Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/GyCreSeTQTQNDI-q6eE8-mQM5Xg.roa
File: GyCreSeTQTQNDI-q6eE8-mQM5Xg.roa (raw, json)
Hash identifier: Lhw+n+Hadq/zX/XfoR/gF4GjIpoXMym8DFS3uXGqtSY=
Subject key identifier: 1B:20:AB:79:27:93:41:34:0D:0C:8F:AA:E9:E1:3C:FA:64:0C:E5:78
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 0184F41C36E0D33DDB8C6E79512F4800365E
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/GyCreSeTQTQNDI-q6eE8-mQM5Xg.roa
Signing time: Thu 08 Dec 2022 23:40:00 +0000
ROA not before: Thu 08 Dec 2022 23:40:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208375
IP address blocks: 45.155.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f4:1c:36:e0:d3:3d:db:8c:6e:79:51:2f:48:00:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Dec 8 23:40:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b20ab79279341340d0c8faae9e13cfa640ce578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:29:d0:cf:38:1a:0d:bc:85:96:84:24:40:cd:
76:09:50:7b:52:ad:48:34:4f:30:0b:05:d6:86:28:
22:86:6a:45:eb:da:55:f8:43:92:78:73:b1:23:93:
14:34:a2:4a:46:d0:c1:92:55:a3:62:81:d2:ef:0a:
19:1d:eb:4a:2c:15:4c:22:4c:db:fc:e5:50:77:20:
53:14:18:03:e4:31:3e:13:f2:30:ed:ca:19:f8:44:
7f:04:7a:f6:d8:de:d9:64:76:60:8d:92:e8:4f:b9:
8d:a8:09:78:b9:9d:df:5b:9e:75:0e:a6:d1:17:dc:
92:3e:cf:4a:ff:ae:e8:fe:70:ad:91:00:86:c1:23:
9b:19:68:ac:b3:0b:43:44:1f:e6:26:c2:2b:f3:d9:
8f:18:2c:a9:75:65:3d:ba:54:e1:22:77:b2:15:e4:
40:b8:25:a8:1e:10:ce:b8:25:72:04:81:e3:78:4e:
63:96:1a:d4:cd:f5:76:6f:21:48:5f:80:97:03:00:
09:02:d4:92:7e:25:37:67:e1:c7:a9:97:4d:d4:a8:
67:c0:e6:fc:12:0a:c2:91:49:98:4e:0a:f1:8c:e6:
6c:d2:d9:fd:7e:15:2a:a6:8f:a0:76:7a:5b:15:e3:
31:2a:09:c0:f4:4b:b6:f8:84:61:2f:f6:4b:d4:c9:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:20:AB:79:27:93:41:34:0D:0C:8F:AA:E9:E1:3C:FA:64:0C:E5:78
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/GyCreSeTQTQNDI-q6eE8-mQM5Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.77.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:63:b1:e5:29:d6:91:7e:c9:eb:fe:e5:ec:ae:09:31:28:1e:
42:6b:94:e4:f3:5a:d4:4d:66:ad:0a:24:2e:2c:09:bc:3b:1d:
45:98:2c:61:08:a4:2c:ea:f3:aa:9b:13:46:b7:1b:e2:45:a2:
1b:7b:1e:ed:7f:a9:4f:67:b0:fb:52:88:c7:80:2d:4e:ce:b5:
76:b2:77:26:cb:53:cd:67:8c:f7:67:7a:5d:46:62:ce:e0:c6:
b7:a8:bd:2b:d5:96:60:07:6a:5f:31:93:f2:80:37:fa:d6:84:
ff:34:1e:8c:dc:73:8a:ed:8b:e9:57:a5:6e:ec:88:8e:6f:17:
58:89:a0:a1:42:06:e4:4d:0b:cd:d2:94:56:23:73:e3:37:6e:
5d:52:5f:2f:fb:e1:c0:7e:2b:c1:bc:60:2c:5a:79:70:72:b3:
62:12:4d:70:b7:f8:9a:77:48:f5:57:d3:0d:27:7b:ab:f7:37:
12:05:11:c2:16:e9:e2:ca:df:e3:4c:cd:39:95:04:8c:0e:a9:
b7:2e:e4:37:de:63:9a:99:22:4e:ea:49:52:7d:08:bb:71:2f:
f3:82:d1:d5:a3:55:e7:ec:23:ef:73:ca:b6:5a:3f:40:d3:52:
b1:86:84:ad:b8:94:8c:cb:88:75:d1:42:4d:31:fd:c4:76:c2:
64:f7:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:25 2025 by rpki-client