Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/gcr--1eV7jWKhBS_PH4qh9Mn5Bk.roa
File: gcr--1eV7jWKhBS_PH4qh9Mn5Bk.roa (raw, json)
Hash identifier: H7lbSWal4CEuvcLiCc56wp2GKOCqgdF8yvPa2lDCN5o=
Subject key identifier: 81:CA:FE:FB:57:95:EE:35:8A:84:14:BF:3C:7E:2A:87:D3:27:E4:19
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 01856C9CBC2188F627AA7AF4F1D468D6A1BE
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/gcr--1eV7jWKhBS_PH4qh9Mn5Bk.roa
Signing time: Sun 01 Jan 2023 09:14:49 +0000
ROA not before: Sun 01 Jan 2023 09:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.129.55.0/24 maxlen: 32
45.129.52.0/24 maxlen: 32
45.129.54.0/24 maxlen: 32
45.129.53.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:bc:21:88:f6:27:aa:7a:f4:f1:d4:68:d6:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jan 1 09:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81cafefb5795ee358a8414bf3c7e2a87d327e419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:fe:f8:ea:54:bf:93:e9:18:6b:f1:72:64:
6a:01:0c:88:72:17:dd:17:3d:53:71:a7:8c:fd:2c:
0f:d4:36:ed:91:99:35:3c:db:7e:9a:75:0e:61:de:
d8:43:df:dd:db:67:d8:21:23:64:4d:e5:7d:90:ff:
e0:db:21:54:56:7e:bb:da:a8:2f:de:05:10:6b:e5:
bf:03:05:f2:93:66:81:1f:07:fe:fc:26:ac:70:9c:
33:68:6a:a4:60:24:27:aa:ed:e5:ac:89:28:64:43:
0e:4f:51:06:ca:3e:95:20:41:1f:da:08:cd:b2:bf:
ed:ea:44:72:7e:8b:d6:3c:3a:b2:c2:94:df:a9:c3:
cb:f2:1a:05:a1:00:50:b8:fb:95:c9:d6:bc:c2:f9:
a8:ba:2f:31:2f:75:25:11:8e:89:f7:0f:ec:e1:42:
ac:48:6a:6e:37:4f:a4:5c:bc:45:48:87:04:a9:a5:
67:32:8a:69:35:7e:d1:93:10:91:e4:77:e7:86:f0:
a4:d8:c2:e1:74:66:68:87:59:e2:f5:27:4b:4e:e2:
c6:2b:64:21:3d:15:e8:2c:a5:9f:ed:90:61:bf:06:
29:df:b5:6e:63:31:ff:9b:f8:d7:41:02:6d:99:7a:
6f:16:3e:6c:f5:ab:91:92:1c:88:46:a1:f8:c2:4b:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:FE:FB:57:95:EE:35:8A:84:14:BF:3C:7E:2A:87:D3:27:E4:19
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/gcr--1eV7jWKhBS_PH4qh9Mn5Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
Signature Algorithm: sha256WithRSAEncryption
76:19:bc:09:95:c8:a7:c4:bb:79:0e:b2:1e:2f:a7:64:61:1e:
97:f0:9b:ca:de:95:9a:98:22:3b:18:26:b4:af:80:e4:81:9c:
0d:d8:a0:d9:0b:c2:72:26:58:e6:6e:d1:b8:47:eb:2f:99:e2:
32:fe:1e:d1:9e:84:a7:cc:12:d6:e1:2a:c5:1b:f9:ad:f7:7f:
4c:04:82:07:6c:d2:8e:70:af:c0:65:26:e0:79:e2:96:2f:8d:
30:de:ec:bc:28:ee:1e:1e:af:9a:0a:ae:e6:9a:04:47:78:19:
32:b0:ee:f7:3e:75:8c:bd:16:38:17:97:9c:85:a8:19:2a:b9:
6b:8c:1c:a0:6d:21:16:6c:df:72:77:81:37:c3:b3:c1:95:8a:
b5:af:9a:0d:11:c5:5f:eb:ee:06:b0:8e:c7:9d:18:86:8d:69:
c9:8e:64:98:6d:33:4b:6d:0e:17:ea:4f:bb:cf:96:16:d8:56:
76:25:2f:b9:be:49:b5:8a:6f:ce:41:56:97:9d:00:36:f3:fa:
8b:de:6d:f6:4b:d4:ba:48:a2:f0:a5:4f:7a:87:c0:2b:64:0e:
ae:f4:44:d7:41:6c:e8:0a:ec:b4:d3:4a:24:23:70:bd:7f:74:
40:1c:15:34:2c:f8:e1:81:3b:c3:b2:61:c7:d4:dc:cb:72:43:
53:92:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:11 2025 by rpki-client