Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JGtIXtGRfdXlQLbFIE8RQWObQTU.roa
File: JGtIXtGRfdXlQLbFIE8RQWObQTU.roa (raw, json)
Hash identifier: 63+6sZjdYZKdYeF65TvQ9E47BSYnWBZ5UPovSjP7NIw=
Subject key identifier: 24:6B:48:5E:D1:91:7D:D5:E5:40:B6:C5:20:4F:11:41:63:9B:41:35
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0181F7626F7E1A7CBCB11BCE2D96A2434C93
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JGtIXtGRfdXlQLbFIE8RQWObQTU.roa
Signing time: Wed 13 Jul 2022 11:47:12 +0000
ROA not before: Wed 13 Jul 2022 11:47:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7979
IP address blocks: 45.152.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:62:6f:7e:1a:7c:bc:b1:1b:ce:2d:96:a2:43:4c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 13 11:47:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=246b485ed1917dd5e540b6c5204f1141639b4135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:51:fd:f2:0c:e2:0d:2d:19:4b:fa:d4:d0:
88:d6:07:ee:df:5b:ca:f7:2f:0d:64:44:97:02:22:
06:c3:ee:30:5f:1a:0f:5e:49:2a:8f:c7:42:7b:5c:
75:ff:a0:3d:29:2e:b7:4b:07:9b:93:c9:1e:a3:9f:
8d:3b:95:06:38:f3:a3:5d:6b:39:03:4b:55:e6:f4:
7b:95:d9:03:cd:40:9b:81:1d:51:a0:4e:9c:59:57:
6c:e8:d8:dd:39:bd:19:51:a3:57:6a:16:f6:57:32:
58:38:4c:da:cb:bb:9f:82:ba:fc:5c:f3:7f:90:95:
41:af:5a:a1:4a:e6:ae:18:e0:f6:0b:6e:44:32:dd:
c1:f2:ac:65:7d:a8:54:f0:79:eb:71:e8:c0:9b:a8:
ef:a8:24:e7:1f:54:dc:8a:70:92:3c:37:0a:e0:c8:
74:e9:23:45:f9:dc:04:32:5c:a0:31:c7:ba:a7:5b:
57:06:96:05:a8:3d:f4:0c:51:41:af:35:36:f2:3e:
3c:21:9f:06:f9:97:6d:bd:c9:0d:26:55:c8:73:96:
12:35:cc:fc:7f:46:b2:27:21:20:9e:04:41:18:ba:
34:a9:44:95:e2:bf:13:07:a2:5c:77:ec:54:70:9e:
0b:f4:2f:ca:0b:61:cb:2e:dc:61:54:df:09:02:0e:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6B:48:5E:D1:91:7D:D5:E5:40:B6:C5:20:4F:11:41:63:9B:41:35
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JGtIXtGRfdXlQLbFIE8RQWObQTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.197.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5c:fa:e7:88:b4:2f:cc:e8:d5:55:90:a2:5d:86:8f:6b:6d:
d7:2b:a3:36:af:e6:50:6d:be:e8:b8:65:47:ea:d1:ee:65:9b:
28:0a:a8:a3:dd:be:64:b6:8c:7f:1f:d5:df:38:b1:f9:ed:c8:
c8:11:7f:83:40:d0:6c:41:99:34:fc:95:a4:3a:92:1b:51:0e:
2b:1f:74:bf:ff:7a:06:f4:0d:5e:a3:f8:0a:1d:93:a1:0b:47:
a8:c9:c1:33:e1:52:5f:39:29:9b:0e:d5:54:06:83:2e:fa:46:
7b:52:ca:b2:af:a5:39:60:3f:cb:27:85:2a:19:71:f5:4f:8b:
19:1f:e5:58:dc:ee:c8:d2:74:78:67:fa:8b:01:61:c2:19:37:
59:83:12:04:bf:0f:2e:86:53:0a:d4:fc:a1:96:45:1a:01:13:
55:af:3f:e7:19:82:f1:ab:e1:81:45:b1:30:16:7e:db:7e:d2:
27:91:a5:15:8b:94:55:63:8f:30:83:47:8f:37:7b:7a:29:be:
4c:fd:6c:9d:da:73:d7:93:27:56:9e:63:b0:81:7a:68:16:85:
e4:18:83:6d:12:c6:e3:f5:b5:47:bf:43:d0:cd:ff:af:b9:6e:
0c:f3:74:79:d3:cf:bb:24:15:a3:25:72:9a:0c:98:3b:92:b0:
6a:70:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:22 2025 by rpki-client