Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/GvcWJIiiTKgZN8HvrwzicwHXxeQ.roa
File: GvcWJIiiTKgZN8HvrwzicwHXxeQ.roa (raw, json)
Hash identifier: Ty9fYKxu5fuJZZhaozAGuPyo72zK/HoIdPG1A2TupP8=
Subject key identifier: 1A:F7:16:24:88:A2:4C:A8:19:37:C1:EF:AF:0C:E2:73:01:D7:C5:E4
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 077B44DB
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/GvcWJIiiTKgZN8HvrwzicwHXxeQ.roa
Signing time: Sat 01 Jan 2022 14:01:29 +0000
ROA not before: Sat 01 Jan 2022 14:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61421
IP address blocks: 45.150.43.0/24 maxlen: 24
2a0f:9207:24::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125519067 (0x77b44db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jan 1 14:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1af7162488a24ca81937c1efaf0ce27301d7c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:ec:11:d5:d4:85:66:c5:2f:d3:89:c2:5a:
a1:24:9f:b9:e8:17:fe:9f:20:9c:f6:a9:44:77:60:
fc:fd:e5:b4:9b:5b:a6:1f:b2:f2:f1:ca:14:2f:51:
76:5d:df:bc:3a:37:fc:d3:9e:56:bf:7e:8a:63:fe:
fa:e3:05:f2:87:ff:a6:8f:7e:60:65:f9:e8:f3:0e:
a6:50:24:96:8b:33:ef:b1:b7:6a:0f:33:48:75:66:
0e:52:90:30:74:73:18:22:db:f4:8a:f7:a6:7a:73:
1c:d8:55:27:46:e2:35:32:18:5f:36:3b:7a:60:a4:
60:98:f6:7a:1e:15:98:3d:bb:77:bc:d0:1b:8b:2f:
7f:93:78:a7:5c:e9:85:99:9e:77:8b:cb:98:6e:fd:
92:3f:48:00:ef:11:2e:cb:a5:9d:24:a8:de:ed:f1:
60:66:fb:07:62:46:85:ba:da:d6:64:42:3c:9a:a7:
95:26:2f:b0:ed:4e:84:f3:5c:4d:be:e0:6d:06:de:
27:29:db:1e:4f:ad:d6:26:aa:e0:22:f2:c4:57:e4:
39:38:84:fe:ec:8a:39:e2:09:ec:25:ba:4c:f3:ea:
62:d8:9b:34:b9:d5:86:60:71:b3:a1:41:f4:6a:fb:
b7:0d:b5:e4:66:ae:4e:88:d8:0e:a8:43:2e:de:04:
a9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:16:24:88:A2:4C:A8:19:37:C1:EF:AF:0C:E2:73:01:D7:C5:E4
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/GvcWJIiiTKgZN8HvrwzicwHXxeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.43.0/24
IPv6:
2a0f:9207:24::/48
Signature Algorithm: sha256WithRSAEncryption
ae:4c:e8:f0:60:19:67:ac:b7:b4:8d:31:67:e8:20:99:a9:53:
1b:b9:66:bc:5c:89:11:2f:b8:44:d5:30:b0:d9:df:be:ea:92:
3d:ee:ea:8f:80:2e:a8:de:1a:4f:eb:3b:59:10:31:d2:85:92:
f6:44:c7:a8:97:90:20:60:24:63:74:d4:f3:af:02:58:ca:8b:
65:fb:58:a3:b0:68:3e:16:bd:88:39:4a:58:8e:97:1d:fb:50:
d1:50:0c:9c:e8:42:4b:d0:b4:b3:74:c0:65:5c:0d:3f:32:6f:
31:e8:12:5b:fb:36:d9:30:9b:72:6c:f7:b7:b5:cd:65:32:5b:
85:48:9b:fc:5d:1f:c5:c1:ef:dc:39:12:7a:2e:cc:f1:b6:68:
4d:72:68:1e:fc:dd:9e:2b:27:4e:b5:ab:50:6a:e0:1e:98:18:
de:1a:c7:87:8d:25:fc:32:9d:8f:53:7a:62:64:8f:66:dd:46:
5f:ee:eb:9f:82:75:99:07:5f:5f:9a:a1:7a:64:41:6b:e5:57:
5c:b1:a6:2e:7a:b2:b2:eb:c4:59:87:6f:5e:ee:58:32:43:b5:
e6:b6:17:f5:0e:54:ff:81:e6:f2:dd:de:ce:08:41:3f:d0:02:
14:07:5b:86:a8:9e:61:64:94:c2:c9:86:aa:1e:bb:fa:a0:c4:
f9:10:57:9a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEB3tE2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YTcyYjYwZjVmYjQ5MzAwMTZjZWI4NjBjYzE3NGE1MzEzNWYxNjE2MB4XDTIyMDEw
MTE0MDEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWFmNzE2MjQ4OGEy
NGNhODE5MzdjMWVmYWYwY2UyNzMwMWQ3YzVlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCl7BHV1IVmxS/TicJaoSSfuegX/p8gnPapRHdg/P3ltJtb
ph+y8vHKFC9Rdl3fvDo3/NOeVr9+imP++uMF8of/po9+YGX56PMOplAklosz77G3
ag8zSHVmDlKQMHRzGCLb9Ir3pnpzHNhVJ0biNTIYXzY7emCkYJj2eh4VmD27d7zQ
G4svf5N4p1zphZmed4vLmG79kj9IAO8RLsulnSSo3u3xYGb7B2JGhbra1mRCPJqn
lSYvsO1OhPNcTb7gbQbeJynbHk+t1iaq4CLyxFfkOTiE/uyKOeIJ7CW6TPPqYtib
NLnVhmBxs6FB9Gr7tw215GauTojYDqhDLt4EqV8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQa9xYkiKJMqBk3we+vDOJzAdfF5DAfBgNVHSMEGDAWgBSKcrYPX7STABbO
uGDMF0pTE18WFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2luSzJEMS0wa3dBV3pyaGd6QmRLVXhOZkZoWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvNDFmZTg5LTA4ZDYtNDRmOC1iNzU0LWUwODUwNWM5MTA2Ni8x
L0d2Y1dKSWlpVEtnWk44SHZyd3ppY3dIWHhlUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
NDFmZTg5LTA4ZDYtNDRmOC1iNzU0LWUwODUwNWM5MTA2Ni8xL2luSzJEMS0wa3dB
V3pyaGd6QmRLVXhOZkZoWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAC2WKzAPBAIAAjAJAwcAKg+SBwAk
MA0GCSqGSIb3DQEBCwUAA4IBAQCuTOjwYBlnrLe0jTFn6CCZqVMbuWa8XIkRL7hE
1TCw2d++6pI97uqPgC6o3hpP6ztZEDHShZL2RMeol5AgYCRjdNTzrwJYyotl+1ij
sGg+Fr2IOUpYjpcd+1DRUAyc6EJL0LSzdMBlXA0/Mm8x6BJb+zbZMJtybPe3tc1l
MluFSJv8XR/Fwe/cORJ6LszxtmhNcmge/N2eKydOtatQauAemBjeGseHjSX8Mp2P
U3piZI9m3UZf7uufgnWZB19fmqF6ZEFr5VdcsaYuerKy68RZh29e7lgyQ7Xmthf1
DlT/geby3d7OCEE/0AIUB1uGqJ5hZJTCyYaqHrv6oMT5EFea
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:20:27 2025 by rpki-client