Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/jHIYpM_BlYtsRyMdHzz6xmsvZ3Y.roa
File: jHIYpM_BlYtsRyMdHzz6xmsvZ3Y.roa (raw, json)
Hash identifier: W1KSfC693JZDd+ttsxntP1MZedE9lkFp/0ApZWd9fOo=
Subject key identifier: 8C:72:18:A4:CF:C1:95:8B:6C:47:23:1D:1F:3C:FA:C6:6B:2F:67:76
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 0559DAAC
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/jHIYpM_BlYtsRyMdHzz6xmsvZ3Y.roa
Signing time: Sat 01 Jan 2022 13:02:24 +0000
ROA not before: Sat 01 Jan 2022 13:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13287
IP address blocks: 185.127.128.0/24 maxlen: 24
185.127.131.0/24 maxlen: 24
185.127.130.0/24 maxlen: 24
2a06:c980::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89774764 (0x559daac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Jan 1 13:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c7218a4cfc1958b6c47231d1f3cfac66b2f6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:72:b0:4e:3e:ec:74:80:b0:97:19:72:69:
dd:25:8d:e2:25:0d:19:f7:20:2b:d7:b7:78:7a:54:
4d:f4:c9:65:c8:67:a5:12:4e:6d:26:09:c9:cc:92:
51:bf:c1:f5:de:a4:f7:d1:4d:08:cc:eb:8b:1a:d7:
52:61:3d:94:6c:54:44:d9:9e:f7:fd:fe:33:e6:a7:
77:24:53:18:68:ff:01:d6:43:ac:c5:1a:96:b0:7a:
e1:c9:56:2f:0e:d8:89:8d:2d:c7:d9:37:76:1f:78:
2e:24:3c:6f:58:cf:f6:5b:1e:90:a3:40:73:97:83:
69:bd:ba:21:1b:c9:4b:82:68:86:d3:87:4e:19:4f:
6b:d6:1a:62:8d:d6:fa:d4:1b:b8:01:da:57:74:23:
b4:ab:f8:e6:b0:67:12:6f:65:f5:f7:60:63:d3:26:
7b:e7:87:ce:8a:a5:66:95:cc:21:4e:75:24:79:1f:
6b:25:7e:c3:5a:91:94:87:61:19:16:bd:89:af:fc:
e5:bd:95:bf:f5:8e:e8:0a:6e:89:3d:8d:27:35:69:
df:07:96:21:43:23:37:ec:81:7a:34:8b:af:89:75:
17:b6:f7:a4:47:93:23:f5:c6:ba:60:bf:be:a8:f0:
02:de:4f:8b:04:68:a6:7c:11:fd:cb:40:cc:27:ef:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:72:18:A4:CF:C1:95:8B:6C:47:23:1D:1F:3C:FA:C6:6B:2F:67:76
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/jHIYpM_BlYtsRyMdHzz6xmsvZ3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.128.0/24
185.127.130.0/23
IPv6:
2a06:c980::/29
Signature Algorithm: sha256WithRSAEncryption
71:c6:26:ff:f0:71:ba:4c:66:f5:55:3b:b0:4b:a1:be:a1:76:
b4:33:9b:ac:60:d2:6f:c4:ed:e7:c8:d0:5c:95:da:87:f9:d4:
3f:a7:02:98:59:9b:99:d8:c6:db:43:e1:c8:fd:f6:01:79:ee:
3b:00:cf:e3:4a:73:e3:85:81:8f:e8:f4:6b:b9:6c:7f:6c:ad:
99:64:7f:c8:31:d8:96:a7:4e:24:44:ec:93:9f:c0:2d:43:5f:
77:67:bf:03:53:f0:c1:be:aa:59:fc:ed:09:a2:58:a3:ba:30:
f8:dd:24:35:68:14:ef:a7:01:32:f2:5c:fb:5f:34:fd:b3:62:
b1:c1:13:b8:13:e2:aa:cc:64:c4:3f:d3:3d:9b:4a:0e:26:7e:
54:fa:e9:c6:cb:5b:9d:5b:40:3a:67:8e:14:95:ed:a2:ef:1d:
be:29:e6:e3:e9:d5:de:2d:a8:4a:29:02:df:d3:8c:eb:ed:87:
0e:fe:59:e7:c2:57:db:45:8c:55:58:a9:37:b8:f7:1a:f7:0c:
60:13:5f:88:2b:50:45:c0:4c:11:73:3c:1a:bf:7d:f7:ba:68:
ad:fd:14:8c:58:ee:71:9a:fe:91:da:42:0f:ce:88:01:84:ab:
3c:67:8a:76:45:43:d1:71:1f:38:1f:2b:23:ac:27:13:df:d3:
b2:aa:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:53 2025 by rpki-client