Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gcMqcINwghosLxWjWp1n-aSMrDk.roa
File: gcMqcINwghosLxWjWp1n-aSMrDk.roa (raw, json)
Hash identifier: V2MEpc76O0ztsYQca2rHpiHC96JtfC9oMh3VrIR5Dqo=
Subject key identifier: 81:C3:2A:70:83:70:82:1A:2C:2F:15:A3:5A:9D:67:F9:A4:8C:AC:39
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DC45211162F24ACC97BAC4E76FB00
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gcMqcINwghosLxWjWp1n-aSMrDk.roa
Signing time: Sun 01 Jan 2023 22:04:54 +0000
ROA not before: Sun 01 Jan 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211990
IP address blocks: 87.107.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c4:52:11:16:2f:24:ac:c9:7b:ac:4e:76:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81c32a708370821a2c2f15a35a9d67f9a48cac39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:54:d3:34:fd:58:a5:19:af:47:00:98:cc:c1:
e1:4d:41:fb:f8:79:97:d6:47:c0:a5:fa:53:71:2d:
39:44:02:69:f2:16:7c:c3:55:46:9d:c1:1c:4a:6b:
6d:aa:76:e6:c5:c4:ff:e2:60:ed:6c:d4:a3:b8:3f:
58:69:93:d8:e8:cc:8d:0c:74:86:4d:f4:74:bf:68:
73:38:1e:94:e9:d9:bd:45:dd:67:dd:c1:df:79:8c:
0a:5e:4f:7d:be:ea:c4:e8:35:34:9f:fb:cf:62:ae:
22:93:17:e1:dc:dd:e4:1a:68:cd:fe:33:e7:3f:8f:
98:88:93:36:80:ce:97:d1:ff:58:42:88:40:44:03:
93:50:a8:7b:c5:71:fb:34:aa:6b:ae:78:f1:63:5a:
eb:0a:70:3a:c4:10:fd:5c:b4:0b:f5:a8:d5:59:ab:
c5:9c:5e:6d:63:86:1c:05:39:05:d5:02:43:99:8f:
37:c3:f3:d7:40:a5:8f:fb:10:4a:dd:df:14:41:29:
bb:80:fd:e2:a4:07:5f:9b:bd:2d:92:db:51:9b:26:
c6:81:1c:2b:76:19:18:00:d2:86:32:4e:80:88:13:
54:62:96:d5:04:17:3f:e9:6d:0c:c0:a7:d7:0e:2d:
13:ef:a6:7f:80:9f:88:24:48:04:98:f2:cf:17:4f:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:2A:70:83:70:82:1A:2C:2F:15:A3:5A:9D:67:F9:A4:8C:AC:39
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gcMqcINwghosLxWjWp1n-aSMrDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b4:51:3e:b6:57:9d:ec:ef:d8:dd:16:74:98:9c:8e:72:f5:
81:cc:9c:54:d8:b9:9c:9c:77:b3:93:ba:fc:07:ce:13:dd:25:
e8:e9:b8:a7:99:a0:92:07:08:9d:73:5c:ac:56:c9:70:be:7c:
0d:27:cd:4e:5e:32:96:fe:c5:7a:90:d8:84:89:14:9e:d1:1a:
33:af:5e:71:a6:99:0e:ae:7c:96:45:31:a9:41:3b:0d:70:71:
d8:7d:ab:52:6f:66:c9:08:15:04:d1:a7:22:b0:77:86:2b:42:
ef:e5:46:25:c8:c6:4d:4f:43:58:c3:f8:89:1b:3a:5d:f4:cd:
e8:10:51:5a:a3:1b:e6:1d:f0:5a:e2:15:25:7e:b3:4c:c3:1f:
bc:d3:21:2c:14:9c:94:cd:e2:9d:70:74:1d:d6:4e:f8:3e:6a:
1d:f7:e6:e5:67:c9:d0:da:19:26:c4:44:b4:1e:2b:bf:09:b8:
bd:46:c1:da:47:2d:c4:10:c6:59:78:fc:9b:06:46:f1:e8:9f:
a4:0d:b3:14:3e:58:51:75:f8:6a:e7:50:38:a2:d8:ce:28:83:
b7:6f:9a:c3:80:ee:35:06:09:5a:94:16:8e:be:19:33:67:e5:
8a:d9:16:48:11:c6:3f:35:74:e8:59:78:78:b5:e7:3e:14:4a:
2b:0a:c7:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXcRSERYvJKzJe6xOdvsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjMwMTAxMjIwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWMzMmE3MDgzNzA4MjFhMmMyZjE1YTM1YTlkNjdmOWE0OGNhYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVTTNP1YpRmvRwCYzMHhTUH7+HmX
1kfApfpTcS05RAJp8hZ8w1VGncEcSmttqnbmxcT/4mDtbNSjuD9YaZPY6MyNDHSG
TfR0v2hzOB6U6dm9Rd1n3cHfeYwKXk99vurE6DU0n/vPYq4ikxfh3N3kGmjN/jPn
P4+YiJM2gM6X0f9YQohARAOTUKh7xXH7NKprrnjxY1rrCnA6xBD9XLQL9ajVWavF
nF5tY4YcBTkF1QJDmY83w/PXQKWP+xBK3d8UQSm7gP3ipAdfm70tkttRmybGgRwr
dhkYANKGMk6AiBNUYpbVBBc/6W0MwKfXDi0T76Z/gJ+IJEgEmPLPF0/oWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHDKnCDcIIaLC8Vo1qdZ/mkjKw5MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvZ2NNcWNJTndnaG9zTHhXaldwMW4tYVNNckRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2uRMA0G
CSqGSIb3DQEBCwUAA4IBAQDDtFE+tled7O/Y3RZ0mJyOcvWBzJxU2LmcnHezk7r8
B84T3SXo6binmaCSBwidc1ysVslwvnwNJ81OXjKW/sV6kNiEiRSe0Rozr15xppkO
rnyWRTGpQTsNcHHYfatSb2bJCBUE0acisHeGK0Lv5UYlyMZNT0NYw/iJGzpd9M3o
EFFaoxvmHfBa4hUlfrNMwx+80yEsFJyUzeKdcHQd1k74Pmod9+blZ8nQ2hkmxES0
Hiu/Cbi9RsHaRy3EEMZZePybBkbx6J+kDbMUPlhRdfhq51A4otjOKIO3b5rDgO41
BglalBaOvhkzZ+WK2RZIEcY/NXToWXh4tec+FEorCseC
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:32 2025 by rpki-client