Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/JYL48yXjTfWkTPVDRz0LnpLR6q4.roa
File: JYL48yXjTfWkTPVDRz0LnpLR6q4.roa (raw, json)
Hash identifier: e+RbFMQRMpTXm5mxb5vlSwlzOvBGe3/sMkfLSZXe9C0=
Subject key identifier: 25:82:F8:F3:25:E3:4D:F5:A4:4C:F5:43:47:3D:0B:9E:92:D1:EA:AE
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 0185584518FFF5841E38CDE80394D87269FB
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/JYL48yXjTfWkTPVDRz0LnpLR6q4.roa
Signing time: Wed 28 Dec 2022 10:26:41 +0000
ROA not before: Wed 28 Dec 2022 10:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41960
IP address blocks: 87.239.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:45:18:ff:f5:84:1e:38:cd:e8:03:94:d8:72:69:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Dec 28 10:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2582f8f325e34df5a44cf543473d0b9e92d1eaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:1c:ed:b0:f2:7a:d2:00:3e:b8:f1:26:b1:
1a:52:da:6a:75:18:0a:e2:3c:54:14:9d:48:9f:89:
58:f9:5e:0e:06:62:92:02:0f:04:7d:8d:45:59:ec:
75:30:63:fb:ce:94:9b:fa:53:47:17:79:92:78:25:
51:8f:e3:ad:67:08:7f:f6:bd:b5:9f:7c:c9:6b:8f:
c9:e9:92:a6:5a:ac:c3:44:5d:49:3e:cf:cb:82:6c:
e1:fd:cf:d5:f4:4b:2f:e6:ce:e0:12:cf:7c:bc:90:
71:9c:ae:48:a1:fe:fa:72:f3:1c:0e:bd:9c:6a:3c:
f5:19:8b:c3:81:ed:84:3e:54:74:99:25:e1:00:d3:
dc:e3:3b:82:71:29:31:4e:e9:3c:03:c9:03:f7:ee:
ed:23:d7:2c:ab:34:6e:f3:e0:70:50:d1:dd:78:9d:
90:92:0f:3f:61:c9:01:7e:2e:0e:d0:fc:24:8d:d3:
e4:86:f5:bf:19:e8:fd:bd:74:d5:80:f6:7e:7a:62:
b3:ae:31:fc:b6:55:82:1d:97:2b:77:62:d9:6d:b2:
04:78:ef:65:ba:a5:5a:bc:55:4f:29:41:de:bc:46:
e6:3e:3b:00:e6:de:fc:64:70:69:03:87:4c:16:ab:
cf:ce:51:f7:29:bf:8b:1a:b5:0a:cc:45:b7:cc:a7:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:F8:F3:25:E3:4D:F5:A4:4C:F5:43:47:3D:0B:9E:92:D1:EA:AE
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/JYL48yXjTfWkTPVDRz0LnpLR6q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.96.0/22
Signature Algorithm: sha256WithRSAEncryption
80:97:ed:65:6f:ff:b5:a2:4b:13:11:81:08:b3:e6:e3:e3:b2:
28:8a:7d:bd:70:8e:5d:24:be:62:36:52:90:ab:8d:b4:ed:e0:
6d:48:cb:82:93:a3:ea:15:20:1d:31:6b:28:4c:e2:7b:1b:de:
6c:8d:9e:88:85:26:c7:bf:e2:77:0e:e3:de:af:b6:b5:c7:7e:
a0:3a:72:da:7b:22:f2:8d:54:6b:17:60:59:e4:03:3d:19:11:
25:5b:a7:2c:99:c2:aa:94:2b:d7:2b:a6:70:9d:71:c1:33:2f:
fd:ff:4e:38:07:6c:f4:00:e1:bf:bd:17:f3:48:84:b5:e2:d8:
1d:c5:df:9e:1b:8e:a7:4b:3f:3e:1a:70:86:81:3b:09:10:67:
cd:64:3b:56:7a:dc:1e:84:cc:ed:85:cd:b6:94:41:e6:85:43:
cb:23:c3:93:ef:59:c5:dc:8f:50:ff:2a:59:64:63:8d:9e:06:
88:38:47:c6:be:b8:45:b6:89:e2:50:c3:11:38:0b:20:e8:2e:
e8:ff:cd:64:06:f4:f7:44:f6:8d:e6:ca:8c:26:ce:97:d0:31:
cd:7b:90:30:5b:a0:bd:37:2b:53:d9:6e:42:16:f1:4c:8f:2c:
51:20:8c:a1:07:c8:3c:dd:d2:ae:16:02:3c:d4:7c:d3:8b:45:
c0:9c:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:27 2025 by rpki-client