Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GT6ZExEbxPzDrbG1b62iT8UW7e8.roa
File: GT6ZExEbxPzDrbG1b62iT8UW7e8.roa (raw, json)
Hash identifier: CmvMabgGK4twr2eED1JHG365y8fNjbdp55q7l//WUTo=
Subject key identifier: 19:3E:99:13:11:1B:C4:FC:C3:AD:B1:B5:6F:AD:A2:4F:C5:16:ED:EF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 029BDC5D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GT6ZExEbxPzDrbG1b62iT8UW7e8.roa
Signing time: Sat 02 Apr 2022 12:19:17 +0000
ROA not before: Sat 02 Apr 2022 12:19:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 45.137.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43768925 (0x29bdc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 2 12:19:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=193e9913111bc4fcc3adb1b56fada24fc516edef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:f4:d7:e0:a1:26:bc:ff:cf:3f:d1:af:26:
86:e5:1c:59:4b:eb:75:cc:c5:b5:ac:37:5f:3b:d7:
ed:26:f5:3c:69:4e:73:e0:2b:93:85:97:20:aa:56:
5b:8e:df:3f:51:49:b5:43:59:0b:ee:4f:a2:e8:dd:
da:48:44:d9:6d:25:5c:68:00:a3:22:54:1a:15:b3:
ea:88:b3:81:71:ca:3c:1d:ad:42:f3:c3:ee:99:bf:
0e:f5:7f:1b:d7:a9:ae:f6:4c:b5:1d:38:98:94:e2:
cd:7b:1f:43:e2:c9:63:cc:7f:50:83:46:d9:56:59:
9c:90:cf:68:9c:e4:bc:c3:87:3a:45:66:ed:e7:91:
e2:18:d3:93:4e:89:7e:99:c3:f6:c8:a3:e5:12:25:
cb:7f:9c:ca:63:71:94:0c:42:50:07:71:d6:59:4e:
11:6a:49:4f:17:48:70:d5:27:c1:ce:67:d7:2b:9d:
96:f2:59:a9:3f:52:4d:d0:0e:e7:0e:fd:50:7d:9d:
62:7c:b5:01:8c:ad:ae:09:46:68:eb:e6:50:cd:be:
cf:7c:63:9f:05:37:f5:2b:9e:29:57:de:7c:cc:49:
7c:81:01:e0:1b:61:4c:0c:6c:08:69:9a:31:bb:d1:
38:bf:77:02:c0:dc:34:3d:cd:83:0e:fc:28:42:02:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:99:13:11:1B:C4:FC:C3:AD:B1:B5:6F:AD:A2:4F:C5:16:ED:EF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GT6ZExEbxPzDrbG1b62iT8UW7e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
Signature Algorithm: sha256WithRSAEncryption
96:68:da:0f:78:88:b1:df:6a:1b:83:9d:56:8d:35:e5:5f:32:
da:88:84:e4:26:04:6d:3f:93:f6:30:02:64:17:47:e2:31:68:
be:9b:79:04:00:b2:db:32:30:15:3d:80:6f:b1:8d:6c:8b:d8:
1c:49:7e:7f:50:f0:90:2b:ae:ce:3e:46:c9:19:7a:29:a2:cd:
50:f6:b4:19:02:87:da:ed:e8:58:d8:69:1e:40:d0:20:a2:40:
79:6c:95:f7:04:35:c7:67:75:48:47:b2:01:4b:27:47:09:b2:
7b:a5:0d:5b:4d:03:fc:ed:02:76:e0:a6:33:06:ad:53:5c:27:
1a:17:0e:40:69:4b:02:da:5a:59:26:83:65:d0:5e:92:37:87:
71:0e:58:5f:9c:e0:47:64:23:d4:49:9f:5f:6f:86:e6:44:d8:
3b:47:ba:87:84:ee:5a:5e:2f:1d:66:4b:54:5b:4c:98:fc:64:
aa:af:6e:4f:24:f2:d4:6f:5e:d8:7f:8a:ae:1e:0b:2b:ea:7d:
d2:b8:6d:60:4f:a4:24:6c:15:3b:31:70:6a:bd:c0:ce:98:3a:
1b:1e:da:2e:b4:aa:97:e3:e1:e6:67:9c:ba:a8:83:fe:56:2b:
ac:bc:a3:a8:2b:f3:fc:ad:c9:0b:40:86:16:da:3a:d7:9f:59:
3c:89:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:17 2025 by rpki-client