Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gvZs4iDqmE44j-IbxMtQOIou2zY.roa
File: gvZs4iDqmE44j-IbxMtQOIou2zY.roa (raw, json)
Hash identifier: JOGhvoZc47n5SwbjbbEzeyP7gbQIB5RHjL9aAqT1P08=
Subject key identifier: 82:F6:6C:E2:20:EA:98:4E:38:8F:E2:1B:C4:CB:50:38:8A:2E:DB:36
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0852A586
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gvZs4iDqmE44j-IbxMtQOIou2zY.roa
Signing time: Fri 22 Apr 2022 14:45:46 +0000
ROA not before: Fri 22 Apr 2022 14:45:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 5.180.106.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139634054 (0x852a586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 22 14:45:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82f66ce220ea984e388fe21bc4cb50388a2edb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:01:18:43:e8:ac:c8:25:a9:6d:ad:f8:5c:
89:49:bd:f2:df:00:36:3c:51:f2:6b:8f:7b:9d:d5:
be:84:f8:8f:07:10:c9:f3:7e:ca:0e:c7:3e:d9:24:
c5:f9:d6:75:fc:01:10:4a:95:2f:0b:e9:77:6c:08:
58:d3:21:ae:ee:59:55:21:eb:51:7e:60:5c:ce:d1:
a5:b3:49:92:1a:30:33:ba:ae:89:81:03:e3:82:71:
9a:dd:27:97:9a:ba:ad:50:d7:c6:b9:48:a9:c7:a6:
e1:43:4c:43:b8:01:84:bd:fa:c0:3b:fb:1a:32:a1:
e4:88:a2:16:bf:60:c4:72:22:28:22:3b:c4:4d:b0:
cc:c8:58:2d:0c:c0:44:0e:e7:8f:30:f7:e7:50:8a:
ba:4c:be:b1:34:b8:e3:f9:1e:46:33:7d:84:bc:8d:
a2:0a:94:4a:56:9a:7d:97:49:a0:76:e8:d5:5f:21:
c2:85:4f:42:22:1b:4d:6f:63:cd:b8:a9:b1:7d:5c:
00:8a:9c:0d:4d:a7:fc:5b:8b:09:5e:75:03:e5:4c:
5f:80:b3:61:52:31:9b:97:bb:1a:4e:d9:bc:9c:70:
b9:57:76:4f:36:5c:19:dc:d9:9c:2b:b0:a8:2b:59:
cf:ba:9f:f8:d0:02:42:86:04:fa:22:cd:0a:a3:9b:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:6C:E2:20:EA:98:4E:38:8F:E2:1B:C4:CB:50:38:8A:2E:DB:36
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gvZs4iDqmE44j-IbxMtQOIou2zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.136.6.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e9:cd:29:bf:f8:6f:7c:99:d2:b8:22:9b:f4:02:42:65:0b:
f9:2c:7f:7d:77:06:5a:a9:95:c2:c6:a2:7e:e1:f3:40:af:d3:
ac:b6:41:9c:f6:63:b2:e4:e5:f4:34:bf:20:bc:0d:f4:f0:51:
d2:64:44:87:d6:d1:68:b8:ca:8d:20:ea:1e:cd:32:86:5f:a8:
d2:c1:fe:31:6d:ef:3f:ef:ea:d5:b9:2f:e1:78:90:8e:23:4e:
0b:ee:a8:ea:21:73:69:55:af:fb:c1:26:e4:93:cd:9b:69:71:
0b:1f:32:77:d0:88:79:02:01:d5:ce:cc:8c:aa:c5:4b:8e:38:
21:93:b5:4d:c6:52:d4:c7:12:d7:bb:33:07:0b:e5:9e:5d:24:
6f:1e:c6:12:ef:9b:7b:75:db:93:69:80:c8:71:1d:22:96:c9:
c2:52:23:93:44:cc:38:05:3c:ec:af:17:26:22:b7:6c:cd:61:
87:41:18:88:79:fc:a6:af:9d:4d:07:4e:ee:81:af:63:28:59:
36:1e:18:43:d3:49:a4:96:17:25:dc:e6:1c:21:6e:66:91:c0:
bc:71:10:e8:0c:16:31:68:65:3f:d8:12:25:59:7d:7c:13:c9:
21:5e:bd:14:e7:f9:b5:96:f7:bb:5c:6e:a5:7e:0d:06:04:01:
d9:6b:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:18 2025 by rpki-client