Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/gSnx7WKggPnMKTP-V7CjtTLtqkA.roa
File: gSnx7WKggPnMKTP-V7CjtTLtqkA.roa (raw, json)
Hash identifier: uKpK6FkKPsB6rBNcQjsAS/uqD1WvKlRkGYvW2Klei0Y=
Subject key identifier: 81:29:F1:ED:62:A0:80:F9:CC:29:33:FE:57:B0:A3:B5:32:ED:AA:40
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 01856C783741F48022FDB6FD90F0C50FCFF6
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/gSnx7WKggPnMKTP-V7CjtTLtqkA.roa
Signing time: Sun 01 Jan 2023 08:34:55 +0000
ROA not before: Sun 01 Jan 2023 08:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200781
IP address blocks: 45.13.124.0/22 maxlen: 22
45.13.124.0/23 maxlen: 23
45.13.126.0/23 maxlen: 23
185.96.42.0/23 maxlen: 23
185.96.40.0/23 maxlen: 23
185.96.40.0/22 maxlen: 22
2a03:fd80::/32 maxlen: 32
2a03:fd83::/32 maxlen: 48
2a03:fd80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:37:41:f4:80:22:fd:b6:fd:90:f0:c5:0f:cf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Jan 1 08:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8129f1ed62a080f9cc2933fe57b0a3b532edaa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:28:f5:bd:fc:49:4f:b3:ce:81:fe:cf:c4:
52:89:67:e2:3a:1a:6f:0c:96:da:b5:4b:7a:7e:0a:
da:c4:97:04:71:87:d3:e7:6c:e2:9b:6c:d7:f5:08:
a8:c9:dd:a4:82:be:99:f4:c6:50:c7:10:6a:09:2c:
1a:11:42:bf:14:e4:9b:49:4d:46:55:61:29:b5:64:
7f:e5:01:06:93:86:42:b5:98:ba:44:e3:01:c8:19:
41:95:fc:9d:2a:b2:d4:2e:27:2d:15:ae:0b:b2:c4:
75:66:ee:b4:f4:98:c2:39:52:8e:ef:b9:55:3a:16:
25:b0:1f:8a:c0:a5:a1:78:c5:8a:bb:ff:61:fe:0d:
d7:47:b6:28:5f:b1:73:20:97:23:06:5e:bb:95:c9:
2a:43:23:7b:1e:91:ee:99:9f:64:cb:34:4f:0c:36:
7d:fc:9f:b4:7c:14:80:60:76:1c:1e:6f:10:ef:8a:
df:8a:a4:11:71:4c:ee:b6:c4:26:63:ab:52:90:77:
2a:41:f3:45:29:63:5a:56:1b:8e:d8:33:d8:40:db:
53:59:66:4d:23:c5:f3:8d:15:43:1b:e8:0b:34:f6:
98:62:eb:11:b9:b8:d3:5a:3c:08:ee:24:c4:26:96:
49:e4:4f:88:ee:1f:fe:fc:53:2a:d3:7a:c8:f0:6b:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:F1:ED:62:A0:80:F9:CC:29:33:FE:57:B0:A3:B5:32:ED:AA:40
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/gSnx7WKggPnMKTP-V7CjtTLtqkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.124.0/22
185.96.40.0/22
IPv6:
2a03:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
2c:b4:07:f7:72:10:74:e6:a9:ee:1c:35:1d:2e:4e:34:40:65:
64:86:61:42:2e:b6:4e:30:86:f1:7e:29:36:cf:c3:f3:5c:b6:
3c:0a:5e:3c:82:8e:27:ba:01:b1:97:49:67:21:b3:54:66:a8:
4a:91:8d:73:09:b7:e3:4c:25:ca:43:4f:39:e9:6f:57:2c:60:
9c:b6:58:61:67:3d:5a:f2:3e:1c:b0:fe:79:70:2b:6e:76:7f:
a6:c1:20:b5:c4:07:4f:f4:3b:58:dd:90:b7:a6:9e:7a:54:37:
28:08:e9:74:86:74:69:03:53:5f:50:c6:ae:0a:c1:74:06:63:
4d:8a:5f:13:96:53:f7:0d:14:e4:39:76:bd:50:1a:3d:83:40:
34:52:cd:3f:d1:c8:7d:45:72:81:3a:d6:c7:ae:c1:c0:c8:64:
12:ea:08:c2:e6:c1:f0:d1:8a:d9:30:36:ad:a8:5f:11:12:57:
7f:6b:53:73:b0:52:b0:d3:d8:36:c6:50:73:09:df:9e:9e:62:
95:40:d9:a3:c2:a9:ae:b4:df:b3:48:42:6e:ae:5c:df:e9:6b:
b8:40:cf:60:bc:45:05:06:11:0e:f4:82:a8:73:ce:16:62:4d:
d3:d3:6c:10:29:c4:a5:39:7f:3b:15:2f:d4:4e:c2:bf:6b:6b:
7d:ef:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:13:39 2025 by rpki-client