM09GN1BEYlN1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
YTk0NWY3LTUzYjMtNGRiNS1hZTA0LTIzNzcyZTdmOTJlMy8xL0gta1AzcGVFcVIy
VHA2S3ZXZFRRUV9FWEg3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQAUFa1AwQDUFawAwQCUdG0AwQC
UdHEMA0GCSqGSIb3DQEBCwUAA4IBAQAgCJlAQW9MuwrK1BGyAqjF8DnYYr/YyM6N
uby9pqMmJfFvZEhjNa46xIZsFTa0zsmziVDvfsisek6pmy6uYqmR6FcgCl87cvZb
dSBwx0lYmGNbtz4QJUZgK09gh3nMqqJ/agbmCUTlrJCrijC0DlcWmQsyjbMuqekh
e6rk1/oN7iUa1OSoAa8ZOfoOOzlHNBOskJabNgLkZxMzwjilca360nC7t1evMOJs
ephkqnf91MqfWACqqg+Fb/jO795HsF4MRfjedeUyviXm7PIeSFUAwre3/imrgTwu
NVCpltzmeSwjUHEGOywdcbZBRbYBU3HvTMiShvhELTPoGYPDC1QA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:10 2024 by rpki-client on console-ams.rpki-client.org