Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/jYJdOp6k5OaxwJQsMD_7vAOpQM8.roa
File: jYJdOp6k5OaxwJQsMD_7vAOpQM8.roa (raw, json)
Hash identifier: aPCTrdF5EdOCK0zh0lNIH2PQRu/l8JG63wkZetM/R7c=
Subject key identifier: 8D:82:5D:3A:9E:A4:E4:E6:B1:C0:94:2C:30:3F:FB:BC:03:A9:40:CF
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 0185715E5F94C9691B10C9616418329454BA
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/jYJdOp6k5OaxwJQsMD_7vAOpQM8.roa
Signing time: Mon 02 Jan 2023 07:24:48 +0000
ROA not before: Mon 02 Jan 2023 07:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6855
IP address blocks: 185.152.28.0/22 maxlen: 22
2a07:7d40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:5f:94:c9:69:1b:10:c9:61:64:18:32:94:54:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Jan 2 07:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d825d3a9ea4e4e6b1c0942c303ffbbc03a940cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:67:c0:09:05:0c:56:7c:5e:ce:b3:23:75:
42:9b:d9:bb:cb:1a:c6:77:7a:c1:9f:3a:64:5f:34:
4e:2a:e3:30:97:83:b6:13:33:40:d4:6b:be:aa:d5:
ec:47:4f:17:43:09:9a:06:e7:0b:e4:8f:af:87:b1:
00:26:f8:00:e6:2f:30:52:ad:ae:a9:c8:45:1d:58:
95:a5:60:a7:a3:13:53:42:b7:03:52:99:5e:41:4b:
98:fb:83:f9:17:5a:61:98:95:6f:40:00:c3:ce:8a:
b4:1e:26:09:d2:b1:57:8e:c3:2f:e4:66:5d:8f:f4:
4b:58:d2:9e:58:ba:93:59:38:18:63:65:fa:f0:12:
c4:f1:1c:34:16:c5:55:d0:ba:7a:72:eb:7b:50:90:
e8:d5:42:c1:29:26:96:a9:71:ea:8e:79:f1:91:84:
70:1d:e1:ce:70:77:b0:2e:1e:95:be:54:cb:66:3c:
5f:a0:e0:33:14:e2:b9:a2:18:bc:be:59:d2:13:75:
41:49:1d:9b:61:0d:39:c1:15:20:47:17:47:ac:2e:
ed:c1:3e:22:47:ab:8e:9f:45:55:d9:f3:15:23:82:
4b:ce:dd:91:58:d4:82:f7:8a:f7:37:c8:50:5e:74:
2d:d2:89:a3:d5:60:ed:0f:5c:c5:99:a1:ab:95:45:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:82:5D:3A:9E:A4:E4:E6:B1:C0:94:2C:30:3F:FB:BC:03:A9:40:CF
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/jYJdOp6k5OaxwJQsMD_7vAOpQM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.28.0/22
IPv6:
2a07:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
ad:ba:bb:86:02:bb:d9:e5:4a:e7:0b:43:b1:e5:34:35:44:4b:
6e:97:76:56:d5:d0:c8:04:a3:9e:f0:e7:d0:e0:a6:e3:a4:2f:
22:f4:d0:f5:25:ac:fd:21:b0:74:f6:45:88:49:f1:a2:ca:78:
a6:9a:6b:c4:db:db:e5:8a:6e:6d:cd:d2:b2:1b:04:f0:e6:2b:
97:8f:9a:9c:29:00:e6:64:98:67:d8:ed:1a:ad:ab:d7:77:6d:
ab:b2:86:77:da:79:cb:6f:9d:37:22:62:40:21:37:0c:21:f7:
6a:be:ce:19:7f:26:e9:12:12:32:de:fd:5c:c0:de:3e:87:61:
d8:f2:b3:8c:35:ea:4f:ef:67:9b:4a:6f:a9:f5:2d:03:01:b7:
94:e9:e9:d4:db:3e:a9:42:2c:d2:a2:c8:8d:09:03:a4:fe:0f:
f8:02:d9:70:d7:a6:41:9f:df:6e:bf:53:2a:dd:72:ba:fe:50:
fb:a0:b9:f4:3d:0a:c5:ce:6d:80:c0:89:3f:1e:d6:e6:63:53:
74:23:0b:ca:2c:f0:df:dc:bf:39:8a:5a:06:ec:ac:ce:3a:b7:
00:c3:c3:cb:76:bf:32:30:96:c0:9e:38:c7:df:f1:16:cc:3a:
b3:78:58:e0:80:17:df:77:8d:99:bc:56:c9:e5:89:4d:e6:16:
6d:26:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:15 2025 by rpki-client