Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gsp_E8_NVWVuu3P0Zdfa-qimHsk.roa
File: gsp_E8_NVWVuu3P0Zdfa-qimHsk.roa (raw, json)
Hash identifier: dnjerGsF1tdtHZNKnIaq64XoLmHL8MeSKH/FvbkYJNU=
Subject key identifier: 82:CA:7F:13:CF:CD:55:65:6E:BB:73:F4:65:D7:DA:FA:A8:A6:1E:C9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A4B659AC221BC09271B4599ABCAA614BD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gsp_E8_NVWVuu3P0Zdfa-qimHsk.roa
Signing time: Thu 31 Aug 2023 11:41:04 +0000
ROA not before: Thu 31 Aug 2023 11:41:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 5.105.35.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:65:9a:c2:21:bc:09:27:1b:45:99:ab:ca:a6:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 31 11:41:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82ca7f13cfcd55656ebb73f465d7dafaa8a61ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:20:35:2d:f9:39:78:a8:dd:a3:90:67:c4:
ec:af:ea:72:3e:cf:21:41:10:ab:dd:af:75:4b:02:
29:8f:4e:99:d0:b1:d1:92:cc:64:52:3e:4c:45:b8:
fb:fa:83:a1:bb:3f:0a:d3:81:82:3d:b1:90:7e:fa:
c6:eb:75:db:4b:2d:76:47:e7:89:f8:1e:c4:bb:a2:
92:3d:d4:77:b9:f2:31:be:61:24:7f:d5:be:69:20:
c4:f4:7b:1c:c0:3d:83:32:17:63:4a:a7:57:95:3d:
80:b1:73:40:07:b7:fb:33:7b:fb:6f:93:3a:4d:7d:
4f:fa:46:77:f2:eb:2d:26:11:d2:b4:e0:47:85:57:
62:d0:d0:25:60:bd:3a:b2:25:68:1c:ef:82:6e:b3:
a8:f5:fb:be:19:24:fe:c4:79:b1:fb:7b:2e:77:56:
6a:f0:7b:90:9c:4c:97:d3:35:49:56:05:33:6a:9a:
9d:cf:0f:41:45:9b:86:4c:fe:78:aa:73:53:98:70:
5b:2a:f7:1f:3e:6a:04:4d:fd:91:6a:49:c2:5c:2e:
48:9b:65:90:86:a3:dd:1b:3a:ad:ab:c9:85:db:30:
7c:bf:60:a7:a4:95:75:09:e6:44:82:8e:b0:9e:0c:
9c:c3:ff:fa:14:1f:78:e8:6a:af:64:25:16:f1:94:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CA:7F:13:CF:CD:55:65:6E:BB:73:F4:65:D7:DA:FA:A8:A6:1E:C9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gsp_E8_NVWVuu3P0Zdfa-qimHsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.35.0/24
5.105.43.0/24
5.105.101.0/24
5.105.111.0/24
5.105.164.0/23
5.105.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c2:f6:b7:0b:63:2f:28:a5:a3:cf:66:bb:48:96:c6:15:cc:
04:e0:81:5e:b1:3d:f3:b2:fa:4a:21:b5:75:87:6f:63:d9:37:
0e:2e:c3:47:e0:6c:a7:5d:b7:f8:95:12:af:42:87:61:d8:8d:
70:9e:9a:1d:ed:35:db:53:95:f0:f1:dc:43:19:9e:b5:10:63:
14:07:d5:84:13:48:cd:2f:ef:39:0d:fc:73:dc:98:ea:c1:f7:
b8:2a:52:6d:f9:75:34:14:9d:c7:a7:0e:fe:7f:0f:27:1b:68:
ef:20:c1:26:27:7a:8b:9f:74:0c:0c:5d:e2:e9:0d:6d:7f:e9:
2b:be:94:1a:db:f3:c1:83:ef:59:e6:39:47:1b:17:41:66:13:
53:10:e5:f3:52:01:ec:ed:93:ac:77:67:96:37:89:9e:7e:6b:
29:81:d7:12:66:fb:01:ca:d3:1b:90:dc:11:d0:ab:43:42:ad:
2f:94:cc:35:97:75:34:89:84:86:e6:d7:46:e4:a7:8a:1a:a2:
ce:c3:6a:35:17:3c:3f:ac:03:8f:93:fa:ab:6f:2f:08:4a:b3:
da:c2:34:e3:4d:8e:79:63:2b:c9:8f:a3:de:03:d3:53:e6:e1:
7e:6f:14:d5:c8:75:34:4e:1b:1b:9d:12:36:8c:c6:5b:23:f5:
eb:d2:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:16 2025 by rpki-client