Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/GkkKGpZ0l9lu0fIVVfJryPYVkmA.roa
File: GkkKGpZ0l9lu0fIVVfJryPYVkmA.roa (raw, json)
Hash identifier: BYsyYez/xpclRoZZjGnIlTqO8yEyLn6SVmlu5MJctBM=
Subject key identifier: 1A:49:0A:1A:96:74:97:D9:6E:D1:F2:15:55:F2:6B:C8:F6:15:92:60
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 357BBD3A
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/GkkKGpZ0l9lu0fIVVfJryPYVkmA.roa
Signing time: Sat 01 Jan 2022 13:04:28 +0000
ROA not before: Sat 01 Jan 2022 13:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4755
IP address blocks: 5.157.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897301818 (0x357bbd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Jan 1 13:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a490a1a967497d96ed1f21555f26bc8f6159260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:fb:6c:ea:a6:58:1a:d3:af:d5:02:64:33:
54:29:58:3a:d6:b3:bb:d6:a6:be:cf:86:bb:da:63:
18:fc:90:55:93:75:43:f7:da:bf:d0:ef:ee:07:5e:
7d:93:81:3e:f4:fb:ed:2d:26:df:ef:3c:d2:71:d8:
b9:59:7e:db:71:8e:e5:99:ba:ca:84:bb:89:d8:2c:
28:c8:49:2b:e3:51:71:12:f8:95:e0:ec:ce:43:8f:
e7:59:8c:67:9b:ed:30:a8:a4:ea:18:df:7f:75:e6:
11:4e:4e:4f:ac:3c:b3:20:48:47:e6:26:b4:1d:71:
2b:f1:88:8a:78:5d:91:0b:15:fa:b0:7a:b8:35:cc:
4c:a4:6e:3e:29:f7:69:4e:a6:96:06:5e:17:a2:54:
1d:4e:be:f6:e2:71:1d:23:c8:ae:34:43:67:40:ba:
dd:e1:c1:33:e0:4d:8c:88:cf:4d:59:be:71:30:7b:
60:99:66:ee:10:f9:33:17:7a:c9:e8:1c:ae:68:d0:
ea:e0:88:ec:92:56:4c:6d:b1:5b:10:4d:96:dc:f0:
06:97:15:78:40:dc:81:90:f4:f2:9f:14:59:6f:7f:
e8:75:b2:81:c2:7d:13:30:b6:0d:1a:e0:fa:ae:4b:
45:9c:ff:40:21:3c:3f:65:08:e4:e9:d1:4c:6d:5b:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:0A:1A:96:74:97:D9:6E:D1:F2:15:55:F2:6B:C8:F6:15:92:60
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/GkkKGpZ0l9lu0fIVVfJryPYVkmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3e:59:93:0b:fe:35:ca:41:6c:15:f2:7c:66:76:72:00:01:
ab:78:23:31:0e:41:8d:bb:f3:64:4f:99:97:7a:30:69:a2:94:
7b:62:55:41:b8:11:42:c1:77:d1:dd:2f:23:2a:bd:46:7d:21:
b0:00:25:0f:d2:77:78:5a:96:22:cb:d4:e6:5e:1d:5f:08:a3:
0b:42:fe:97:a0:e9:72:e2:6c:77:3b:fa:cf:02:7d:48:fc:d7:
be:c6:85:d6:dc:c9:26:96:6e:a5:2e:20:f1:81:99:b1:2a:4b:
44:83:f9:47:ef:10:45:20:e7:22:19:84:74:da:d0:1e:7a:84:
e9:38:ed:91:ab:46:cf:ed:88:62:9f:2b:cd:02:ce:e0:7b:b1:
60:92:2d:9d:7d:b9:21:68:53:01:01:c7:36:5a:1b:72:01:92:
55:db:f3:ca:fa:e7:45:92:1e:d1:cf:76:b6:95:9d:1b:db:c2:
c9:43:f2:5b:d2:b6:fe:a4:1f:ee:6a:e3:88:7a:f0:ec:b8:cf:
75:d1:a0:55:61:e4:c7:c9:ab:14:d6:80:e7:2b:b8:c1:f4:36:
22:01:e2:96:9e:79:0a:3d:67:ca:b6:fd:3e:04:ec:6b:29:a4:
d1:0e:02:c0:9a:bc:e6:db:3b:8f:9c:d9:1e:75:5c:56:d1:c4:
64:70:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:13 2025 by rpki-client