Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/1-Jd81VA7yNKQrHWWcpnbK6M3uZM.roa
File: 1-Jd81VA7yNKQrHWWcpnbK6M3uZM.roa (raw, json)
Hash identifier: KJSLe4LxYkpBN+p5wOUdMv4G+DCB7lR0DJCydgb5M3I=
Subject key identifier: F8:97:7C:D5:50:3B:C8:D2:90:AC:75:96:72:99:DB:2B:A3:37:B9:93
Certificate issuer: /CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Certificate serial: 018572D5D805C178B8B8741AF0FBF7E74371
Authority key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/1-Jd81VA7yNKQrHWWcpnbK6M3uZM.roa
Signing time: Mon 02 Jan 2023 14:14:55 +0000
ROA not before: Mon 02 Jan 2023 14:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48258
IP address blocks: 185.254.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:d8:05:c1:78:b8:b8:74:1a:f0:fb:f7:e7:43:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Validity
Not Before: Jan 2 14:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8977cd5503bc8d290ac75967299db2ba337b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:61:02:96:6c:4c:ac:07:82:33:35:a5:19:
60:a6:27:db:dd:d6:07:fe:a3:b8:aa:98:c2:f3:e1:
2a:bf:ca:a8:8c:43:5f:1b:9b:a5:72:1c:e3:c0:49:
a9:bb:0d:b7:4c:79:0a:0d:df:74:78:cd:d1:2f:1a:
dc:12:93:32:da:9b:20:77:ed:f1:41:6b:c2:dd:be:
7c:41:b5:95:77:4a:2a:38:b0:bb:89:71:1d:e5:01:
99:df:4d:13:54:16:cc:47:69:15:9e:11:a4:8e:af:
1e:12:2a:d1:9d:b1:2e:b4:4e:22:07:a4:a5:1f:04:
9f:53:c4:7d:72:50:65:7a:80:b0:51:55:f0:20:b1:
9a:19:66:bd:be:d5:c3:8d:e1:4f:f3:6a:c3:aa:ff:
8f:c5:83:b1:a6:be:a6:07:c5:ad:9e:21:3b:2f:c6:
fb:7a:00:5c:51:56:65:c5:f6:79:23:03:78:70:15:
d3:29:10:68:5e:a6:1f:84:9e:7e:5b:34:66:3a:9b:
bb:fa:40:c9:bc:74:78:8d:cb:15:8a:f4:17:ca:2e:
a7:d7:7a:f5:e8:45:9a:c8:9d:b2:7f:de:56:c8:13:
f5:6b:7e:a3:00:56:85:b9:ce:c6:40:79:5b:43:12:
15:d1:bd:fb:4b:99:52:82:56:fa:d6:f8:6d:69:57:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:7C:D5:50:3B:C8:D2:90:AC:75:96:72:99:DB:2B:A3:37:B9:93
X509v3 Authority Key Identifier:
keyid:1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/1-Jd81VA7yNKQrHWWcpnbK6M3uZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:44:70:da:98:bb:f8:7f:5c:40:20:75:b2:00:8d:ed:8a:0e:
61:74:3f:91:c5:89:70:2a:89:8a:9b:a9:ff:a5:fc:5d:37:20:
1b:2f:91:d9:5e:8d:49:3a:fd:f5:b1:8c:4c:ad:1a:1a:db:7a:
50:46:81:50:3b:a2:e2:2f:19:18:50:7f:6f:47:6c:a8:40:54:
ff:05:18:9c:78:21:72:7c:da:da:d9:66:12:6a:df:be:37:c8:
41:95:54:09:40:47:68:25:14:36:de:9f:f8:1e:58:2f:90:92:
b5:b5:d3:10:7a:2c:21:70:6c:69:57:68:af:56:00:b6:38:df:
ae:3e:4a:2f:e6:78:bd:2a:53:d8:02:25:10:4b:7f:a4:28:36:
85:74:db:7b:7d:99:36:a2:78:e5:58:d4:89:22:29:08:83:46:
63:00:66:06:07:8c:27:4d:4d:e3:35:5d:ef:97:92:80:36:74:
b8:72:b9:4a:a2:7f:f1:a2:c6:6c:dc:e8:99:ee:75:03:56:05:
b1:70:ac:7f:f5:aa:cb:38:b2:79:dd:c1:3e:2b:23:62:af:c0:
32:9c:3c:26:a3:4c:2f:75:86:99:1a:27:d2:a0:c4:1e:85:39:
53:b6:5b:d7:eb:80:80:0b:d4:9c:4e:e1:88:8c:84:87:45:d1:
c1:58:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:57 2025 by rpki-client