Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/GDCgvlMoFw9E5XZVc2tPRa3c-lI.roa
File: GDCgvlMoFw9E5XZVc2tPRa3c-lI.roa (raw, json)
Hash identifier: oFwvCubP9c+OWKM16I/tfcnsd+YNJ1Sujqamc1tDtLc=
Subject key identifier: 18:30:A0:BE:53:28:17:0F:44:E5:76:55:73:6B:4F:45:AD:DC:FA:52
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01849F7C5A1964E54186BFDC9B743F6F320D
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/GDCgvlMoFw9E5XZVc2tPRa3c-lI.roa
Signing time: Tue 22 Nov 2022 13:17:17 +0000
ROA not before: Tue 22 Nov 2022 13:17:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207033
IP address blocks: 78.159.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:7c:5a:19:64:e5:41:86:bf:dc:9b:74:3f:6f:32:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Nov 22 13:17:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1830a0be5328170f44e57655736b4f45addcfa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:1b:17:3d:ef:da:63:86:3c:c7:4f:9f:1d:
93:01:38:99:e6:ad:e0:4a:6a:a8:e4:b1:8a:d0:06:
ef:b6:17:e2:b5:e0:dc:a9:90:a4:b2:71:e7:68:b7:
a5:ea:41:6e:52:8e:91:91:28:d3:54:a7:4e:c3:31:
cd:7b:d3:89:68:16:16:d7:d5:14:4f:52:f1:e5:ef:
21:7e:10:8c:06:af:0b:60:44:9f:c8:f1:09:a3:80:
a8:d6:38:72:a7:79:6d:bb:17:e4:f0:81:4f:db:02:
ab:8c:d7:bf:8a:6d:1b:da:70:11:5f:cf:c1:f0:9d:
5f:3c:f4:6c:bf:d1:16:9e:e1:7f:5e:ca:cc:c0:dc:
bb:90:a2:3b:2b:91:ef:c7:ee:45:d0:7d:f8:b8:c5:
6b:97:67:1b:fc:a2:92:f8:f0:09:e1:b4:2b:79:93:
f0:8d:2b:e0:6b:9c:62:29:9d:8f:23:bd:0b:02:5f:
13:dc:2f:01:9d:22:75:9b:c8:a1:4a:a9:e9:1c:a6:
7f:22:7c:b1:89:c2:65:75:27:f7:7d:e6:0c:fa:e1:
c1:f7:11:49:82:34:2b:01:39:fe:73:90:13:37:38:
57:d8:aa:e5:c1:f0:b2:32:a8:7c:df:47:5c:fd:3d:
a5:03:42:c7:18:ca:e7:0b:ca:ae:51:8e:18:73:86:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:30:A0:BE:53:28:17:0F:44:E5:76:55:73:6B:4F:45:AD:DC:FA:52
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/GDCgvlMoFw9E5XZVc2tPRa3c-lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c9:12:1c:69:6f:ab:5e:2c:75:e4:bb:de:1a:2d:0c:2b:87:
dd:21:08:0d:c5:51:45:3c:7f:86:1e:b6:de:ea:64:18:22:be:
49:3d:fc:f1:56:82:21:3d:a6:07:36:92:f2:1f:9a:34:56:32:
4b:ae:50:44:30:ff:ec:ae:22:ea:68:ee:25:69:6c:89:22:dd:
f4:63:ae:ae:76:01:a1:9b:e7:e3:fe:0d:35:41:86:9e:b7:f7:
a9:45:fd:8f:67:2a:c5:9a:e4:d0:41:fd:ab:70:65:65:b1:41:
cf:1d:75:bd:1b:76:dc:a2:1c:44:cb:d9:26:e6:c5:e4:1c:0e:
ec:c2:92:b6:86:18:d2:41:e1:19:9b:c9:61:76:06:fb:37:fb:
ca:10:e1:06:d1:84:c4:cc:60:ec:97:46:46:bb:87:74:f1:ca:
64:a0:f6:b3:21:27:f7:7d:94:09:bf:22:81:27:f7:25:92:74:
a4:c9:9a:53:08:09:04:58:11:cf:99:8b:d2:58:cf:49:52:3f:
ed:61:03:03:42:98:ad:03:39:c5:fe:27:11:c2:ec:29:8b:cd:
90:5b:e0:0b:99:04:0c:41:be:cd:b1:2e:52:03:75:0f:c9:0b:
e2:27:ef:eb:21:1c:ee:26:a1:31:bd:c6:67:b4:66:1a:aa:5b:
e3:48:79:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSffFoZZOVBhr/cm3Q/bzINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjIxMTIyMTMxNzE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODMwYTBiZTUzMjgxNzBmNDRlNTc2NTU3MzZiNGY0NWFkZGNmYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9gbFz3v2mOGPMdPnx2TATiZ5q3g
Smqo5LGK0AbvthfiteDcqZCksnHnaLel6kFuUo6RkSjTVKdOwzHNe9OJaBYW19UU
T1Lx5e8hfhCMBq8LYESfyPEJo4Co1jhyp3ltuxfk8IFP2wKrjNe/im0b2nARX8/B
8J1fPPRsv9EWnuF/XsrMwNy7kKI7K5Hvx+5F0H34uMVrl2cb/KKS+PAJ4bQreZPw
jSvga5xiKZ2PI70LAl8T3C8BnSJ1m8ihSqnpHKZ/InyxicJldSf3feYM+uHB9xFJ
gjQrATn+c5ATNzhX2KrlwfCyMqh830dc/T2lA0LHGMrnC8quUY4Yc4a6iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgwoL5TKBcPROV2VXNrT0Wt3PpSMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvR0RDZ3ZsTW9GdzlFNVhaVmMydFBSYTNjLWxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9UMA0G
CSqGSIb3DQEBCwUAA4IBAQChyRIcaW+rXix15LveGi0MK4fdIQgNxVFFPH+GHrbe
6mQYIr5JPfzxVoIhPaYHNpLyH5o0VjJLrlBEMP/sriLqaO4laWyJIt30Y66udgGh
m+fj/g01QYaet/epRf2PZyrFmuTQQf2rcGVlsUHPHXW9G3bcohxEy9km5sXkHA7s
wpK2hhjSQeEZm8lhdgb7N/vKEOEG0YTEzGDsl0ZGu4d08cpkoPazISf3fZQJvyKB
J/clknSkyZpTCAkEWBHPmYvSWM9JUj/tYQMDQpitAznF/icRwuwpi82QW+ALmQQM
Qb7NsS5SA3UPyQviJ+/rIRzuJqExvcZntGYaqlvjSHkL
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:14 2025 by rpki-client