Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/JyMvuoMimKbBBd0JL0d3T5lyvUk.roa
File: JyMvuoMimKbBBd0JL0d3T5lyvUk.roa (raw, json)
Hash identifier: Q2bD6lpZO3TPMYUTY3gM3WmiGEF+7y4tnpmt1j8BCjU=
Subject key identifier: 27:23:2F:BA:83:22:98:A6:C1:05:DD:09:2F:47:77:4F:99:72:BD:49
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018BD8EFE206966F9E854209D85686DA6641
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/JyMvuoMimKbBBd0JL0d3T5lyvUk.roa
Signing time: Thu 16 Nov 2023 16:21:21 +0000
ROA not before: Thu 16 Nov 2023 16:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12663
IP address blocks: 46.108.0.0/16 maxlen: 24
37.25.128.0/17 maxlen: 24
188.240.84.0/22 maxlen: 22
92.114.8.0/21 maxlen: 21
176.125.0.0/19 maxlen: 24
85.205.0.0/16 maxlen: 24
130.195.96.0/19 maxlen: 19
195.232.128.0/17 maxlen: 24
130.195.128.0/18 maxlen: 24
89.32.48.0/21 maxlen: 21
46.190.128.0/17 maxlen: 24
130.195.64.0/19 maxlen: 19
130.195.200.0/21 maxlen: 21
86.104.216.0/22 maxlen: 22
62.213.128.0/19 maxlen: 19
208.53.128.0/18 maxlen: 18
195.233.0.0/16 maxlen: 24
130.195.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:ef:e2:06:96:6f:9e:85:42:09:d8:56:86:da:66:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Nov 16 16:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27232fba832298a6c105dd092f47774f9972bd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:29:85:ea:b0:9f:ef:b8:d8:b1:59:26:69:68:
75:49:f9:59:13:5f:58:43:23:94:b8:64:11:26:ea:
1f:7c:28:ab:2e:09:20:22:bd:1b:5b:a1:a6:1b:89:
d0:48:75:39:9b:84:ba:1f:9c:54:8f:f2:5f:8d:5d:
8e:cb:6b:28:ad:b3:65:3a:61:83:ab:7c:68:27:7c:
df:19:b4:ae:df:55:78:50:7f:1b:cf:9c:b2:28:d1:
8a:3c:bf:f4:79:f6:89:d7:88:db:c4:11:e9:e8:25:
20:86:21:61:f3:b5:ce:fa:e9:e9:0c:21:01:0c:1a:
6d:85:cd:97:7f:fb:eb:39:bc:84:cf:b6:ff:68:a9:
40:e7:b0:30:d9:4e:23:d1:67:f0:04:9e:6b:6d:53:
b3:1d:31:cb:89:21:34:43:8a:0d:b2:45:b7:0a:35:
85:f0:5a:ab:bd:98:1a:d9:f3:5a:59:2f:7d:53:97:
24:df:a9:0d:0d:3c:05:ef:ae:cc:b5:9f:39:46:5b:
11:83:95:b6:62:d2:26:3a:d1:e0:26:a7:20:3b:80:
e1:6f:b8:08:66:89:33:93:27:47:4c:7f:e1:fe:c5:
fa:bb:94:c6:09:f1:1a:35:06:a3:0b:9e:3c:2c:d7:
d2:e1:8d:1f:9c:d7:d3:7f:58:e3:6a:d0:a4:8e:0b:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:23:2F:BA:83:22:98:A6:C1:05:DD:09:2F:47:77:4F:99:72:BD:49
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/JyMvuoMimKbBBd0JL0d3T5lyvUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.128.0/17
46.108.0.0/16
46.190.128.0/17
62.213.128.0/19
85.205.0.0/16
86.104.216.0/22
89.32.48.0/21
92.114.8.0/21
130.195.32.0/20
130.195.64.0-130.195.191.255
130.195.200.0/21
176.125.0.0/19
188.240.84.0/22
195.232.128.0-195.233.255.255
208.53.128.0/18
Signature Algorithm: sha256WithRSAEncryption
07:78:3a:a4:f6:43:17:a2:1f:7e:f9:4b:07:12:a1:fc:64:52:
28:b0:2e:9a:08:4a:75:23:d4:9e:56:2a:64:e9:12:48:04:6f:
87:bd:f4:38:84:ec:67:61:9e:c3:0d:83:6c:a7:58:20:f1:76:
65:4e:29:c0:ea:7b:c6:04:16:41:5f:f5:b4:4c:e7:b0:9b:f9:
d1:4f:bd:83:b7:6a:42:cd:8e:08:1f:5a:c5:be:a3:8a:75:ab:
de:6d:2e:8a:76:b9:14:34:57:fb:a1:52:ee:9f:67:9b:9c:ee:
77:8d:75:da:74:37:8d:b0:2d:4e:2a:4f:c9:76:d2:65:49:72:
34:19:06:47:aa:aa:88:2e:3a:36:fa:d6:fe:32:2a:ce:45:01:
c8:80:27:c0:42:6e:f6:66:34:db:35:b6:32:c2:45:2d:21:6d:
ab:6b:12:93:4a:50:1d:50:48:65:dd:dd:53:ad:8f:d6:e2:b9:
5d:85:d5:dd:82:29:a3:0a:44:4b:2c:f6:18:9b:a4:e6:2e:f2:
fd:08:09:37:a3:6f:ff:c8:b2:2e:86:1f:9d:c2:c1:71:1c:f6:
90:fb:06:3d:1a:77:46:fd:67:33:53:36:9c:28:31:0a:08:5b:
e9:b5:7f:39:13:a1:5f:10:3f:de:78:37:2f:82:74:f3:a1:a7:
3d:ae:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:10:52 2025 by rpki-client