Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/J_BX1GVNncxepjLxSz0VtrTv2OE.roa
File: J_BX1GVNncxepjLxSz0VtrTv2OE.roa (raw, json)
Hash identifier: Auj+XACwrCE8x00yCUsP2BRH4eirMIY/PDjFZbfY9+w=
Subject key identifier: 27:F0:57:D4:65:4D:9D:CC:5E:A6:32:F1:4B:3D:15:B6:B4:EF:D8:E1
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01877B345C98403D7D320A1C662710C0AA4E
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/J_BX1GVNncxepjLxSz0VtrTv2OE.roa
Signing time: Thu 13 Apr 2023 15:20:41 +0000
ROA not before: Thu 13 Apr 2023 15:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60257
IP address blocks: 145.255.240.0/21 maxlen: 21
81.179.96.0/20 maxlen: 20
185.24.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:34:5c:98:40:3d:7d:32:0a:1c:66:27:10:c0:aa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Apr 13 15:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27f057d4654d9dcc5ea632f14b3d15b6b4efd8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:ce:00:00:78:60:60:32:b2:47:ea:3e:f0:
00:12:61:fa:ee:b7:f0:df:19:b7:1b:c5:8a:b6:53:
1c:79:47:fc:09:6b:12:9e:db:6a:bb:f5:e6:eb:1a:
44:e5:cb:11:a5:23:7a:a3:94:e0:76:b0:20:f9:55:
72:12:bb:27:69:e8:3c:61:bd:ec:ef:1a:8d:69:9a:
ca:83:5f:3b:9c:73:ed:10:b6:41:c6:81:75:50:f0:
54:28:26:dd:ef:07:81:63:73:61:30:78:2f:d6:df:
01:f5:bb:31:47:16:ee:da:c0:16:de:de:a4:56:98:
eb:ea:77:69:bc:7a:24:4e:f9:fc:60:1e:40:b7:92:
d9:62:7e:15:5f:d9:28:d4:82:ac:0e:77:01:ab:07:
2f:39:92:b3:7e:b4:34:c9:13:fb:3c:2c:47:37:af:
eb:10:0f:dd:1e:ab:25:3d:d0:4d:87:39:52:ce:a9:
09:df:0a:ad:a7:3f:91:7c:0e:7a:fa:f0:d3:7a:6c:
d3:5b:6f:26:96:27:ca:d5:58:e1:6d:0b:e0:a0:cc:
bb:c5:12:a6:57:81:c8:d7:f2:f9:6e:40:d1:b7:cf:
5b:3b:be:74:b3:e3:19:8a:1c:b3:cc:1a:b5:f2:6a:
3e:20:7d:9d:aa:82:05:30:04:56:d3:2f:c3:3d:25:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:57:D4:65:4D:9D:CC:5E:A6:32:F1:4B:3D:15:B6:B4:EF:D8:E1
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/J_BX1GVNncxepjLxSz0VtrTv2OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.179.96.0/20
145.255.240.0/21
185.24.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:27:f4:44:64:a1:ac:99:20:43:1b:95:91:89:c4:73:e6:d5:
95:57:30:4f:d3:46:b1:68:96:3b:14:d6:61:88:50:09:0d:3c:
c3:56:e1:a7:b3:17:44:35:8e:80:99:2e:c4:4d:64:9d:2c:a0:
0b:4e:f8:35:e3:a7:42:05:00:c7:fb:70:17:5b:39:53:93:3a:
bb:06:8a:ea:16:9d:a7:37:52:42:96:04:c5:b9:db:de:23:ce:
b2:2b:8d:ce:6e:b9:67:0e:45:54:b6:e1:18:e1:ad:85:91:c2:
c0:26:6a:f0:27:69:78:8e:c6:be:1a:bd:3c:d2:06:61:f3:57:
f0:64:ae:16:4e:43:57:30:7f:9a:33:55:56:b4:43:57:1c:13:
4b:02:a0:7a:10:02:81:10:18:0a:4f:cd:3f:a1:20:99:3b:53:
6c:38:55:e8:16:e1:e3:1d:ba:13:21:31:1a:7b:39:cf:aa:d7:
11:c4:8d:78:ff:94:99:fb:f2:ca:31:da:21:01:40:9b:1f:63:
08:da:f4:35:ad:4a:a0:8d:ae:a4:2e:0b:65:cb:52:16:be:f4:
77:36:3a:4d:18:30:f0:1a:c8:e0:16:c2:aa:75:99:ce:61:66:
95:d4:fa:03:d4:13:9f:5a:6c:01:b2:ae:16:b2:43:c3:78:85:
97:f4:40:1c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYd7NFyYQD19MgocZicQwKpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjMwNDEzMTUyMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2YwNTdkNDY1NGQ5ZGNjNWVhNjMyZjE0YjNkMTViNmI0ZWZkOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZLOAAB4YGAyskfqPvAAEmH67rfw
3xm3G8WKtlMceUf8CWsSnttqu/Xm6xpE5csRpSN6o5TgdrAg+VVyErsnaeg8Yb3s
7xqNaZrKg187nHPtELZBxoF1UPBUKCbd7weBY3NhMHgv1t8B9bsxRxbu2sAW3t6k
Vpjr6ndpvHokTvn8YB5At5LZYn4VX9ko1IKsDncBqwcvOZKzfrQ0yRP7PCxHN6/r
EA/dHqslPdBNhzlSzqkJ3wqtpz+RfA56+vDTemzTW28mlifK1VjhbQvgoMy7xRKm
V4HI1/L5bkDRt89bO750s+MZihyzzBq18mo+IH2dqoIFMARW0y/DPSW8GwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCfwV9RlTZ3MXqYy8Us9Fba079jhMB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvSl9CWDFHVk5uY3hlcGpMeFN6MFZ0clR2Mk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUbNgAwQD
kf/wAwQCuRgMMA0GCSqGSIb3DQEBCwUAA4IBAQDOJ/REZKGsmSBDG5WRicRz5tWV
VzBP00axaJY7FNZhiFAJDTzDVuGnsxdENY6AmS7ETWSdLKALTvg146dCBQDH+3AX
WzlTkzq7BorqFp2nN1JClgTFudveI86yK43ObrlnDkVUtuEY4a2FkcLAJmrwJ2l4
jsa+Gr080gZh81fwZK4WTkNXMH+aM1VWtENXHBNLAqB6EAKBEBgKT80/oSCZO1Ns
OFXoFuHjHboTITEaeznPqtcRxI14/5SZ+/LKMdohAUCbH2MI2vQ1rUqgja6kLgtl
y1IWvvR3NjpNGDDwGsjgFsKqdZnOYWaV1PoD1BOfWmwBsq4WskPDeIWX9EAc
-----END CERTIFICATE-----
Generated at Tue Apr 15 01:09:39 2025 by rpki-client