Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/GVR30IBRAM0mIzGzh0Ky80IgpkY.roa
File: GVR30IBRAM0mIzGzh0Ky80IgpkY.roa (raw, json)
Hash identifier: xatZGASyc/dZJPggyX59FoNrjsvwXbJRNdVQk6A5TMs=
Subject key identifier: 19:54:77:D0:80:51:00:CD:26:23:31:B3:87:42:B2:F3:42:20:A6:46
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 05033715
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/GVR30IBRAM0mIzGzh0Ky80IgpkY.roa
Signing time: Thu 16 Jun 2022 14:27:44 +0000
ROA not before: Thu 16 Jun 2022 14:27:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 78.25.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84096789 (0x5033715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Jun 16 14:27:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=195477d0805100cd262331b38742b2f34220a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:58:16:2d:8c:b9:c2:ed:e8:4a:48:93:8c:
db:5f:d0:d7:16:e9:62:b8:88:b6:17:02:2e:5c:7a:
b3:ed:68:ae:f0:44:0c:a8:7b:1d:2b:42:43:5f:23:
13:c9:6e:b2:30:13:fb:2d:a6:25:ed:47:06:bf:c9:
bd:bb:10:60:03:84:5f:05:bc:bc:6a:40:03:30:42:
97:ce:68:24:bc:0a:ee:3e:09:9a:92:c9:b9:1d:90:
e3:87:c3:91:40:b6:0e:2c:89:fc:60:61:cb:96:4b:
01:45:c7:05:09:b0:c2:15:9f:ec:24:fe:3c:24:52:
bb:7a:28:5a:f0:e0:48:17:78:9a:f5:f2:e1:9b:7e:
19:83:df:b5:f1:bf:88:b7:f3:c7:1e:1b:f0:73:1b:
8b:da:d5:c1:5d:c4:04:c2:af:a0:1c:dd:01:5d:e9:
e6:a3:f0:a5:1c:c6:b0:7b:b4:05:63:40:34:83:47:
45:a7:49:13:62:18:80:65:88:dd:13:0e:57:0f:d2:
bd:98:eb:81:15:dd:e7:fd:3d:97:ce:65:fb:67:da:
8f:18:22:e7:cc:96:cb:4b:24:60:8b:b6:98:e3:9e:
5c:81:2c:fa:73:6a:94:69:27:c3:bf:e3:01:20:54:
8d:c6:b1:59:06:3e:7e:1f:81:6d:e1:0c:24:bc:3d:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:77:D0:80:51:00:CD:26:23:31:B3:87:42:B2:F3:42:20:A6:46
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/GVR30IBRAM0mIzGzh0Ky80IgpkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5c:74:8e:82:6a:aa:b7:8c:2a:c8:b0:f7:ab:fb:27:0d:e4:
25:cb:a0:ad:dd:3a:e1:aa:e8:9d:4f:7b:dc:19:ee:e1:ec:a8:
8a:ab:d8:fd:99:ff:8f:c4:11:d5:73:3c:13:21:23:6a:5f:8b:
41:fa:16:ea:08:df:dc:82:42:31:35:17:c6:36:9c:52:45:fa:
74:38:17:3e:69:3b:6f:51:17:58:bd:5f:8f:8c:03:16:84:8f:
78:a7:1a:00:40:a0:7b:db:a0:43:9e:87:4e:c6:12:ce:24:e0:
63:76:db:a5:a2:45:92:48:4c:40:6f:89:30:d4:4a:1a:f7:10:
53:9c:c0:43:16:a4:3c:12:d6:b4:fe:5d:27:7d:66:cc:94:57:
4d:63:33:b6:a2:f5:58:d4:13:30:f3:78:23:17:76:a6:a1:ec:
05:21:70:87:23:8f:c3:99:32:7e:52:9a:95:c6:5f:a0:a7:aa:
4d:8c:6f:18:14:fd:1e:8d:4c:0e:cb:42:8b:e6:98:2b:56:a0:
ec:38:a1:4d:e4:d4:c2:d7:ff:9f:41:70:82:05:69:80:d2:b8:
fa:b4:af:97:d3:a8:40:f4:d4:c8:4d:e1:77:1c:6e:d4:c0:3a:
92:7c:f5:1f:25:ed:5d:11:cf:fd:cc:e6:10:5d:05:02:e5:41:
16:5f:71:9f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBQM3FTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NGIxYjQ1OGFiZjc5N2RlZGNjNjYxZTU0YTY4NWY2NTE4MzRiNWQxMB4XDTIyMDYx
NjE0Mjc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTk1NDc3ZDA4MDUx
MDBjZDI2MjMzMWIzODc0MmIyZjM0MjIwYTY0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5qWBYtjLnC7ehKSJOM21/Q1xbpYriIthcCLlx6s+1orvBE
DKh7HStCQ18jE8lusjAT+y2mJe1HBr/JvbsQYAOEXwW8vGpAAzBCl85oJLwK7j4J
mpLJuR2Q44fDkUC2DiyJ/GBhy5ZLAUXHBQmwwhWf7CT+PCRSu3ooWvDgSBd4mvXy
4Zt+GYPftfG/iLfzxx4b8HMbi9rVwV3EBMKvoBzdAV3p5qPwpRzGsHu0BWNANINH
RadJE2IYgGWI3RMOVw/SvZjrgRXd5/09l85l+2fajxgi58yWy0skYIu2mOOeXIEs
+nNqlGknw7/jASBUjcaxWQY+fh+BbeEMJLw9edsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQZVHfQgFEAzSYjMbOHQrLzQiCmRjAfBgNVHSMEGDAWgBTEsbRYq/eX3tzG
YeVKaF9lGDS10TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hMRzBXS3YzbDk3Y3htSGxTbWhmWlJnMHRkRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWEvMjYwZTI0LTIwNDAtNGE1Yy05MmNmLWVjNThhMzEyNWVlNS8x
L0dWUjMwSUJSQU0wbUl6R3poMEt5ODBJZ3BrWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEv
MjYwZTI0LTIwNDAtNGE1Yy05MmNmLWVjNThhMzEyNWVlNS8xL3hMRzBXS3YzbDk3
Y3htSGxTbWhmWlJnMHRkRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE4ZATANBgkqhkiG9w0BAQsFAAOC
AQEAY1x0joJqqreMKsiw96v7Jw3kJcugrd064aronU973Bnu4eyoiqvY/Zn/j8QR
1XM8EyEjal+LQfoW6gjf3IJCMTUXxjacUkX6dDgXPmk7b1EXWL1fj4wDFoSPeKca
AECge9ugQ56HTsYSziTgY3bbpaJFkkhMQG+JMNRKGvcQU5zAQxakPBLWtP5dJ31m
zJRXTWMztqL1WNQTMPN4Ixd2pqHsBSFwhyOPw5kyflKalcZfoKeqTYxvGBT9Ho1M
DstCi+aYK1ag7DihTeTUwtf/n0FwggVpgNK4+rSvl9OoQPTUyE3hdxxu1MA6knz1
HyXtXRHP/czmEF0FAuVBFl9xnw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:14 2025 by rpki-client