Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/JmK-Fuzlx_SHssyQIcbDkSVeBk8.roa
File: JmK-Fuzlx_SHssyQIcbDkSVeBk8.roa (raw, json)
Hash identifier: A8Na5OZjUGbaocVBlEVWvXOB81oyjmgM1zAakmmc3nk=
Subject key identifier: 26:62:BE:16:EC:E5:C7:F4:87:B2:CC:90:21:C6:C3:91:25:5E:06:4F
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 01856EA6AA016DCF1BADAC51C0B826078355
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/JmK-Fuzlx_SHssyQIcbDkSVeBk8.roa
Signing time: Sun 01 Jan 2023 18:44:54 +0000
ROA not before: Sun 01 Jan 2023 18:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3352
IP address blocks: 185.193.172.0/23 maxlen: 23
185.193.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:aa:01:6d:cf:1b:ad:ac:51:c0:b8:26:07:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Jan 1 18:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2662be16ece5c7f487b2cc9021c6c391255e064f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:ea:9a:ac:6a:5e:60:5a:e7:aa:b9:2f:46:
ec:ed:ae:a3:e1:41:56:37:48:33:27:f3:12:aa:a1:
8c:46:ad:c4:e2:af:91:b2:21:0a:34:b2:09:d8:f0:
0a:ec:d8:85:5b:88:87:5d:a2:4a:23:40:d6:f7:c4:
27:12:74:63:cc:cb:bb:69:6d:8b:22:dc:cb:d3:5d:
f8:05:4d:ae:d7:8a:12:04:da:8f:f7:4f:7c:80:96:
26:0b:4a:d1:2a:a8:ef:9f:4f:35:23:18:e8:1a:7f:
67:49:23:d4:45:96:bd:2b:c5:0d:12:bc:27:63:c7:
ad:98:2d:b5:eb:73:36:60:dc:b8:0b:27:8f:65:73:
a0:d1:28:d7:8a:94:78:23:35:0a:39:9d:c2:36:61:
87:10:23:0d:85:43:6b:1d:b7:f8:00:88:a6:2c:5a:
d6:7a:79:e4:2b:36:7f:a4:cc:e1:79:1e:b6:0d:68:
f0:66:f7:20:28:12:6f:8c:89:85:72:82:18:4f:cb:
9d:3e:3f:fa:ca:9b:f4:97:a3:64:da:19:81:c8:5e:
b0:38:31:7a:eb:f6:b4:9a:29:c3:14:b7:1a:5b:19:
cb:ea:14:05:d6:71:a2:2b:27:fc:51:ab:6f:1a:12:
ef:56:1e:5b:76:b4:d9:bb:b8:7e:18:ec:2a:7d:d5:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:62:BE:16:EC:E5:C7:F4:87:B2:CC:90:21:C6:C3:91:25:5E:06:4F
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/JmK-Fuzlx_SHssyQIcbDkSVeBk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:82:b4:4f:fc:4b:1e:a5:09:26:0e:0d:dc:4c:9a:fc:38:e6:
77:c7:bf:b9:42:c5:1a:7e:c8:75:7b:27:fe:7b:99:be:ce:c3:
3e:7d:63:2d:ed:78:3d:a4:10:7b:17:3f:f1:eb:20:4b:a7:a4:
aa:21:09:d2:ae:56:e7:22:7b:31:3e:a5:b1:6f:c9:4f:25:91:
4b:52:fe:e8:e3:cb:3f:7b:63:7b:c1:82:0e:48:df:23:00:91:
98:80:9d:09:c0:03:7e:d6:78:6f:c5:71:4a:18:ec:47:e0:0b:
ab:29:cf:c6:82:db:0d:07:7a:c8:7c:27:d2:53:a8:a0:70:bd:
e4:f1:07:2f:d7:e7:29:20:0c:e0:f6:ff:48:b2:15:27:d1:80:
b1:10:25:de:d7:25:16:52:5f:6f:03:0f:71:2e:ee:cf:88:85:
48:07:5f:5a:e6:5a:ba:44:ad:67:b6:19:e3:e2:f9:02:d2:70:
eb:66:62:ae:0f:bf:0e:52:67:e1:81:1e:53:3e:3f:f6:c7:74:
27:b1:ba:18:1e:db:c6:47:09:02:0d:a5:7d:25:6f:04:97:a8:
26:64:a2:10:d1:87:3e:35:d6:f2:e1:1b:9f:65:df:b8:a8:66:
ed:83:78:8c:36:f8:f9:a2:82:a7:66:13:4e:a5:cc:7b:77:33:
2d:01:46:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:08 2025 by rpki-client