Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/jEmobOjo6EkBLYRs9ejQbXksTWg.roa
File: jEmobOjo6EkBLYRs9ejQbXksTWg.roa (raw, json)
Hash identifier: 5Z173Y9/4L1gvOqhEMqJBE4YX3XeuaEapR4IZYC6taA=
Subject key identifier: 8C:49:A8:6C:E8:E8:E8:49:01:2D:84:6C:F5:E8:D0:6D:79:2C:4D:68
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 02EF50AA
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/jEmobOjo6EkBLYRs9ejQbXksTWg.roa
Signing time: Sat 01 Jan 2022 08:57:26 +0000
ROA not before: Sat 01 Jan 2022 08:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44356
IP address blocks: 79.99.192.0/21 maxlen: 24
31.13.152.0/21 maxlen: 24
2a00:1538::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49238186 (0x2ef50aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Jan 1 08:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c49a86ce8e8e849012d846cf5e8d06d792c4d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:dc:db:1d:16:67:b7:50:9f:ab:e8:c4:d2:
d6:1a:8d:42:14:d4:fa:6d:5c:57:07:47:ff:86:65:
86:eb:2c:86:c1:d9:ec:c8:a4:d1:57:a0:65:51:30:
f7:9f:65:9b:9c:c8:f9:a5:10:e1:9c:72:bd:1e:2f:
88:39:52:f9:ec:bc:8b:86:31:b8:5b:be:2b:75:cc:
4c:33:14:14:8f:fb:52:15:58:15:75:49:4c:91:51:
b0:f9:84:e3:2d:0b:fb:83:b9:46:20:59:7c:a3:c7:
5d:9b:b4:61:00:95:ea:2a:73:e8:36:20:0e:9b:95:
de:2f:65:df:ba:9e:4e:66:09:aa:f7:4f:0d:76:0e:
0a:e9:49:eb:af:c8:de:be:20:5c:08:78:ae:a5:11:
45:c8:24:b8:02:cf:85:3a:28:df:9a:ef:e6:74:1c:
9a:00:61:7e:17:9c:45:ed:b0:78:1b:8f:86:6c:b8:
05:2c:f7:eb:65:5a:84:2b:d7:8f:96:af:bb:08:aa:
72:e8:bc:40:48:92:53:d2:a2:76:b6:f3:34:8c:07:
f5:a1:0c:bd:8b:58:52:67:63:49:bc:6b:83:8c:47:
ec:a7:14:c1:b6:90:55:61:3f:cc:c4:c2:56:32:52:
05:f6:90:10:19:85:ad:db:29:89:3f:e6:1a:aa:52:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:A8:6C:E8:E8:E8:49:01:2D:84:6C:F5:E8:D0:6D:79:2C:4D:68
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/jEmobOjo6EkBLYRs9ejQbXksTWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.152.0/21
79.99.192.0/21
IPv6:
2a00:1538::/32
Signature Algorithm: sha256WithRSAEncryption
26:86:5a:8d:70:47:db:09:b3:52:85:1e:62:7e:95:b7:23:9e:
be:57:bf:df:52:2f:e8:b3:90:b9:02:bd:83:eb:31:ed:44:56:
74:11:e2:fd:3a:9e:a2:f2:85:f1:c4:80:2b:d1:5a:28:2e:c3:
fa:cf:f1:af:67:c0:85:2c:a7:84:45:7f:b0:26:bb:6f:45:ec:
cb:43:ae:03:54:ae:c9:91:50:dd:0f:e8:68:1f:96:b3:38:6c:
e3:62:8f:3f:46:55:ee:33:72:79:c6:5b:cd:40:f9:23:e5:1d:
9c:97:d7:5c:3d:3b:ea:bd:1d:a3:22:8e:d5:06:81:f8:5d:01:
6b:09:57:0a:0a:d9:4e:a8:67:94:ce:86:d2:13:6f:4f:9e:0f:
09:75:d0:f4:fa:ae:86:bf:60:b5:d1:5b:a6:92:2b:92:fb:8c:
ba:66:aa:71:bf:b1:6f:2d:80:e0:87:c6:b8:8a:2a:95:64:4c:
2b:9d:03:a3:f6:8e:73:20:4a:71:52:32:c2:13:9a:22:b7:d8:
a8:94:bc:d9:8c:70:f0:43:e5:61:68:47:a8:c7:48:ef:b1:88:
ed:5d:b2:50:cf:2a:bc:db:29:b5:fc:b8:8f:fc:50:cc:8d:98:
fb:a4:19:09:8a:b1:9c:31:8c:e4:fc:3a:43:0d:a4:1e:a2:c7:
84:5c:3d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:36 2025 by rpki-client