Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/jmEZA9QM_EOdc5GZbNbOpcCDJDs.roa
File: jmEZA9QM_EOdc5GZbNbOpcCDJDs.roa (raw, json)
Hash identifier: /9bfFaO4Te894K9m+8hzXiQWYjLgRIcXQEA+raGGils=
Subject key identifier: 8E:61:19:03:D4:0C:FC:43:9D:73:91:99:6C:D6:CE:A5:C0:83:24:3B
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 018571277F0307BB4495863166F4DD6E5F4D
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/jmEZA9QM_EOdc5GZbNbOpcCDJDs.roa
Signing time: Mon 02 Jan 2023 06:24:51 +0000
ROA not before: Mon 02 Jan 2023 06:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202124
IP address blocks: 185.235.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:7f:03:07:bb:44:95:86:31:66:f4:dd:6e:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Jan 2 06:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e611903d40cfc439d7391996cd6cea5c083243b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:42:3a:94:6a:35:3d:9a:c2:0a:b7:2a:79:
95:e4:e5:4c:ec:8a:e5:07:c7:cc:02:78:d1:09:02:
ba:9a:6d:8d:57:fe:e7:56:73:1e:b3:0d:d2:c2:bb:
76:99:05:e5:97:05:82:85:6c:72:21:ec:51:95:e7:
16:fe:db:2f:d4:5d:60:04:d5:de:33:7a:2d:7a:72:
56:aa:79:09:25:fc:af:57:4c:58:9d:a9:2e:8c:ff:
17:7a:42:01:ba:fe:1a:91:26:86:c6:4d:cc:d8:fe:
06:ad:16:d3:3e:de:da:11:ed:94:d4:6d:61:19:51:
38:e8:03:c7:b5:14:99:1b:b0:22:24:72:1b:43:c9:
83:a6:49:45:c9:8f:b8:d4:3e:bd:f5:2b:c6:1a:6e:
e6:53:84:69:af:0c:0a:c1:00:45:0f:a8:57:82:f3:
2c:51:17:c9:21:d5:8f:ad:1e:23:ef:fc:1c:d4:50:
1b:91:03:b4:19:9c:5f:f4:09:17:24:b7:22:43:81:
dc:b2:5f:6f:d6:62:65:70:2e:aa:d3:be:c6:4d:24:
d3:42:cb:21:15:7b:a8:45:5b:5d:ab:f2:38:30:97:
c6:ac:87:e4:d9:b2:33:ca:dc:39:96:2f:34:b6:bc:
97:3d:fa:7a:3a:73:8f:c4:c0:da:97:46:2d:ad:88:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:61:19:03:D4:0C:FC:43:9D:73:91:99:6C:D6:CE:A5:C0:83:24:3B
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/jmEZA9QM_EOdc5GZbNbOpcCDJDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:14:e7:7a:74:a3:68:ae:f6:b7:e5:40:42:b4:7f:d1:57:ac:
bf:73:49:51:58:d0:0e:04:34:5a:28:87:a8:5d:2d:1e:4b:9c:
b3:0d:60:02:de:9d:36:b3:f6:c8:19:8d:8b:57:c1:15:f1:03:
44:3f:18:1d:a5:d5:01:65:72:fe:4b:6c:f9:9b:8a:67:53:75:
ed:ac:a7:34:a2:42:0f:63:34:23:16:ca:c2:c5:c2:50:44:2a:
98:f6:5e:5c:d7:22:ff:0c:80:14:28:c8:d2:39:df:f5:93:0e:
5d:1c:a0:f6:1e:49:24:ba:da:f4:84:35:a5:ff:1f:3a:ec:34:
28:b6:08:83:c1:52:1d:39:7f:37:0c:48:84:42:2f:0e:5a:b6:
2b:5a:6e:87:3f:df:32:70:76:a1:f4:ae:e5:f6:c4:18:80:5c:
45:28:59:64:08:6b:72:be:35:bf:fb:fb:4c:3c:29:cb:38:7f:
e5:64:17:b1:bb:ec:39:23:79:0c:f3:b4:63:bf:cd:1d:cb:8f:
03:fc:81:8c:45:26:c2:cc:84:94:53:ce:5c:1c:82:71:ef:50:
b6:cd:ce:21:23:c6:bc:e6:93:07:fd:04:22:af:2c:74:5d:73:
b9:7f:d0:cd:c7:7a:00:14:ab:27:1c:e8:20:b8:f8:b2:d0:8e:
09:ea:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:37 2025 by rpki-client