Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/yQJ9Zc6KMkhYQE94ADwVabX3ED4.roa
File: yQJ9Zc6KMkhYQE94ADwVabX3ED4.roa (raw, json)
Hash identifier: +s2fJ4d631DDoJeO96XaKbFzOvd+zeFDmoTQ7pD6SaU=
Subject key identifier: C9:02:7D:65:CE:8A:32:48:58:40:4F:78:00:3C:15:69:B5:F7:10:3E
Certificate issuer: /CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Certificate serial: 096E28FD
Authority key identifier: 24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/yQJ9Zc6KMkhYQE94ADwVabX3ED4.roa
Signing time: Sat 01 Jan 2022 06:55:29 +0000
ROA not before: Sat 01 Jan 2022 06:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51569
IP address blocks: 185.159.55.0/24 maxlen: 24
185.159.52.0/22 maxlen: 22
185.159.52.0/24 maxlen: 24
185.159.53.0/24 maxlen: 24
185.159.54.0/24 maxlen: 24
46.20.82.0/24 maxlen: 24
46.20.80.0/20 maxlen: 20
46.20.83.0/24 maxlen: 24
46.20.84.0/24 maxlen: 24
46.20.85.0/24 maxlen: 24
46.20.80.0/24 maxlen: 24
46.20.81.0/24 maxlen: 24
46.20.89.0/24 maxlen: 24
46.20.90.0/24 maxlen: 24
46.20.91.0/24 maxlen: 24
46.20.86.0/24 maxlen: 24
46.20.87.0/24 maxlen: 24
46.20.88.0/24 maxlen: 24
46.20.92.0/24 maxlen: 24
46.20.93.0/24 maxlen: 24
46.20.94.0/24 maxlen: 24
46.20.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158214397 (0x96e28fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Validity
Not Before: Jan 1 06:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9027d65ce8a324858404f78003c1569b5f7103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9e:07:36:03:b4:a3:65:52:4d:9f:26:f3:ec:
70:02:af:9d:15:d2:bb:b8:a9:bd:c4:6a:06:2d:71:
91:91:22:09:77:14:65:2e:f9:51:71:1c:45:9f:d6:
84:b8:63:8b:66:41:d7:05:70:37:b6:9b:9b:b1:fc:
e7:5a:bc:b9:4b:e6:a4:8a:48:ae:46:ab:dd:d9:e6:
73:c7:a8:e8:6e:a3:e8:2a:8b:d5:a6:d8:1c:d7:fc:
ad:fd:d3:20:59:18:4e:36:ed:f7:f6:00:89:52:96:
11:d8:1a:62:11:c0:49:0c:34:40:5f:bf:97:f4:b6:
df:f4:6c:4e:9a:44:26:26:e0:60:d8:0b:d5:2a:a6:
60:67:15:82:b1:a1:11:e3:d4:b5:3e:c3:ce:42:42:
a3:3c:28:de:f5:bc:76:04:f4:72:d5:3c:a0:a2:2a:
df:db:9e:bf:38:4a:09:de:40:e2:5c:82:64:5c:c6:
fa:cd:07:8a:b3:10:1d:82:04:ab:a9:90:60:3a:5e:
42:64:31:79:7a:84:fd:78:13:ee:56:f3:cd:4b:aa:
d0:08:00:f7:65:e2:62:2a:76:54:e2:8c:23:dd:5d:
78:66:d6:cc:39:0c:c5:f6:15:33:a0:b4:03:a7:6a:
bc:b5:0e:83:c2:29:5f:0d:07:ab:81:dc:49:dc:4e:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:7D:65:CE:8A:32:48:58:40:4F:78:00:3C:15:69:B5:F7:10:3E
X509v3 Authority Key Identifier:
keyid:24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/yQJ9Zc6KMkhYQE94ADwVabX3ED4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.80.0/20
185.159.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:84:08:2e:dc:d3:90:40:03:bb:77:47:e2:9c:18:4e:f9:c9:
e4:b1:65:2e:cb:30:cb:fc:60:7f:ff:14:2a:8d:29:f9:e9:c6:
49:62:72:3a:ac:c9:52:83:03:36:bf:13:49:2d:0c:b0:73:f5:
b7:b4:e6:37:36:ce:d1:04:dc:d3:0c:c7:ae:80:90:76:16:3a:
67:78:a0:4f:10:a3:99:37:f5:66:72:9f:4f:5f:50:1b:fe:ea:
0a:30:0d:a3:d4:1f:cf:b2:53:2c:0a:49:7e:50:2d:44:41:0a:
c0:df:b4:9a:9c:9c:1a:ae:87:23:c6:d0:8f:a4:2d:97:59:fd:
92:92:c0:9c:3d:d9:d3:10:36:cd:41:42:67:14:d0:b4:e9:dc:
7d:d3:30:d0:1d:61:5b:84:4d:97:f7:c7:53:9c:98:52:8c:62:
8b:18:24:25:3b:25:50:0c:e2:e5:7d:23:9c:0d:78:72:96:e5:
51:be:79:c2:1b:2b:d2:5e:97:ba:df:d7:c7:c1:e7:e8:57:70:
0e:f9:eb:51:6c:29:a2:66:05:5e:ae:ec:25:0c:0d:b7:95:c0:
7e:2e:fd:d0:1e:86:7e:6c:fb:83:17:61:26:44:69:77:35:66:
15:a4:eb:74:37:4f:26:8c:ee:df:ca:f2:ba:05:50:94:2c:14:
a3:08:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:04 2025 by rpki-client