Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/JULEFS9ysSLjBpM-z6dj8zqk1-w.roa
File: JULEFS9ysSLjBpM-z6dj8zqk1-w.roa (raw, json)
Hash identifier: 7iCA+bswHeeFg0ZzFxQAx3YfeoCgdqXsZuSEn9BeZxI=
Subject key identifier: 25:42:C4:15:2F:72:B1:22:E3:06:93:3E:CF:A7:63:F3:3A:A4:D7:EC
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01857227FF34346368CC43D58BBE1151D9C0
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/JULEFS9ysSLjBpM-z6dj8zqk1-w.roa
Signing time: Mon 02 Jan 2023 11:05:01 +0000
ROA not before: Mon 02 Jan 2023 11:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9199
IP address blocks: 185.57.46.0/23 maxlen: 23
2a04:7580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:ff:34:34:63:68:cc:43:d5:8b:be:11:51:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Jan 2 11:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2542c4152f72b122e306933ecfa763f33aa4d7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:f5:5b:69:b3:da:d6:ff:d3:25:06:72:ab:
75:04:3b:0c:57:c2:19:2e:38:1b:f0:6b:a7:c3:58:
be:de:84:6c:5f:b2:93:ba:73:af:fb:2a:16:fb:43:
f4:df:78:36:ef:17:7a:f4:d9:ee:1f:ec:a3:63:79:
d4:93:8e:2a:08:da:ee:5e:6d:f0:d0:fe:c0:08:31:
f2:bf:41:9c:27:32:14:b9:ca:82:6d:28:cf:15:40:
87:9f:00:99:47:35:93:4d:8b:98:91:14:b5:58:89:
f2:2d:f1:7e:c9:88:57:e3:45:a5:1b:0b:a1:98:b5:
1a:6b:6c:99:4d:63:52:48:43:3d:a7:a2:0e:d0:42:
43:37:71:bd:93:d7:30:4e:b6:4e:2f:93:90:7d:07:
14:55:df:b9:ff:79:72:c3:c7:58:ea:1e:3f:bb:c2:
c3:6d:4e:bf:fa:b8:fe:65:9b:3e:d9:68:df:0c:ab:
42:84:6d:17:3c:33:b2:06:39:1d:25:a7:33:f0:76:
2c:47:4f:42:bb:ed:7e:db:c0:a5:01:b3:f5:88:c6:
c0:98:8e:69:e8:5c:a5:7d:ca:d1:c9:20:10:4b:bf:
3c:f5:31:76:1d:75:74:0c:b5:e2:79:25:d9:82:03:
fe:e2:29:a0:73:85:21:18:9a:2c:3f:1a:ec:2f:b5:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:C4:15:2F:72:B1:22:E3:06:93:3E:CF:A7:63:F3:3A:A4:D7:EC
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/JULEFS9ysSLjBpM-z6dj8zqk1-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.46.0/23
IPv6:
2a04:7580::/29
Signature Algorithm: sha256WithRSAEncryption
40:1c:3e:e5:01:c6:90:ef:bc:b8:5c:22:23:f8:0b:b7:d5:bf:
4e:b8:30:b4:54:84:ef:5a:ee:61:71:c8:e8:10:02:fd:d3:a2:
17:de:a3:a2:4e:8e:04:51:07:33:b1:39:07:e5:b8:32:7a:94:
3f:0a:c1:15:9b:36:84:d8:b1:32:e8:c2:13:f3:22:f3:2f:3c:
03:5f:5c:a3:0f:28:46:cd:e1:b4:ba:2a:90:ab:49:fe:d2:53:
59:90:3f:7b:0d:9a:32:43:d2:fb:39:d0:73:84:4f:fc:a3:b4:
8d:97:86:37:10:cc:ba:d3:51:75:fe:cd:96:80:1e:c4:99:57:
3e:1d:65:e5:14:9a:c8:39:91:1f:ad:a3:56:59:54:9d:a8:da:
5c:a3:aa:f8:3b:23:6f:47:af:e2:bd:b4:90:ff:86:7b:f0:90:
4b:8e:51:81:e7:88:9e:09:8f:53:3f:10:09:f6:0c:ba:84:8c:
79:e7:02:b2:79:3c:e2:05:3f:95:da:b2:76:18:6d:d0:c8:72:
2b:97:fc:c0:39:91:b0:99:b9:18:02:fd:59:77:19:45:b9:92:
de:47:f7:8b:f1:00:b6:48:1b:27:0e:67:a3:7e:84:98:75:a9:
cc:42:cc:45:93:77:13:ca:e3:43:d8:27:47:52:70:7d:bb:02:
40:7c:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:41 2025 by rpki-client