Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/jexxcmd42XhLXJtYK62vsufcjes.roa
File: jexxcmd42XhLXJtYK62vsufcjes.roa (raw, json)
Hash identifier: rmGfu9MBZKRlER7iRYSo7ysYkt2xj8s/ASmszCqbGqI=
Subject key identifier: 8D:EC:71:72:67:78:D9:78:4B:5C:9B:58:2B:AD:AF:B2:E7:DC:8D:EB
Certificate issuer: /CN=2b81c753b77665e7a59f8e508314f159356c228e
Certificate serial: 015AC7CD
Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/jexxcmd42XhLXJtYK62vsufcjes.roa
Signing time: Sat 01 Jan 2022 06:56:20 +0000
ROA not before: Sat 01 Jan 2022 06:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56565
IP address blocks: 91.230.251.0/24 maxlen: 24
194.0.209.0/24 maxlen: 24
91.208.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22726605 (0x15ac7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e
Validity
Not Before: Jan 1 06:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dec71726778d9784b5c9b582badafb2e7dc8deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:28:a6:69:e9:a4:3f:b2:06:a9:06:94:f9:
5f:99:3d:2f:e5:d3:77:b1:3a:0e:5d:80:9c:a6:09:
3e:b2:da:c7:98:f2:db:7a:bf:5f:59:ba:1e:b2:76:
9c:b9:dc:5d:9f:92:1f:0d:9d:78:47:04:1e:29:98:
9b:cb:95:3c:d0:24:4f:c0:34:83:3a:43:58:fc:ee:
50:b2:6a:7b:fe:7f:5b:45:7c:a7:76:01:43:d2:93:
f2:a1:02:f2:3a:0d:7d:01:cb:c6:63:06:d9:25:fc:
52:6e:bd:79:d0:e5:d8:07:b7:13:30:1d:f5:51:86:
75:ed:10:5b:98:bd:19:12:ed:3c:4a:9d:42:68:61:
c7:3c:b3:51:5f:0f:a6:05:2a:a7:89:8f:d0:5d:46:
ab:38:07:b4:b0:d6:22:02:b2:97:2b:37:40:3b:5c:
c4:ef:3e:c0:d6:9f:b4:5b:bc:10:a0:98:60:61:33:
fc:5e:a1:47:5f:41:7a:ee:28:97:0d:57:7a:25:c4:
67:64:95:f7:b3:1a:e7:89:b7:06:70:07:70:0e:0a:
0a:e3:cc:80:60:ce:e6:20:8e:dd:ce:c3:c5:85:46:
06:d5:0a:2d:3b:27:ec:7c:bb:d7:9b:f5:5a:68:f7:
51:26:d5:51:40:4d:0e:49:76:bb:5d:f6:e4:ca:9d:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:71:72:67:78:D9:78:4B:5C:9B:58:2B:AD:AF:B2:E7:DC:8D:EB
X509v3 Authority Key Identifier:
keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/jexxcmd42XhLXJtYK62vsufcjes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.238.0/24
91.230.251.0/24
194.0.209.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8a:af:73:d9:f4:4f:1d:2f:58:c7:5c:89:0e:e6:74:79:72:
41:e6:e1:8d:02:36:73:ed:c7:c4:b0:45:f3:a8:47:41:9e:9b:
ff:04:78:f6:15:e4:2c:f2:6d:17:85:3e:b4:5e:1e:3c:cc:a7:
3f:01:1b:9a:d7:77:43:7f:e5:39:a1:9d:ae:12:44:41:7c:27:
33:d7:45:c4:42:f4:3f:5b:ac:f4:ce:73:7f:14:bf:ae:86:26:
6e:c8:3e:b2:79:58:ff:8a:39:03:c1:77:87:e4:60:6d:a1:aa:
fd:a8:c4:0f:5b:1d:e7:c1:e9:6a:10:13:5b:45:ab:ef:68:00:
28:e9:43:e0:a5:b5:96:1c:c1:6c:f5:76:2c:df:da:81:10:18:
c7:28:30:c7:27:f4:7c:fb:e3:fc:94:c3:02:51:e6:38:35:4b:
6b:e2:92:74:56:d6:55:46:76:4e:a4:17:35:e8:a9:4a:23:98:
27:dc:24:90:e8:9f:cf:5c:14:53:b9:8a:bd:b3:ec:17:1f:24:
25:5e:2e:a5:22:01:b7:27:2e:2f:1d:22:bc:fb:71:1d:83:f0:
cd:92:d8:f8:71:e0:ef:c8:45:ac:50:06:0d:06:52:59:f4:af:
9f:c1:2e:c1:94:0e:f8:5b:22:cb:db:46:eb:5f:f5:07:de:11:
80:b0:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:09 2025 by rpki-client