Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/0Jpxm12TLYGuwKbWOvFNUr8i8u8.roa
File: 0Jpxm12TLYGuwKbWOvFNUr8i8u8.roa (raw, json)
Hash identifier: ANcfO24LHjQY7MkacvK7ajaP9CLM41b1Us6OJVKkY5E=
Subject key identifier: D0:9A:71:9B:5D:93:2D:81:AE:C0:A6:D6:3A:F1:4D:52:BF:22:F2:EF
Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial: 0188A03796E06654E11285F98E4D52E98532
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/0Jpxm12TLYGuwKbWOvFNUr8i8u8.roa
Signing time: Fri 09 Jun 2023 12:52:57 +0000
ROA not before: Fri 09 Jun 2023 12:52:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206163
IP address blocks: 194.156.236.0/24 maxlen: 24
194.156.237.0/24 maxlen: 24
194.156.238.0/24 maxlen: 24
194.156.239.0/24 maxlen: 24
185.194.172.0/24 maxlen: 24
185.194.173.0/24 maxlen: 24
185.194.174.0/24 maxlen: 24
185.194.175.0/24 maxlen: 24
2a0a:86c0:5::/48 maxlen: 48
2a0a:86c0:10::/48 maxlen: 48
2a0a:86c0::/48 maxlen: 48
2a0a:86c0:6::/48 maxlen: 48
2a0a:86c0:9::/48 maxlen: 48
2a0a:86c0:4::/48 maxlen: 48
2a0a:86c0:8::/48 maxlen: 48
2a0a:86c0:3::/48 maxlen: 48
2a0a:86c0:1::/48 maxlen: 48
2a0a:86c0:7::/48 maxlen: 48
2a0a:86c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:37:96:e0:66:54:e1:12:85:f9:8e:4d:52:e9:85:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Validity
Not Before: Jun 9 12:52:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d09a719b5d932d81aec0a6d63af14d52bf22f2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:78:2d:dd:b8:f1:70:79:fb:0c:c0:f2:d0:
b3:3f:b9:73:09:d0:cf:d6:98:a0:6a:aa:a9:88:9d:
d2:2f:14:cf:2c:4b:81:04:ce:b4:af:b9:49:6d:c6:
ae:18:c7:9b:42:1e:82:cd:a3:0a:1c:a0:0d:ed:b7:
10:6e:be:a2:07:a0:af:e9:54:36:3d:4a:6e:41:b0:
2a:04:63:81:c9:35:f7:b4:a9:0a:6d:01:ed:e4:af:
02:d9:bd:04:5c:8c:5c:e8:b9:8a:29:9f:e5:bf:42:
74:39:b5:1d:57:92:da:b7:d9:b8:fd:09:0d:fd:6c:
f6:82:f7:8a:d1:b3:72:d7:9c:61:6d:81:05:6c:6e:
33:5e:c4:58:87:a8:bb:ed:70:b0:64:1c:d0:51:e8:
4b:19:44:6e:67:f5:1b:c7:f6:bf:73:bd:6d:a8:ad:
be:83:c0:61:35:fa:50:17:f4:78:d0:41:c4:ab:d3:
59:bd:b9:17:97:35:3d:3a:c5:ff:bf:6a:18:76:e2:
eb:4e:21:7a:7e:34:7d:e8:dc:a1:f0:c1:6b:a1:a6:
f6:3f:a5:1d:10:02:b5:29:7a:f1:ab:58:7f:17:46:
c7:fb:99:54:78:36:c6:32:e5:96:26:c8:61:da:57:
57:86:05:c2:53:44:06:b3:95:42:1e:10:68:cf:e2:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:71:9B:5D:93:2D:81:AE:C0:A6:D6:3A:F1:4D:52:BF:22:F2:EF
X509v3 Authority Key Identifier:
keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/0Jpxm12TLYGuwKbWOvFNUr8i8u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.172.0/22
194.156.236.0/22
IPv6:
2a0a:86c0::-2a0a:86c0:9:ffff:ffff:ffff:ffff:ffff
2a0a:86c0:10::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e2:7b:2b:f7:ee:15:00:b4:b2:a0:97:a1:f4:b8:dd:9b:51:
ef:fa:9c:34:9a:38:f9:03:3b:cd:64:c7:f7:95:39:e6:8e:ed:
61:e5:44:06:c6:43:52:72:59:8c:ef:e4:d1:33:c1:25:97:c7:
91:cf:3d:a7:21:c9:52:de:85:b7:3b:76:22:ff:00:71:e2:0f:
e9:13:9d:c9:57:9b:43:ed:e3:70:10:2f:6c:49:76:3d:b0:9a:
e8:f4:1d:85:6f:59:e4:c2:d5:16:b5:9d:92:9e:0f:b5:96:7e:
cc:73:b0:c2:17:63:b5:9a:de:f8:95:d6:9c:c9:99:2f:89:b5:
13:4c:5d:06:ca:81:cc:aa:53:bc:d0:b4:6c:39:75:ca:73:50:
0e:2b:11:59:5f:27:f0:d8:44:2c:3e:01:0f:25:f3:bc:f4:19:
fe:58:d7:2e:06:03:3d:b0:c6:6b:0f:db:9d:e6:18:f2:bf:d6:
35:23:f5:8a:68:b3:e8:cb:7d:c7:11:a8:b6:bc:ad:5d:93:af:
c7:d4:1c:1c:24:5d:e3:b9:f6:7c:ed:25:fe:07:0f:d4:0d:49:
21:53:40:73:19:a4:a9:0a:c9:1b:e9:2a:a4:3e:b4:88:5a:01:
ab:4d:f1:fe:f3:28:ec:72:6f:ca:1b:e8:33:6f:2c:e8:0f:28:
87:eb:ae:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:55:15 2025 by rpki-client