Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/GKOs8rVeOvf6V46pBkKHVDhEmfc.roa
File: GKOs8rVeOvf6V46pBkKHVDhEmfc.roa (raw, json)
Hash identifier: GzYirb4H8KFd/71Ob5eqz81SsNtFPKcsBL6gzQMPcDg=
Subject key identifier: 18:A3:AC:F2:B5:5E:3A:F7:FA:57:8E:A9:06:42:87:54:38:44:99:F7
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 083B1831
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/GKOs8rVeOvf6V46pBkKHVDhEmfc.roa
Signing time: Sat 01 Jan 2022 15:58:42 +0000
ROA not before: Sat 01 Jan 2022 15:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209036
IP address blocks: 45.9.222.0/24 maxlen: 24
45.9.223.0/24 maxlen: 24
45.9.221.0/24 maxlen: 24
2a0e:1500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138090545 (0x83b1831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jan 1 15:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18a3acf2b55e3af7fa578ea906428754384499f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:11:10:ae:45:1f:af:79:75:fd:82:33:53:
6c:9d:ea:60:35:b3:3b:f9:2b:b1:57:87:ce:bb:44:
e8:03:23:64:69:55:49:fb:97:5a:9b:c6:11:2a:0a:
1e:cf:ff:c1:06:c9:87:7d:25:9c:43:8f:18:94:27:
10:5e:9c:6c:28:65:76:71:b3:64:79:5b:c0:07:ab:
2b:94:97:fa:da:80:6c:bf:ee:d1:33:5c:72:2f:55:
62:60:14:1c:af:17:02:cb:42:4b:9b:ba:ef:43:b9:
75:68:f0:52:e6:35:e3:1d:db:49:7a:8d:f7:01:c1:
5f:46:ef:43:73:4a:f6:84:10:0c:9c:9d:47:06:ae:
03:c0:6f:0b:23:ec:23:cf:27:57:20:b2:e3:da:6c:
7a:c2:e5:99:ff:08:10:ef:38:8e:66:90:f8:41:42:
3e:c7:4c:f4:e9:3c:d6:7c:c9:2e:93:0d:e2:53:f5:
0a:f0:11:c9:42:8a:09:03:fd:72:3e:89:6a:81:46:
d6:1d:18:4b:55:00:be:b8:ea:c4:7a:fe:d1:f0:4d:
93:65:4e:b7:7a:ca:7d:48:a0:28:e5:66:d6:34:42:
9f:d1:fd:2d:61:dc:5d:ac:69:f5:87:27:e2:1c:f7:
04:ce:8f:8e:de:ff:67:aa:a1:fa:c7:19:15:ad:1b:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:AC:F2:B5:5E:3A:F7:FA:57:8E:A9:06:42:87:54:38:44:99:F7
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/GKOs8rVeOvf6V46pBkKHVDhEmfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.221.0-45.9.223.255
IPv6:
2a0e:1500::/29
Signature Algorithm: sha256WithRSAEncryption
60:67:fa:a6:06:ee:eb:8d:75:f3:b1:11:d2:5c:60:d6:53:50:
30:17:4a:9a:7f:d3:14:50:14:60:36:93:c9:41:d7:ed:2e:9a:
ac:03:74:f2:45:a3:a0:05:d9:81:a3:aa:0e:bf:2d:e5:51:45:
01:d7:5d:93:b6:00:c4:e1:0c:77:91:c6:24:ac:1c:64:94:9e:
1d:f7:10:ed:8c:78:6b:f5:a9:e6:3f:c8:3e:23:15:b8:ee:0e:
9c:4f:71:8a:5d:58:fc:8a:41:29:5e:f5:74:7f:b2:e6:e2:8c:
df:8c:8f:f1:1f:3e:b6:8c:27:7e:31:ad:60:8d:51:41:79:5b:
eb:d2:7a:e5:e2:60:b9:00:31:cc:14:ca:f2:48:ac:8b:db:fe:
f5:6d:29:a8:e4:33:ef:a0:44:a5:7b:17:60:b4:74:e1:62:67:
14:41:90:9b:a9:28:fc:19:dc:a6:f6:ab:f5:27:36:4e:36:51:
5b:98:9e:a9:71:31:ac:4f:7a:d8:93:87:01:15:6e:cd:00:76:
a5:1d:98:d3:cb:2c:fa:08:e9:ca:38:f8:35:ee:23:f4:8e:78:
7c:09:19:51:11:ee:9c:6a:fa:49:b9:79:97:e3:67:66:fb:b2:
41:bc:30:00:12:08:41:af:86:e5:fc:c4:a9:16:6c:4c:b2:a8:
c1:10:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org