Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GjL3DCRHD-lOV5PwzLE1i1mc8hY.roa
File: GjL3DCRHD-lOV5PwzLE1i1mc8hY.roa (raw, json)
Hash identifier: 71Nr3g9Rw5lGfVk94pE7VapI/McpQxVDrvzWSKjzP/g=
Subject key identifier: 1A:32:F7:0C:24:47:0F:E9:4E:57:93:F0:CC:B1:35:8B:59:9C:F2:16
Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial: 018571A7A315B0C09C17358D0AEEA9350D11
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GjL3DCRHD-lOV5PwzLE1i1mc8hY.roa
Signing time: Mon 02 Jan 2023 08:44:49 +0000
ROA not before: Mon 02 Jan 2023 08:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9304
IP address blocks: 45.85.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a3:15:b0:c0:9c:17:35:8d:0a:ee:a9:35:0d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Validity
Not Before: Jan 2 08:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a32f70c24470fe94e5793f0ccb1358b599cf216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:59:42:ae:f2:b0:28:49:39:e8:e1:eb:89:
e6:f9:56:16:86:25:51:40:24:b4:e7:72:14:1e:31:
c1:c9:2f:64:a5:ee:f6:35:6d:da:89:e6:48:d3:e5:
3a:63:ba:b0:04:99:7e:99:1d:99:6c:d4:ac:4b:67:
9a:41:19:d5:d0:25:f7:ef:ca:74:6d:aa:47:43:ea:
f3:3d:2c:d2:1c:75:80:f0:4a:0c:2e:b6:b4:d4:e6:
7a:4c:49:4a:f2:44:03:ee:2e:9e:54:1f:1c:bc:18:
14:43:1c:87:0f:ea:dd:51:2c:97:b9:f5:67:9c:85:
6e:bf:cd:a5:0a:b6:75:bd:20:d0:58:85:67:98:47:
58:9f:a7:e8:a8:d3:8f:ee:cf:7d:60:4a:95:d0:64:
f8:a4:f1:43:da:9f:fb:8a:13:47:87:c3:d2:04:15:
88:3d:fd:56:40:67:31:b1:c1:1e:c8:b2:d1:a5:01:
91:a3:ed:35:99:de:1e:d0:d2:d4:38:cf:66:b8:c5:
9f:ee:23:19:e6:f5:44:df:39:d8:d6:a6:61:39:12:
96:65:9c:e0:1a:ad:f3:01:f3:36:73:df:db:e8:6b:
b3:4b:a8:86:3c:7f:1c:92:62:cf:c8:54:99:bf:7f:
13:73:f5:e4:98:1c:1c:4d:28:bd:5a:1d:d6:ec:01:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:32:F7:0C:24:47:0F:E9:4E:57:93:F0:CC:B1:35:8B:59:9C:F2:16
X509v3 Authority Key Identifier:
keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GjL3DCRHD-lOV5PwzLE1i1mc8hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.168.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:ed:55:15:8f:b9:6c:5a:c5:55:87:b0:be:b9:6b:30:3a:fd:
67:f0:73:31:c2:be:23:dd:c2:84:49:b1:f7:00:e8:42:0f:79:
3d:0c:d0:ab:fd:39:17:3a:53:7c:fd:4a:f1:a8:09:73:59:a2:
3c:ca:71:fc:2d:44:4b:07:2b:9d:a2:6e:b9:ce:73:d5:b8:cf:
24:13:fd:7b:0c:44:01:df:c2:f4:ee:82:ac:65:24:c5:b5:f7:
6f:85:31:9f:02:8c:f0:4d:fa:9c:45:e3:84:c5:24:d2:6f:79:
6c:21:d6:52:05:a8:5c:b2:2a:5b:6d:1d:41:27:f8:f3:3c:b2:
38:cc:b4:2e:ab:c1:bd:9c:0e:39:8e:ce:30:6b:9b:90:7d:5e:
c9:c0:2f:83:9d:6a:d1:e9:66:72:0e:86:ef:48:bd:b5:ca:09:
b7:66:6b:ea:93:26:2f:b2:3d:43:67:62:29:60:a1:07:2b:3c:
28:0c:cc:b6:7c:c1:f3:cb:81:8f:a1:56:0c:e6:97:79:3f:f3:
2c:76:c2:89:ef:e4:d0:e4:9e:fc:c0:ad:8c:27:f4:3c:f3:48:
27:83:86:80:c0:cd:3e:0c:70:5a:cf:b4:41:d2:35:5d:74:31:
4d:47:d1:57:52:d9:d7:80:f7:12:34:3e:1e:d9:86:dd:c1:54:
a2:05:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:58:31 2025 by rpki-client