Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GTgtseM13LyWZnjIBxd3DiGBqLs.roa
File: GTgtseM13LyWZnjIBxd3DiGBqLs.roa (raw, json)
Hash identifier: gtPN5aYId06wPTb1iNTQ2xxS5VpYCwSknaFJDMCc0Qg=
Subject key identifier: 19:38:2D:B1:E3:35:DC:BC:96:66:78:C8:07:17:77:0E:21:81:A8:BB
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 085266AD
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GTgtseM13LyWZnjIBxd3DiGBqLs.roa
Signing time: Fri 22 Apr 2022 07:05:50 +0000
ROA not before: Fri 22 Apr 2022 07:05:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211557
IP address blocks: 45.147.47.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139617965 (0x85266ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 22 07:05:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19382db1e335dcbc966678c80717770e2181a8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:76:c0:83:8f:14:ba:93:1d:87:f5:1f:cb:
a7:1f:e8:60:dd:f1:fd:8d:1b:30:9e:81:b2:57:57:
6b:a3:87:ae:6e:b5:2b:2c:7b:06:78:c4:d8:d8:db:
79:e8:c0:50:76:fb:9a:40:0e:89:ad:d0:09:3d:eb:
cd:6f:0b:aa:33:0a:18:6b:b2:07:73:f4:2e:34:d6:
5c:e8:b2:03:9e:69:01:78:e3:39:96:a3:97:e6:21:
06:10:20:23:c0:a5:25:d5:91:eb:c6:16:81:a0:89:
50:e9:7c:54:fb:b9:de:3c:6d:20:cc:e5:87:e8:8b:
71:60:8b:12:9f:5d:a7:e1:d7:f7:5c:25:52:93:03:
22:bd:85:94:6a:33:5e:d7:4b:92:37:d9:e7:cb:08:
22:2a:a7:cd:11:f5:43:d7:b5:d5:c4:07:3a:4d:73:
53:53:1a:a6:49:9e:9a:51:2d:13:ff:54:1c:47:a4:
f9:52:62:fd:db:b4:21:cd:75:de:10:15:be:34:ce:
5c:fe:4c:d7:eb:88:c5:10:11:a7:26:55:4f:2f:ad:
35:e9:10:63:56:03:80:1f:ea:1f:fb:fa:42:67:d6:
ad:e0:8b:33:b4:52:34:79:33:9d:78:4a:39:d3:87:
03:c5:49:25:b8:59:1a:22:c9:bf:50:d3:0c:01:6b:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:2D:B1:E3:35:DC:BC:96:66:78:C8:07:17:77:0E:21:81:A8:BB
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GTgtseM13LyWZnjIBxd3DiGBqLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.149.0/24
45.147.47.0/24
Signature Algorithm: sha256WithRSAEncryption
64:55:14:54:51:3d:f0:41:9f:ba:30:0d:f2:6b:19:d0:07:35:
fc:fc:44:88:13:82:1f:5b:7c:c6:f2:b7:fe:69:84:5e:48:f3:
4b:cb:11:10:93:89:f9:d4:f8:45:a0:56:9b:84:2d:b1:b5:0c:
c0:fe:ea:df:f4:92:36:2e:0c:14:c0:13:6b:90:d6:70:7d:43:
9e:68:bc:1b:6e:a3:4a:78:4f:fa:d6:c0:08:28:ea:ff:0c:83:
21:2a:70:02:af:33:69:bb:ae:ae:99:ff:af:3a:d4:c5:2b:81:
d7:2b:fd:3a:29:fb:bf:eb:c6:52:ae:a2:ac:aa:b3:39:01:32:
4d:60:bb:d7:45:13:41:4f:6b:af:d5:4c:c5:4c:1f:b3:4e:5e:
50:a1:4a:46:65:c9:09:0a:c9:a0:3e:24:4f:c8:b2:6a:f3:e1:
19:bb:75:1a:02:8d:65:c6:02:bd:6e:5b:ba:0e:57:c9:a2:cf:
b9:9a:28:72:74:c4:ae:34:72:35:e9:5f:04:ef:35:ef:88:72:
c3:c5:8f:f0:41:6b:42:f6:6d:3b:36:40:0f:07:0c:67:26:7e:
18:e5:dc:e4:99:61:74:f3:76:7a:f1:b0:d0:b6:a2:a5:09:83:
59:3c:3b:58:f2:8c:b6:67:32:e3:55:de:33:c2:70:1b:15:fa:
d2:32:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:24 2025 by rpki-client