Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/gCok-YB2YRNZHY53aj95ETwRbTE.roa
File: gCok-YB2YRNZHY53aj95ETwRbTE.roa (raw, json)
Hash identifier: TwZch8hwgK8Xh26niVEILineS8akp0ghSBEWlAAh8Fg=
Subject key identifier: 80:2A:24:F9:80:76:61:13:59:1D:8E:77:6A:3F:79:11:3C:11:6D:31
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01DE6CDB
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/gCok-YB2YRNZHY53aj95ETwRbTE.roa
Signing time: Sat 16 Apr 2022 08:20:28 +0000
ROA not before: Sat 16 Apr 2022 08:20:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.156.30.0/24 maxlen: 24
45.94.4.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31354075 (0x1de6cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Apr 16 08:20:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=802a24f980766113591d8e776a3f79113c116d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:42:0a:7a:12:92:b1:8b:dc:94:13:7f:00:
88:49:e9:65:27:50:60:6c:4d:28:5c:65:e2:be:a1:
44:3d:76:6f:95:4b:50:b5:52:7f:c0:44:ea:52:73:
2d:73:85:6f:6c:5a:53:01:56:6f:08:ec:29:d5:fc:
6f:dc:ed:fe:1f:6f:c5:74:2e:12:35:3a:2e:3f:2c:
41:01:fe:57:a5:e1:8f:31:3e:2d:3c:a8:e4:fe:70:
bb:76:07:f0:44:47:aa:64:3c:7c:9d:6d:9b:ee:e6:
9e:15:bf:0e:f3:13:d2:c8:e7:25:e7:a3:98:ed:1a:
dc:88:62:8c:09:d3:8a:b3:9d:26:0a:0e:ab:1b:ed:
64:11:68:b1:64:ab:92:ae:2e:c8:57:08:89:4c:45:
48:fa:70:91:97:d0:0d:2c:02:a9:0f:45:74:eb:a4:
44:e2:bd:e4:db:a8:27:3b:b8:89:8c:14:71:a9:4c:
a8:2b:c0:c1:92:42:75:cd:a1:9d:e1:68:0a:2f:cd:
e4:4e:38:e4:88:14:a2:98:84:30:65:45:78:fd:8d:
b4:cb:13:ef:4b:81:c5:88:7d:e8:19:4c:96:89:4e:
86:d8:30:19:ad:59:79:6b:00:25:ba:f7:83:2a:b7:
66:c8:3c:b8:47:7c:f9:1b:74:45:02:2e:77:e7:6e:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:24:F9:80:76:61:13:59:1D:8E:77:6A:3F:79:11:3C:11:6D:31
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/gCok-YB2YRNZHY53aj95ETwRbTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
45.94.6.0/24
45.156.30.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8a:0f:14:af:7e:ba:91:b6:d4:75:85:75:e3:6c:b8:1b:b0:
15:ae:0d:99:2e:e7:43:69:69:3d:4e:0d:07:24:73:a0:02:ba:
41:b8:56:b9:6a:03:d4:3a:1a:69:72:8e:4c:44:53:81:a1:20:
9a:ff:f6:84:c1:25:b9:53:97:c0:49:c8:ad:02:dc:a2:fa:43:
ad:a3:b3:43:7b:7b:f1:49:64:37:9f:98:3e:74:49:25:84:c4:
b2:48:99:df:21:73:eb:57:26:dd:05:f5:cc:f9:6e:85:ef:e7:
60:e9:11:2e:ae:68:30:05:21:13:43:70:cd:04:0d:c4:fe:40:
e6:a0:36:6f:1f:3e:79:c3:f4:29:5b:ee:a7:f7:72:6b:8b:90:
ac:ba:62:86:7f:37:45:23:42:b1:8e:a6:78:2b:b9:70:03:50:
76:9a:88:a6:51:b3:0e:46:d3:45:b3:fc:72:e0:58:4e:62:f3:
35:65:5a:e0:29:d7:8a:82:fa:21:ab:79:c2:05:83:3d:fc:91:
79:8d:c0:8f:68:e4:ac:9c:91:75:db:ec:6c:a0:2f:3d:b7:56:
98:f1:f1:e1:cf:93:ae:bb:ab:ad:65:e3:7c:92:77:85:be:d4:
1e:4f:3b:e7:61:57:f2:9b:1c:8d:fe:25:f3:00:33:b8:c5:46:
83:a2:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:29:24 2025 by rpki-client