Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/J5-bcs7EKR9QpoKBUi3Y7wY8ekU.roa
File: J5-bcs7EKR9QpoKBUi3Y7wY8ekU.roa (raw, json)
Hash identifier: 5/LcJVcndfR3D3XOJ3pMkMu6uT/Hgzk/8hIQdj5F6so=
Subject key identifier: 27:9F:9B:72:CE:C4:29:1F:50:A6:82:81:52:2D:D8:EF:06:3C:7A:45
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 018964C976BECFCEA014428D586E392BCEED
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/J5-bcs7EKR9QpoKBUi3Y7wY8ekU.roa
Signing time: Mon 17 Jul 2023 16:57:51 +0000
ROA not before: Mon 17 Jul 2023 16:57:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50472
IP address blocks: 185.106.84.0/22 maxlen: 24
195.54.164.0/23 maxlen: 23
2a02:8000::/32 maxlen: 32
2001:67c:20a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c9:76:be:cf:ce:a0:14:42:8d:58:6e:39:2b:ce:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jul 17 16:57:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=279f9b72cec4291f50a68281522dd8ef063c7a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:fd:cb:3e:a8:3c:db:1d:8b:10:ea:04:b1:
6c:95:6d:22:ee:a4:22:ce:cd:81:af:30:93:45:6e:
6d:42:fd:7d:62:e3:10:4b:09:d5:97:8b:ec:7d:53:
8d:5f:71:6b:44:ce:8e:7b:cf:0c:9f:54:85:df:fc:
a5:3c:c0:4f:36:d5:26:e7:ba:ea:fe:7d:f2:a0:3d:
1e:3d:8a:33:a9:b3:d2:7e:38:12:38:c6:18:c2:d9:
c5:16:c3:02:6e:46:42:dc:a5:78:f1:37:4a:ba:4d:
ec:30:fe:d2:55:9e:bf:fe:fc:e2:eb:54:5c:5c:d4:
34:da:76:8c:79:eb:1f:dd:45:26:5d:cb:8d:84:f5:
60:b8:85:6b:18:65:91:30:87:77:9f:31:37:bb:e7:
e1:a2:0d:ef:b0:86:6a:77:64:32:9f:40:3c:16:c6:
aa:4f:55:d1:3f:cd:58:c5:b1:6b:8a:27:ed:3a:aa:
d0:5b:85:32:33:52:de:fd:ce:db:70:8d:7f:b6:a0:
47:d2:16:70:ab:cd:89:de:93:97:16:78:c5:dc:9d:
54:52:24:57:8e:f6:c8:80:5a:8f:69:18:c2:04:f8:
0e:c5:bb:1a:db:b6:3b:13:ce:1b:06:e7:79:0d:fb:
d6:1f:4d:ba:ab:9e:ee:b2:07:af:e0:a4:c3:bb:86:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9F:9B:72:CE:C4:29:1F:50:A6:82:81:52:2D:D8:EF:06:3C:7A:45
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/J5-bcs7EKR9QpoKBUi3Y7wY8ekU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.84.0/22
195.54.164.0/23
IPv6:
2001:67c:20a0::/48
2a02:8000::/32
Signature Algorithm: sha256WithRSAEncryption
39:11:a8:c4:c6:f7:d9:89:1b:02:29:1f:93:fb:aa:4c:11:16:
3b:40:0e:d5:f6:12:66:63:43:d6:03:8d:a8:49:98:af:a3:ce:
d9:d0:50:6c:de:01:65:f5:34:77:73:b9:24:4f:0e:3f:b9:48:
ba:ec:fb:5f:d9:30:81:75:f6:18:83:80:f1:78:d4:33:c8:e1:
ad:76:69:83:ec:5e:93:aa:57:66:59:a8:ff:1d:da:19:4d:9d:
18:4c:4d:b6:1b:31:d3:82:bd:22:2f:df:d4:8b:4a:a1:02:23:
5c:91:ce:bf:22:d1:e4:80:3b:10:ab:fb:ca:48:ce:92:40:b2:
76:5c:cc:8a:5f:a8:a0:5e:68:dd:61:05:18:50:c1:a6:23:0d:
85:96:2c:6b:1c:75:d2:a6:13:59:b0:6a:b5:70:8d:b2:62:3f:
ce:af:5d:43:5f:94:03:de:fb:7e:fe:e1:66:83:a6:56:eb:a9:
6b:98:4e:ee:d1:b0:9a:cc:15:b1:e7:31:f5:ae:35:72:4a:e4:
c9:ce:8e:ad:df:c2:fe:50:dc:88:30:3f:0e:87:23:97:02:90:
08:fe:5f:4c:72:8c:67:d9:ab:9a:ad:e7:f0:14:f8:cd:82:e6:
33:12:2d:d3:64:9e:7e:02:f6:2f:56:8c:65:48:83:78:8c:27:
5e:fa:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:12:01 2025 by rpki-client