Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/J9B1k41BQhsrmbhlhv32SHjBMUg.roa
File: J9B1k41BQhsrmbhlhv32SHjBMUg.roa (raw, json)
Hash identifier: tsVFvLM7WQUi8EPVmrDfdxp87DM6Igq7NOLTTSSq4yE=
Subject key identifier: 27:D0:75:93:8D:41:42:1B:2B:99:B8:65:86:FD:F6:48:78:C1:31:48
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 0185708CD6B749019E9A97CBB5EB2B5A7E25
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/J9B1k41BQhsrmbhlhv32SHjBMUg.roa
Signing time: Mon 02 Jan 2023 03:35:56 +0000
ROA not before: Mon 02 Jan 2023 03:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209492
IP address blocks: 171.22.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d6:b7:49:01:9e:9a:97:cb:b5:eb:2b:5a:7e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Jan 2 03:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27d075938d41421b2b99b86586fdf64878c13148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:0a:e4:21:71:ea:3b:8b:4b:00:2b:23:b6:
ac:30:84:ea:46:28:8d:f8:f2:bb:0d:54:c1:e4:09:
4c:b7:a5:75:33:cf:86:ea:1b:77:19:99:a4:28:7c:
8d:11:ae:4b:e8:0a:c3:cc:e3:b8:a9:42:aa:d2:49:
25:ce:1c:97:ad:19:a5:e8:3b:b2:ed:9d:da:ff:09:
f1:4d:e3:fc:dd:bf:c1:72:44:06:d9:76:ad:5d:b5:
29:46:9c:08:9e:d9:18:86:9a:b5:5b:d2:56:59:ac:
de:f9:99:11:85:85:e8:2c:95:91:ee:62:20:91:da:
ef:0d:e1:8c:50:06:54:5f:96:5b:c7:94:40:bc:2c:
a3:5b:78:2c:0e:e3:3c:c8:bd:27:18:89:22:0b:b2:
82:22:10:0b:4a:84:11:e7:2d:c2:4b:e5:f6:c8:0a:
8c:2e:46:71:36:da:c3:00:5b:cb:e0:41:28:e9:1a:
2f:e7:1e:9c:50:5b:c5:e3:1f:95:30:1c:5a:2b:2e:
6f:9c:df:49:36:b3:a5:b9:02:4b:14:ac:2e:74:c4:
17:59:86:96:df:9d:0f:a1:08:26:03:36:62:60:93:
9a:d2:cc:80:9d:79:75:be:fe:ed:29:4b:a7:6b:1f:
71:b8:ca:bf:e5:a5:0a:03:9c:64:08:42:68:f1:a4:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:75:93:8D:41:42:1B:2B:99:B8:65:86:FD:F6:48:78:C1:31:48
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/J9B1k41BQhsrmbhlhv32SHjBMUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:67:06:ec:ef:9e:94:40:e9:4a:ef:90:e1:3c:31:58:7d:33:
d8:c2:d2:92:26:c2:64:58:11:ac:6f:12:4b:86:cc:6e:ed:ba:
e1:3c:00:0c:58:1f:d6:80:ec:9c:93:6a:32:15:9e:74:a8:fd:
85:f5:df:1f:26:3f:6f:ce:6e:7e:82:4d:87:06:0b:30:49:7c:
1e:de:7b:5c:88:0b:5d:90:bf:9c:95:6d:aa:6d:a7:94:93:0e:
b0:db:69:e1:6c:ab:a7:74:f6:ea:30:6d:55:b9:31:d3:79:7a:
33:8f:a3:07:3c:eb:63:64:a4:2b:cb:71:0b:89:fa:d4:14:7d:
23:3f:3a:e2:38:31:7c:d2:3d:62:05:e2:e0:d3:61:94:60:93:
9b:45:9d:2d:83:75:c3:ff:63:98:4a:aa:59:75:bd:56:3a:19:
80:cb:02:35:27:42:8f:31:1b:6d:2e:d4:70:f8:f7:79:a0:9c:
7d:76:78:11:d1:f9:f0:64:67:4c:2d:62:64:39:9c:1d:c4:a0:
19:0a:b0:03:9c:aa:81:b4:72:0b:02:b1:31:05:a6:38:70:d9:
f5:ff:51:73:12:e7:36:6c:58:50:d8:ae:15:8b:c5:d4:cb:85:
62:80:80:b2:26:37:38:ab:c4:5c:94:91:ca:e2:52:06:28:91:
81:8b:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:38:19 2025 by rpki-client