Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gdLGyh4u_D_Kwpdh-i71LO2tHuU.roa
File: gdLGyh4u_D_Kwpdh-i71LO2tHuU.roa (raw, json)
Hash identifier: OXtbK64ur+yjD24BeiWUmRtPWBnvKLgX+uP2GjZgn5o=
Subject key identifier: 81:D2:C6:CA:1E:2E:FC:3F:CA:C2:97:61:FA:2E:F5:2C:ED:AD:1E:E5
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 018AA2BB7A62A5747F125F60A42DBAEEA8D2
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gdLGyh4u_D_Kwpdh-i71LO2tHuU.roa
Signing time: Sun 17 Sep 2023 10:41:50 +0000
ROA not before: Sun 17 Sep 2023 10:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 45.157.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a2:bb:7a:62:a5:74:7f:12:5f:60:a4:2d:ba:ee:a8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Sep 17 10:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81d2c6ca1e2efc3fcac29761fa2ef52cedad1ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:3e:a0:e6:88:f1:5c:fc:ed:7c:c5:39:ac:
2c:70:8b:a5:92:0b:0b:6f:00:2c:09:63:69:38:02:
3d:f3:3b:fb:b7:d1:2e:11:f5:a5:ba:7e:60:f8:65:
b4:a4:5b:da:8a:6d:a6:46:f8:56:3b:98:29:e8:fd:
bd:68:76:74:c7:a8:15:95:97:d0:d1:ec:d0:db:40:
0d:d7:ce:de:2c:a8:55:78:91:84:fa:a5:79:66:5e:
6f:70:3c:93:d1:af:bd:fe:8a:58:7c:f3:41:cb:9b:
22:26:09:01:f1:5e:ed:66:22:a1:82:0a:cb:cd:86:
97:b0:35:ae:2b:45:48:b2:e4:33:84:c6:57:6d:87:
f6:25:00:12:fb:13:e8:e8:b4:a7:ad:2c:95:bf:21:
be:20:87:83:e1:b1:db:b3:cc:cd:6a:43:79:71:8d:
1d:a4:75:29:36:d8:45:84:b7:92:91:35:22:fc:9a:
f2:7a:1b:23:82:94:9c:88:43:86:08:73:a5:d9:47:
9f:89:ff:a4:23:bc:c5:b5:27:fc:75:ec:e1:06:21:
e4:72:d0:e9:9d:de:07:ab:9c:0b:3a:2a:44:26:84:
a3:20:e8:1b:f2:10:a2:c7:73:e6:24:56:f8:80:e5:
01:81:39:33:2b:12:59:5c:6a:36:40:44:bb:25:84:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:C6:CA:1E:2E:FC:3F:CA:C2:97:61:FA:2E:F5:2C:ED:AD:1E:E5
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gdLGyh4u_D_Kwpdh-i71LO2tHuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.11.0/24
Signature Algorithm: sha256WithRSAEncryption
75:62:2b:4e:60:ef:eb:9d:85:20:22:f4:7a:77:fd:88:1a:d1:
38:f5:e9:ba:a9:ab:07:02:2e:d4:61:f5:8e:ef:9a:bc:e1:99:
2a:08:84:b3:2a:11:e5:73:26:06:3d:27:98:b6:95:b2:51:05:
06:4c:a6:1d:06:ca:fa:29:45:bf:39:b0:de:37:81:5c:26:31:
e2:43:1d:19:7e:b8:ff:71:ca:f2:dd:8f:68:31:01:9f:5f:18:
42:0c:48:00:0a:17:f3:8a:9f:7c:64:0d:cc:ed:2b:7f:9c:a5:
ca:cc:90:6b:9e:d1:85:a1:1f:d5:49:dc:ef:a2:c0:e9:1d:7c:
53:c5:1f:3e:08:9c:11:5e:24:40:ea:8b:5a:fc:6c:f6:c3:9b:
9c:44:4f:1b:b8:a8:f8:e3:75:75:52:ad:4a:5d:93:52:57:26:
32:79:0a:b6:5f:75:01:db:4e:4c:aa:21:49:35:4b:68:29:0f:
df:64:8d:27:3f:4c:68:f6:f3:f9:e8:42:bf:8f:c1:62:07:b1:
96:7d:a0:a4:40:23:d7:16:79:31:5e:e7:35:49:12:8d:6e:c4:
9c:2b:3d:75:8e:69:3a:fc:90:66:89:a8:b3:43:fa:81:53:c9:
c9:43:e7:21:4c:69:2a:8f:f9:17:b1:1f:99:ed:b5:e2:78:a1:
54:9c:4f:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqiu3pipXR/El9gpC267qjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMzNkODljMDZhOGExY2M5ZGJjMzYyMjAxZjdlYzU1OWQ3
ZmRkNDgwHhcNMjMwOTE3MTA0MTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQyYzZjYTFlMmVmYzNmY2FjMjk3NjFmYTJlZjUyY2VkYWQxZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/4+oOaI8Vz87XzFOawscIulkgsL
bwAsCWNpOAI98zv7t9EuEfWlun5g+GW0pFvaim2mRvhWO5gp6P29aHZ0x6gVlZfQ
0ezQ20AN187eLKhVeJGE+qV5Zl5vcDyT0a+9/opYfPNBy5siJgkB8V7tZiKhggrL
zYaXsDWuK0VIsuQzhMZXbYf2JQAS+xPo6LSnrSyVvyG+IIeD4bHbs8zNakN5cY0d
pHUpNthFhLeSkTUi/JryehsjgpSciEOGCHOl2Uefif+kI7zFtSf8dezhBiHkctDp
nd4Hq5wLOipEJoSjIOgb8hCix3PmJFb4gOUBgTkzKxJZXGo2QES7JYQ8cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHSxsoeLvw/ysKXYfou9SztrR7lMB8GA1UdIwQY
MBaAFIEz2JwGqKHMnbw2IgH37FWdf91IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEt
YzVmZWJlNDg3YzQwLzEvZ2RMR3loNHVfRF9Ld3BkaC1pNzFMTzJ0SHVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEtYzVmZWJlNDg3YzQw
LzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ0LMA0G
CSqGSIb3DQEBCwUAA4IBAQB1YitOYO/rnYUgIvR6d/2IGtE49em6qasHAi7UYfWO
75q84ZkqCISzKhHlcyYGPSeYtpWyUQUGTKYdBsr6KUW/ObDeN4FcJjHiQx0Zfrj/
ccry3Y9oMQGfXxhCDEgAChfzip98ZA3M7St/nKXKzJBrntGFoR/VSdzvosDpHXxT
xR8+CJwRXiRA6ota/Gz2w5ucRE8buKj443V1Uq1KXZNSVyYyeQq2X3UB205MqiFJ
NUtoKQ/fZI0nP0xo9vP56EK/j8FiB7GWfaCkQCPXFnkxXuc1SRKNbsScKz11jmk6
/JBmiaizQ/qBU8nJQ+chTGkqj/kXsR+Z7bXieKFUnE8i
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:52 2025 by rpki-client