Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/JR8kkppFBANpPxv8wOnRddC59hQ.roa
File: JR8kkppFBANpPxv8wOnRddC59hQ.roa (raw, json)
Hash identifier: AAsXg5L3ZuePL/njQS7R1ViBNNMzScJulSyV2TyWYNI=
Subject key identifier: 25:1F:24:92:9A:45:04:03:69:3F:1B:FC:C0:E9:D1:75:D0:B9:F6:14
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 0184A3B012555F8F531841B04713DD1BB557
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/JR8kkppFBANpPxv8wOnRddC59hQ.roa
Signing time: Wed 23 Nov 2022 08:52:15 +0000
ROA not before: Wed 23 Nov 2022 08:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34326
IP address blocks: 193.138.190.0/24 maxlen: 24
193.138.189.0/24 maxlen: 24
193.138.188.0/24 maxlen: 24
77.240.244.0/22 maxlen: 22
178.236.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:b0:12:55:5f:8f:53:18:41:b0:47:13:dd:1b:b5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Nov 23 08:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=251f24929a450403693f1bfcc0e9d175d0b9f614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:79:78:0a:e6:d9:02:94:90:e2:02:40:6d:
bf:d3:69:05:4c:88:a6:ae:95:8e:23:96:79:69:74:
e7:60:94:35:49:84:f8:42:b2:30:38:95:39:a8:dc:
37:31:6f:97:30:9a:1a:1d:85:57:14:46:99:56:9f:
38:94:8f:02:9e:f5:17:74:82:ab:f0:a3:e9:da:08:
11:03:d7:40:b9:2f:04:99:7c:91:44:e2:0c:99:8e:
12:28:8d:ba:25:1d:ef:32:4e:e2:88:e3:d5:ce:fe:
10:c5:49:e2:12:71:48:9f:0d:63:bc:6a:61:44:de:
76:bd:7c:16:69:df:c0:df:07:c7:1e:c2:58:e9:f9:
c3:70:27:3d:ff:f6:f2:87:ed:32:f9:3d:b2:9a:06:
59:4a:de:4c:ab:37:3e:38:c7:df:d4:6e:5b:47:50:
7e:79:dd:b5:e0:24:52:3e:33:be:fc:83:f5:8f:32:
94:e4:cc:5b:3a:a3:14:b9:d8:71:b5:9d:b4:0b:d4:
91:1d:30:be:b2:46:15:c3:fc:e7:bf:74:e6:ce:5d:
c3:a4:46:3d:36:94:4b:3a:d3:c0:79:41:78:1e:4a:
4f:3e:73:d6:9b:1f:d0:1b:e4:1b:fb:af:c5:2f:02:
93:5e:1a:e5:07:44:5e:3e:3a:27:34:16:2f:fe:33:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1F:24:92:9A:45:04:03:69:3F:1B:FC:C0:E9:D1:75:D0:B9:F6:14
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/JR8kkppFBANpPxv8wOnRddC59hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.244.0/22
178.236.192.0/22
193.138.188.0-193.138.190.255
Signature Algorithm: sha256WithRSAEncryption
61:9a:61:9a:29:4b:e6:59:ab:90:7e:af:e2:77:ed:f4:61:a2:
cb:58:3c:98:d6:91:9e:47:30:40:16:b7:a4:53:47:45:dc:f4:
67:79:0c:1a:02:e9:29:43:05:8c:05:2e:99:6f:1b:e3:b0:ac:
48:f0:30:39:db:e1:30:0f:ea:d5:ad:06:20:f2:39:c6:89:96:
26:96:2f:8b:99:5f:e2:b0:63:41:85:bb:32:db:7e:dc:0f:08:
12:b5:71:b4:45:33:24:a0:b5:b5:d3:fb:1e:14:ce:4d:6e:2d:
50:ce:1c:5f:6c:83:b9:ba:16:a7:05:41:d7:45:f6:34:50:2a:
ce:e9:70:7b:3a:80:13:f7:17:68:92:cf:57:a5:33:6a:f8:3f:
c7:c5:ec:99:f4:0c:ec:8a:1c:3d:8e:50:7c:a0:d9:d1:d2:88:
89:52:2c:28:5f:81:e9:61:19:be:84:6a:df:21:db:2a:b3:7d:
e0:36:26:99:99:bb:2f:06:28:9e:3c:2e:01:21:f7:9b:53:e2:
4d:10:fe:e7:02:e2:35:71:ab:14:86:4a:57:3d:3b:a1:83:82:
5b:4c:f1:8f:bd:42:f5:fb:d8:56:04:6a:83:ca:6d:11:6e:5d:
22:22:9e:94:32:59:b1:05:e4:7b:a4:75:15:3d:20:63:8f:49:
0b:f9:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:28:36 2025 by rpki-client