Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/JvRTzUlCLnD-_52kDRdoONr_aMQ.roa
File: JvRTzUlCLnD-_52kDRdoONr_aMQ.roa (raw, json)
Hash identifier: IUaPIyVyKyst9Jc0RuxXoCwNp68HSDqmzFbzgKxrF9k=
Subject key identifier: 26:F4:53:CD:49:42:2E:70:FE:FF:9D:A4:0D:17:68:38:DA:FF:68:C4
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0187F1FFC9CA74B99EEC4285584CC14A8888
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/JvRTzUlCLnD-_52kDRdoONr_aMQ.roa
Signing time: Sat 06 May 2023 16:58:05 +0000
ROA not before: Sat 06 May 2023 16:58:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 138.124.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f1:ff:c9:ca:74:b9:9e:ec:42:85:58:4c:c1:4a:88:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: May 6 16:58:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f453cd49422e70feff9da40d176838daff68c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e4:84:4d:93:3e:46:d9:98:b5:32:8e:82:39:
f7:59:3d:29:dc:fa:e0:50:0c:09:e1:d5:e8:5d:63:
38:c7:ef:57:d1:b0:c9:84:8c:9f:51:12:86:00:2a:
b4:05:e8:6f:cd:f1:63:7a:0a:e2:8f:f7:c5:54:ce:
97:a9:6a:c3:0b:6e:d6:15:7c:32:ed:fa:f2:88:3b:
49:21:ae:63:7a:47:22:a0:e1:ae:ad:98:cc:45:75:
51:ed:87:94:57:ad:39:ce:a4:19:9b:c7:4e:b1:84:
78:b1:41:cb:6e:44:d1:f9:3c:b3:38:d4:79:ab:31:
e1:ac:bd:f5:62:bd:f7:8c:46:6f:3a:15:80:ed:d2:
4d:15:7d:94:52:71:f3:aa:4c:32:9e:f4:05:1e:44:
2f:b7:02:39:31:cd:c1:75:6a:0d:d8:f3:50:f8:ed:
25:8f:2f:c5:20:d6:f0:65:17:a3:49:c4:28:c6:3f:
c1:8b:2c:ff:92:0d:f2:37:77:84:b3:36:6b:d7:55:
a9:7a:45:dd:b2:9c:d9:ff:89:92:b7:47:03:1c:0b:
a4:27:d0:61:f6:18:1f:90:88:34:f8:e3:16:39:da:
00:61:d9:1a:98:01:0a:c3:c7:77:a3:ff:aa:77:50:
34:00:51:48:55:aa:cf:61:50:40:a6:2e:d2:e7:1e:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F4:53:CD:49:42:2E:70:FE:FF:9D:A4:0D:17:68:38:DA:FF:68:C4
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/JvRTzUlCLnD-_52kDRdoONr_aMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.0.0/17
Signature Algorithm: sha256WithRSAEncryption
34:ea:57:62:be:45:4c:b7:59:7b:95:47:64:4e:e4:17:c1:bf:
f7:2f:85:14:d5:b9:19:54:eb:1f:31:cb:f8:52:6b:8b:ae:a3:
23:6b:0e:a1:ba:1c:3c:db:72:c6:25:f0:ed:b4:9a:3b:31:4e:
72:5c:6e:fa:8e:21:c7:10:aa:0e:e1:79:6a:56:cd:8d:6f:05:
30:82:6c:ed:37:8d:90:cd:7e:c2:36:81:a1:77:9a:f8:5a:8b:
18:98:13:a0:0b:45:a4:19:ad:6e:0a:97:83:ca:35:03:c4:33:
c9:6e:bc:50:76:6f:61:ae:ed:43:d4:d5:5e:e2:71:4f:21:9f:
40:c6:44:02:e0:0a:c9:45:75:d1:bc:83:e0:4d:39:1c:a4:37:
74:00:34:77:3d:65:d3:f3:31:d6:bc:45:6e:35:01:9f:ee:a6:
1d:85:49:be:14:91:a4:7c:a7:b7:3a:46:e7:09:41:e9:b6:ac:
cd:4a:5d:f1:d2:1e:14:28:5d:b9:a0:40:dd:7f:72:97:53:62:
28:33:ae:18:48:3e:ac:97:aa:92:d9:88:c9:3a:88:0a:3f:d4:
91:47:5b:37:26:97:08:ec:88:72:20:77:9d:c6:13:9d:a7:81:
19:fb:fc:8c:fc:d0:d3:18:99:f5:d3:c3:29:d6:14:a7:86:8a:
3a:08:b2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:36:52 2025 by rpki-client