Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/60l_jynt81_jOoPwHSFLxD2mqso.roa
File: 60l_jynt81_jOoPwHSFLxD2mqso.roa (raw, json)
Hash identifier: EXwh0kth3y+C057JxUHdsn2fowar4W9FoAq/FimMePM=
Subject key identifier: EB:49:7F:8F:29:ED:F3:5F:E3:3A:83:F0:1D:21:4B:C4:3D:A6:AA:CA
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 050445FC
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/60l_jynt81_jOoPwHSFLxD2mqso.roa
Signing time: Sat 01 Jan 2022 05:03:00 +0000
ROA not before: Sat 01 Jan 2022 05:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62250
IP address blocks: 185.119.165.0/24 maxlen: 24
185.119.164.0/22 maxlen: 22
185.119.166.0/24 maxlen: 24
185.119.164.0/24 maxlen: 24
185.119.167.0/24 maxlen: 24
185.119.166.0/23 maxlen: 23
185.110.252.0/22 maxlen: 22
185.110.253.0/24 maxlen: 24
185.110.252.0/24 maxlen: 24
185.110.254.0/24 maxlen: 24
185.118.152.0/22 maxlen: 22
185.110.255.0/24 maxlen: 24
185.118.152.0/24 maxlen: 24
185.118.153.0/24 maxlen: 24
185.118.154.0/24 maxlen: 24
185.118.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84166140 (0x50445fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jan 1 05:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb497f8f29edf35fe33a83f01d214bc43da6aaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:12:a9:1f:dd:48:f4:34:0b:cb:e7:93:37:
3e:ba:82:5c:81:39:aa:4c:d8:a8:6a:3c:1f:d2:29:
dd:2e:2a:3f:0a:9e:df:44:d9:b8:c9:a0:ec:65:2d:
c9:f4:5c:a9:0a:d7:bc:fa:94:01:7e:6f:51:53:63:
7f:a9:60:b7:08:1e:5d:6b:07:31:35:11:b6:d2:a7:
d1:58:81:90:5f:63:05:1c:ae:5d:79:98:38:6d:06:
51:6d:96:80:25:2f:34:aa:7e:43:6a:90:2e:28:ad:
11:87:bc:76:0c:12:34:7e:5c:5c:cc:79:28:e5:93:
8e:f0:62:2d:b6:c8:3b:fd:f6:43:fd:44:41:39:94:
a0:3b:aa:7b:ba:6a:42:d7:91:dd:b9:44:99:9d:3b:
61:d8:f3:1f:78:82:4b:89:bb:84:5b:53:84:c8:8c:
4b:c7:86:c3:8a:e0:12:74:67:db:fa:a7:59:bb:1c:
0d:13:42:96:ac:5b:97:7d:96:67:73:63:c5:a1:7e:
b7:27:e4:92:c9:af:fa:ca:bb:a5:05:ff:36:be:11:
8d:62:d3:54:4e:0a:e8:0f:d7:dd:d2:ce:37:34:f7:
73:61:fc:5a:aa:45:78:9b:48:ed:b4:01:e6:ba:c9:
60:8a:e5:e3:4c:d1:b9:50:8c:ed:54:2a:b6:1d:c4:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:7F:8F:29:ED:F3:5F:E3:3A:83:F0:1D:21:4B:C4:3D:A6:AA:CA
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/60l_jynt81_jOoPwHSFLxD2mqso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.252.0/22
185.118.152.0/22
185.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:13:c8:82:51:f6:29:b4:77:56:e0:b2:82:12:63:a7:cf:0e:
29:5c:de:b2:c8:f4:f1:8b:6f:a5:a6:59:67:ba:87:a7:fa:bd:
e4:81:f5:30:1b:50:1d:b7:3b:d0:35:aa:fe:18:26:c9:19:2c:
c1:d4:79:92:d3:c8:59:bc:cd:93:2d:8c:1d:49:64:a5:91:d3:
8b:b2:54:5c:3b:5c:73:6e:bb:1d:17:ed:9c:66:0c:9e:cd:bf:
03:09:05:71:07:6b:22:82:61:61:d6:5f:3e:c0:e2:9e:8a:00:
68:74:51:50:0b:ce:49:9a:52:e7:e9:49:52:55:26:44:c2:37:
be:21:01:0a:19:38:cc:6e:f1:50:3a:ac:33:c4:6e:34:6b:8d:
cb:03:96:bc:22:98:cd:19:a2:9a:bd:8c:1d:c3:1a:00:68:4d:
b0:68:e7:4e:6b:47:fd:0d:d5:43:fd:f7:1e:72:73:ef:ec:e0:
94:59:1c:50:8d:a8:a3:c4:02:ea:7d:3c:f6:8d:63:a6:72:ce:
45:44:fd:5d:27:2f:1e:95:7d:8d:cd:0c:04:21:0f:71:c6:94:
cf:3a:4c:93:8d:7f:b9:f5:94:a2:ef:02:94:46:cd:68:bf:24:
b8:3e:41:d5:3d:53:45:a2:2a:0f:da:78:f3:52:3a:78:fb:93:
57:33:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:56 2025 by rpki-client