Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GCbFSPillJOzw1_RR50BPy7XWr8.roa
File: GCbFSPillJOzw1_RR50BPy7XWr8.roa (raw, json)
Hash identifier: tXqyBRf0p8Vg03ZIX+f0yfrUYKU8gdvuKMuagyNk9KI=
Subject key identifier: 18:26:C5:48:F8:A5:94:93:B3:C3:5F:D1:47:9D:01:3F:2E:D7:5A:BF
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018713E4D5C8A20903274FBFF23B5AA948A1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GCbFSPillJOzw1_RR50BPy7XWr8.roa
Signing time: Fri 24 Mar 2023 13:52:56 +0000
ROA not before: Fri 24 Mar 2023 13:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48614
IP address blocks: 5.105.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:e4:d5:c8:a2:09:03:27:4f:bf:f2:3b:5a:a9:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 24 13:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1826c548f8a59493b3c35fd1479d013f2ed75abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:e6:a4:62:2d:33:6d:f9:0c:06:3d:70:c0:
bf:00:48:cf:88:e8:a9:36:25:18:6b:b1:69:24:85:
bf:fe:ac:ad:11:ed:da:ff:8c:c4:81:ab:a2:e8:42:
1f:8a:56:64:b5:3a:40:0b:88:b6:93:7b:91:95:7d:
81:41:55:00:13:d9:4e:9e:ba:43:23:a0:c4:33:d2:
b2:1f:0e:31:b0:ee:2d:20:bd:3b:9d:b7:ed:2f:a6:
5d:98:a5:ff:8a:ff:bc:fc:79:d2:85:7c:7c:c5:c7:
b1:3d:31:21:11:df:c0:04:f6:4d:f3:d8:26:f6:94:
48:1f:e2:db:46:57:32:e8:e6:08:56:44:b1:d2:04:
91:13:a8:39:9c:5d:3c:8b:b6:dc:93:3b:95:60:9e:
bb:49:d7:75:bc:1d:01:88:ba:80:41:26:50:bd:35:
71:66:28:e0:89:17:44:a6:79:2a:f0:44:08:74:ca:
a9:2c:be:d8:3d:ab:e7:e1:81:9d:53:ca:3b:93:91:
c7:49:c3:29:ff:85:ad:8d:d0:70:47:e1:0f:23:4f:
22:9d:95:a0:52:9d:ff:ae:79:24:7b:9a:74:e4:e0:
c1:2b:cf:24:01:d4:cd:d1:0c:63:6f:64:1c:05:db:
f2:fb:13:5d:ae:91:bd:5c:e0:16:8d:cc:1e:0a:da:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:C5:48:F8:A5:94:93:B3:C3:5F:D1:47:9D:01:3F:2E:D7:5A:BF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GCbFSPillJOzw1_RR50BPy7XWr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d6:d0:af:18:93:bd:83:15:68:8f:9c:b9:2d:d7:98:77:b5:
6a:6e:b8:55:78:72:45:ae:d2:95:74:fb:00:f7:94:e3:06:69:
a1:d6:58:6d:c8:c9:d5:79:db:11:f0:27:9c:76:40:55:99:02:
70:ba:b0:dc:d8:cf:2f:9b:c1:9f:97:98:b8:90:6a:6b:93:c5:
46:0d:d0:bd:b7:c2:44:b3:a0:bc:e5:9a:11:77:b5:2c:b3:95:
fb:f8:69:6e:20:b2:ba:64:80:1b:6e:c9:97:b6:70:71:80:60:
7e:97:eb:26:48:bc:7a:fd:3e:50:5b:8d:56:36:eb:ee:14:fd:
c8:2b:25:2f:60:04:9a:5c:bf:0a:04:42:a1:9c:46:fb:67:0d:
91:07:0b:f2:15:17:8d:d4:4f:ea:87:75:47:53:4a:3e:01:10:
0f:b3:41:07:ae:da:db:b5:e9:e8:6e:a9:e4:58:3e:b1:4d:97:
ea:1b:74:fc:41:87:91:82:1a:2f:1b:bc:05:85:23:a7:b3:ed:
40:c2:bd:45:ce:bf:61:33:76:04:7a:c6:0e:ee:7d:45:2b:da:
30:b8:da:47:3a:f4:18:ef:1f:a1:4b:89:66:bd:65:85:e7:43:
b5:79:13:a5:4c:21:2d:9f:ed:5b:e3:7e:d9:3f:2e:3d:68:56:
70:ec:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:01:51 2025 by rpki-client