Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/gjG0mlcbZM8YkFgZK1ppS5pRYZU.roa
File: gjG0mlcbZM8YkFgZK1ppS5pRYZU.roa (raw, json)
Hash identifier: XN8PVc2MUw94xv55E3f2Tn63QYBNNcHA5WFiojan+6U=
Subject key identifier: 82:31:B4:9A:57:1B:64:CF:18:90:58:19:2B:5A:69:4B:9A:51:61:95
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01896FFD6CF82F802F0333F98D3088DEE2F3
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/gjG0mlcbZM8YkFgZK1ppS5pRYZU.roa
Signing time: Wed 19 Jul 2023 21:10:26 +0000
ROA not before: Wed 19 Jul 2023 21:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 45.150.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:fd:6c:f8:2f:80:2f:03:33:f9:8d:30:88:de:e2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jul 19 21:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8231b49a571b64cf189058192b5a694b9a516195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:50:04:db:15:a2:6e:1c:12:3b:f1:14:12:
67:e9:ca:c2:c5:3a:25:74:88:5a:c1:7c:cc:9b:bc:
f6:62:3b:de:5b:f5:00:c6:6d:65:2e:18:e7:1c:1c:
76:41:62:c5:25:07:7d:b9:92:07:94:46:33:c5:9e:
a7:b1:5d:b4:57:62:5a:61:42:a2:c6:0e:1f:6e:35:
ba:84:7a:13:47:0d:c2:7c:0d:03:90:1a:4f:95:7f:
e2:5a:41:ed:28:5e:3f:6b:65:bb:e0:9f:8f:b5:92:
bf:ff:a0:0a:ef:fc:fb:a2:4f:f0:5f:1b:ba:f4:d9:
60:01:74:96:97:4f:a9:f9:2f:62:2d:ae:b3:54:a0:
6c:7b:55:e6:33:1f:db:ef:07:0d:cb:4f:67:c0:ea:
d8:38:6b:8b:f0:81:50:17:d8:69:ab:c9:4d:42:63:
87:b6:12:80:7e:ca:4d:28:87:cb:b3:2b:78:62:dd:
84:25:9a:76:67:89:e3:31:a6:3f:a3:de:cb:59:d1:
29:e3:0a:d3:72:05:5f:70:6e:41:2e:98:4e:cc:98:
36:91:fd:50:24:3c:88:bd:30:8d:ad:ed:18:e2:6e:
8a:2d:bc:c2:b7:15:b5:ce:ca:36:c7:f2:1b:5e:00:
0d:1d:b9:44:e2:22:44:2c:89:28:14:d1:11:14:d1:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:31:B4:9A:57:1B:64:CF:18:90:58:19:2B:5A:69:4B:9A:51:61:95
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/gjG0mlcbZM8YkFgZK1ppS5pRYZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.110.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:bb:c4:b2:a7:4f:11:e0:61:66:93:cb:ab:40:06:56:49:b7:
0d:78:c2:c2:8a:c4:79:26:5c:ac:03:ba:61:39:9d:16:11:2a:
ba:a8:35:19:22:3e:ee:6a:fb:f1:8d:2d:d7:ce:6d:75:43:63:
0b:f3:ce:9c:1a:41:a0:39:8f:c1:fb:5d:43:9c:d7:48:8e:14:
fe:8b:61:68:a9:e4:ba:c0:08:a3:4e:d0:b9:a1:d2:3b:3d:05:
50:e1:93:94:0c:4e:86:96:b0:f7:08:94:e6:35:13:46:56:61:
44:98:9f:7b:db:83:53:d1:f6:e8:a8:28:b4:04:ad:a6:48:f1:
60:20:6a:66:61:f8:64:e8:bd:ed:86:a7:e3:86:b9:89:be:2e:
7c:0d:39:fe:f7:ec:76:9a:e3:0d:0e:e9:4c:b1:e0:86:d7:3a:
e7:1d:3f:01:ea:2d:52:9f:d9:d4:60:a9:eb:cd:be:50:fd:13:
af:33:8a:cb:7a:1c:2c:a1:15:6b:27:e2:46:4e:f2:dc:a3:ea:
26:05:2e:72:9f:44:e0:48:91:0a:9c:fe:0b:8a:3e:d8:f9:67:
13:a3:7f:c1:12:a8:53:d1:fc:94:88:5f:41:04:b4:ae:5d:91:
8e:e6:45:be:b9:ef:8c:ad:69:58:84:9e:85:93:ab:44:4f:24:
c5:e0:2c:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlv/Wz4L4AvAzP5jTCI3uLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjMwNzE5MjExMDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjMxYjQ5YTU3MWI2NGNmMTg5MDU4MTkyYjVhNjk0YjlhNTE2MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dRQBNsVom4cEjvxFBJn6crCxTol
dIhawXzMm7z2YjveW/UAxm1lLhjnHBx2QWLFJQd9uZIHlEYzxZ6nsV20V2JaYUKi
xg4fbjW6hHoTRw3CfA0DkBpPlX/iWkHtKF4/a2W74J+PtZK//6AK7/z7ok/wXxu6
9NlgAXSWl0+p+S9iLa6zVKBse1XmMx/b7wcNy09nwOrYOGuL8IFQF9hpq8lNQmOH
thKAfspNKIfLsyt4Yt2EJZp2Z4njMaY/o97LWdEp4wrTcgVfcG5BLphOzJg2kf1Q
JDyIvTCNre0Y4m6KLbzCtxW1zso2x/IbXgANHblE4iJELIkoFNERFNHDPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIIxtJpXG2TPGJBYGStaaUuaUWGVMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvZ2pHMG1sY2JaTThZa0ZnWksxcHBTNXBSWVpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZZuMA0G
CSqGSIb3DQEBCwUAA4IBAQAuu8Syp08R4GFmk8urQAZWSbcNeMLCisR5JlysA7ph
OZ0WESq6qDUZIj7uavvxjS3Xzm11Q2ML886cGkGgOY/B+11DnNdIjhT+i2FoqeS6
wAijTtC5odI7PQVQ4ZOUDE6GlrD3CJTmNRNGVmFEmJ9724NT0fboqCi0BK2mSPFg
IGpmYfhk6L3thqfjhrmJvi58DTn+9+x2muMNDulMseCG1zrnHT8B6i1Sn9nUYKnr
zb5Q/ROvM4rLehwsoRVrJ+JGTvLco+omBS5yn0TgSJEKnP4Lij7Y+WcTo3/BEqhT
0fyUiF9BBLSuXZGO5kW+ue+MrWlYhJ6Fk6tETyTF4Cx3
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:27:37 2025 by rpki-client