Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/GkeLD8Rjv1_9iqOoRzdd81UaJx0.roa
File: GkeLD8Rjv1_9iqOoRzdd81UaJx0.roa (raw, json)
Hash identifier: FQgkjXWqNsFbRUoEI1TxdmzHybFCyAMUYDccwJHXh5o=
Subject key identifier: 1A:47:8B:0F:C4:63:BF:5F:FD:8A:A3:A8:47:37:5D:F3:55:1A:27:1D
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 01856CF855CF5F610F2B6D0116D564D49412
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/GkeLD8Rjv1_9iqOoRzdd81UaJx0.roa
Signing time: Sun 01 Jan 2023 10:54:52 +0000
ROA not before: Sun 01 Jan 2023 10:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48748
IP address blocks: 193.107.132.0/22 maxlen: 22
91.214.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:55:cf:5f:61:0f:2b:6d:01:16:d5:64:d4:94:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Jan 1 10:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a478b0fc463bf5ffd8aa3a847375df3551a271d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:e6:97:87:7d:6a:59:7b:82:09:01:80:d2:
ce:7b:92:a4:e9:0d:5f:47:74:8c:de:fc:54:27:0b:
3e:4d:b8:50:03:12:96:b7:fb:de:1d:64:b2:45:2b:
d2:f1:d0:b7:77:ff:8c:c1:bc:ea:b9:9f:07:10:43:
93:30:e7:80:72:33:5d:d9:4b:c4:ba:b2:36:b4:15:
b8:e6:ba:b8:72:2f:12:32:7d:57:c6:39:4b:7f:a7:
9c:b4:14:cb:71:50:5b:ba:6e:d0:1a:8c:b0:ee:c5:
93:77:41:49:26:59:01:2e:27:db:a4:14:c4:2b:0f:
9f:89:d5:01:ac:db:c9:cf:66:50:96:81:b4:ce:77:
e9:56:db:b1:74:81:b9:91:99:da:27:6b:51:38:af:
43:18:42:e7:f2:98:7f:4a:53:7e:85:49:f1:04:e5:
68:1d:a2:34:63:8c:01:28:b3:cc:86:bb:a6:13:e2:
26:c0:c0:4c:49:9f:a7:08:a6:d1:0d:40:b0:5a:9a:
f3:1f:e5:c6:10:50:02:09:c8:a4:1c:b3:3a:70:79:
db:56:03:e7:62:ab:f8:69:c3:f2:d4:a5:33:2e:c2:
10:81:aa:ab:70:d5:90:66:76:27:56:2b:cf:0f:8d:
dd:0d:a2:df:b7:6a:04:0e:11:50:35:55:52:2a:15:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:8B:0F:C4:63:BF:5F:FD:8A:A3:A8:47:37:5D:F3:55:1A:27:1D
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/GkeLD8Rjv1_9iqOoRzdd81UaJx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.132.0/22
193.107.132.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:d3:02:7e:b9:d7:ae:68:3d:0c:ea:ea:06:a7:74:48:e8:3d:
f5:c5:2b:66:b9:7a:b3:fc:5d:19:0d:cd:68:c7:aa:e7:98:73:
5c:30:db:1d:09:0f:07:ca:d5:90:5a:00:a5:88:bd:1e:0b:0a:
c0:da:70:95:df:40:0f:12:e6:49:29:8d:64:10:19:18:0a:6b:
77:a0:bd:bb:2c:30:78:9f:54:27:85:6e:d6:56:9a:66:db:51:
b1:d7:f2:82:b9:fa:6a:30:b3:4d:c7:e5:1f:e4:d5:c7:6d:8d:
6a:13:9e:78:d5:b9:d1:30:1a:dd:9b:0e:17:67:9c:d7:62:44:
4f:39:b4:f1:14:7d:5f:54:b5:0e:24:34:43:05:2e:bc:07:4f:
05:93:cf:46:ca:a7:a1:98:c6:c1:f7:1e:64:e5:82:17:64:d0:
24:cb:cf:a6:bf:e6:65:84:8e:d3:6e:e0:6f:06:e1:54:f2:45:
df:19:e2:67:72:15:f7:9e:60:b9:fa:59:e0:80:ae:5e:3f:5d:
78:ac:50:35:d6:59:39:a2:a0:a1:c3:52:98:aa:7a:2c:3b:07:
4c:30:ef:88:b8:a6:e4:9a:24:1b:56:cd:7f:19:0a:6e:20:6f:
31:6e:72:1c:78:16:f5:df:01:20:bc:9e:38:c1:f4:62:fc:ab:
18:53:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:10 2025 by rpki-client