Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w6350Up2LuOzgghW75qhL6iLHdE.roa
File: w6350Up2LuOzgghW75qhL6iLHdE.roa (raw, json)
Hash identifier: vnzSteIwwX/u5Oc3OmPgJOzQpkQWf/0HDXw2gi92MVs=
Subject key identifier: C3:AD:F9:D1:4A:76:2E:E3:B3:82:08:56:EF:9A:A1:2F:A8:8B:1D:D1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 033DC05C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w6350Up2LuOzgghW75qhL6iLHdE.roa
Signing time: Thu 20 Jan 2022 07:11:03 +0000
ROA not before: Thu 20 Jan 2022 07:11:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 45.156.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54378588 (0x33dc05c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 20 07:11:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3adf9d14a762ee3b3820856ef9aa12fa88b1dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:28:2a:e7:18:5e:6d:fb:1e:82:5a:7f:cd:
cb:a4:74:c8:19:5d:f4:96:ca:d2:c4:40:9c:64:84:
96:9d:18:fc:20:53:e4:8d:e8:6a:74:35:3a:37:b2:
5b:3f:da:5d:fc:3d:e3:e4:42:c8:13:38:e9:19:b9:
ec:80:ff:6b:38:9d:37:c5:da:b9:ee:c4:0e:36:65:
26:ac:e1:0e:7a:bb:3f:65:ed:af:76:07:e7:c9:2c:
a0:2c:22:b1:91:6c:3f:c6:0b:39:bd:e2:80:8d:f0:
b0:cd:6f:46:d5:75:bf:da:db:62:55:85:85:6e:e9:
69:45:de:55:84:c8:75:03:15:e6:4f:12:f4:42:35:
df:93:a2:54:08:b8:7c:b8:79:f8:86:73:f3:57:17:
76:df:16:d9:12:7b:a6:a2:f3:d7:56:56:dd:f0:a1:
7e:13:4f:4d:6e:1a:57:99:9b:5e:db:2d:0e:86:b8:
bb:e6:32:d3:25:bf:b1:eb:cc:8c:e8:4c:fd:1d:87:
58:d6:23:9a:8c:a5:58:1e:13:67:20:2f:1f:76:00:
bd:ee:25:da:32:f4:c0:84:4f:ec:ca:8f:c7:6f:ee:
a0:93:6c:9e:40:38:25:61:b7:52:73:a4:23:2e:df:
f6:f9:9b:93:ca:7d:b9:ab:5f:ba:a7:73:d2:a9:86:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AD:F9:D1:4A:76:2E:E3:B3:82:08:56:EF:9A:A1:2F:A8:8B:1D:D1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w6350Up2LuOzgghW75qhL6iLHdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:55:9b:bf:5f:fd:08:27:df:e7:d3:2a:15:1d:f4:d5:d0:ab:
ed:f3:88:f2:6d:01:4d:d4:b4:45:16:d2:c2:18:20:00:ff:38:
9d:ab:d5:1c:a2:3f:b7:40:9b:05:f1:77:ec:96:11:33:55:90:
5d:04:eb:0b:ad:04:79:11:5a:dd:c7:d3:ff:86:9c:de:18:87:
32:8e:e9:e8:c1:79:58:37:0f:d5:03:05:3d:b0:f0:44:e4:55:
1c:d9:64:a7:d6:96:bb:cb:de:45:fb:6c:08:d2:15:51:b6:7b:
37:3a:e3:8a:4f:db:36:4b:13:ae:f8:02:b9:35:75:a1:72:8a:
4c:16:9e:e6:30:72:7e:c0:9f:af:25:28:c4:00:2c:7c:15:ef:
85:e5:8d:05:32:de:0b:e2:7f:33:4a:f9:89:d6:19:6a:6e:78:
9b:16:b8:5a:73:af:bb:54:f7:4a:53:05:af:5a:b3:10:d3:c2:
c3:23:14:7c:25:e2:c7:cc:ea:f0:dd:6e:65:9c:af:9e:71:5c:
9a:a8:a1:7c:3c:95:ef:27:22:8d:e4:ec:08:b2:df:97:eb:89:
e8:84:34:86:d6:ed:75:ed:96:ca:de:19:c2:8e:84:fa:7e:50:
6c:b8:f1:a1:38:d3:ab:47:b2:95:81:54:68:bf:ac:48:6f:3c:
ee:ac:df:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAz3AXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MTkzZmZlOWRiMzc2MjZiMTNmODVkN2NjNDU3YWFkNWMxZjMwYzlmMB4XDTIyMDEy
MDA3MTEwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzNhZGY5ZDE0YTc2
MmVlM2IzODIwODU2ZWY5YWExMmZhODhiMWRkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmhKCrnGF5t+x6CWn/Ny6R0yBld9JbK0sRAnGSElp0Y/CBT
5I3oanQ1OjeyWz/aXfw94+RCyBM46Rm57ID/azidN8Xaue7EDjZlJqzhDnq7P2Xt
r3YH58ksoCwisZFsP8YLOb3igI3wsM1vRtV1v9rbYlWFhW7paUXeVYTIdQMV5k8S
9EI135OiVAi4fLh5+IZz81cXdt8W2RJ7pqLz11ZW3fChfhNPTW4aV5mbXtstDoa4
u+Yy0yW/sevMjOhM/R2HWNYjmoylWB4TZyAvH3YAve4l2jL0wIRP7MqPx2/uoJNs
nkA4JWG3UnOkIy7f9vmbk8p9uatfuqdz0qmG/MkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTDrfnRSnYu47OCCFbvmqEvqIsd0TAfBgNVHSMEGDAWgBSBk//p2zdiaxP4
XXzEV6rVwfMMnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2daUF82ZHMzWW1zVC1GMTh4RmVxMWNIekRKOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8x
L3c2MzUwVXAyTHVPemdnaFc3NXFoTDZpTEhkRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
NzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8xL2daUF82ZHMzWW1z
VC1GMTh4RmVxMWNIekRKOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2cODANBgkqhkiG9w0BAQsFAAOC
AQEAC1Wbv1/9CCff59MqFR301dCr7fOI8m0BTdS0RRbSwhggAP84navVHKI/t0Cb
BfF37JYRM1WQXQTrC60EeRFa3cfT/4ac3hiHMo7p6MF5WDcP1QMFPbDwRORVHNlk
p9aWu8veRftsCNIVUbZ7Nzrjik/bNksTrvgCuTV1oXKKTBae5jByfsCfryUoxAAs
fBXvheWNBTLeC+J/M0r5idYZam54mxa4WnOvu1T3SlMFr1qzENPCwyMUfCXix8zq
8N1uZZyvnnFcmqihfDyV7ycijeTsCLLfl+uJ6IQ0htbtde2Wyt4Zwo6E+n5QbLjx
oTjTq0eylYFUaL+sSG887qzfNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org