Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/Jlw4pblE8EGBJxSe8SfoOjDJDyY.roa
File: Jlw4pblE8EGBJxSe8SfoOjDJDyY.roa (raw, json)
Hash identifier: b1xi6eiSG7hEgf5hXEbncRlsN76etr6McORHKmoeye4=
Subject key identifier: 26:5C:38:A5:B9:44:F0:41:81:27:14:9E:F1:27:E8:3A:30:C9:0F:26
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 04695A93
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/Jlw4pblE8EGBJxSe8SfoOjDJDyY.roa
Signing time: Sat 01 Jan 2022 11:56:46 +0000
ROA not before: Sat 01 Jan 2022 11:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205005
IP address blocks: 185.2.144.0/23 maxlen: 23
185.121.208.0/22 maxlen: 22
2a00:1be7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74013331 (0x4695a93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jan 1 11:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=265c38a5b944f0418127149ef127e83a30c90f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:fc:4d:a8:0a:b1:a1:09:1d:b7:d4:61:85:
93:32:36:3f:1a:c3:fd:ec:22:c2:7d:e6:b8:8b:e6:
b3:cd:5b:20:db:a3:e4:c2:4c:ba:1c:f8:d6:d1:ff:
66:f9:0e:e4:5c:5b:84:f1:79:50:51:32:a8:51:10:
13:b8:76:50:a9:18:bd:be:80:ab:5c:85:d6:a8:34:
15:9e:95:ff:ff:0a:d3:ff:ef:b4:b4:1a:af:68:e2:
11:88:3f:b1:bd:41:18:73:4c:36:69:8f:07:ec:45:
86:b5:1f:94:b9:32:a5:6f:7b:32:91:81:c2:09:e7:
79:7e:c2:2b:89:5f:c8:3f:ae:83:a7:f4:ab:85:24:
e3:2c:a1:0b:5c:c7:36:da:09:5b:d1:a1:7f:17:85:
24:f7:53:80:cc:04:31:79:50:7f:e6:d3:79:3b:b2:
10:a0:6f:f7:62:84:8b:8d:71:43:36:bb:77:8e:eb:
f6:62:d3:bb:a5:1a:c2:96:87:4f:b9:b4:c6:cb:a5:
6e:ba:a4:7c:dc:35:fd:0c:93:40:5e:1e:13:b9:a9:
ee:41:8e:78:7c:65:1f:bc:95:62:c1:c2:9b:93:91:
71:08:a3:fa:6b:26:b1:cc:f1:7e:50:a8:79:53:db:
71:e9:f5:b8:d1:43:b8:bb:d4:d2:c2:d9:79:f6:0f:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5C:38:A5:B9:44:F0:41:81:27:14:9E:F1:27:E8:3A:30:C9:0F:26
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/Jlw4pblE8EGBJxSe8SfoOjDJDyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.144.0/23
185.121.208.0/22
IPv6:
2a00:1be7::/32
Signature Algorithm: sha256WithRSAEncryption
14:31:38:70:e1:2c:ab:af:55:38:4e:ec:d5:a0:4a:d9:32:8f:
fe:ed:6e:59:d7:8e:2e:eb:58:11:1e:80:08:8b:29:90:76:a6:
82:bb:a0:2d:d3:1b:8b:36:24:60:83:6f:79:41:64:9a:a8:86:
2d:82:57:4a:d3:22:50:da:60:ed:c6:f6:90:60:99:cd:d3:f2:
73:6a:a5:5e:3f:6f:44:c9:ce:49:87:7d:73:b8:f0:57:68:c1:
38:f2:fd:7d:db:d6:3c:c2:4b:ed:0f:6d:c8:ef:ac:a9:68:ad:
6e:58:6d:d1:dc:f7:a9:74:98:54:63:cd:12:14:65:63:be:ab:
7a:cc:b6:2a:f0:4c:fd:86:7c:3d:13:4c:24:97:57:0a:bc:9d:
8c:0f:be:5f:fb:67:6f:47:05:ba:9e:a7:f2:fc:53:be:d7:ab:
65:97:d9:4d:8b:77:00:93:23:e8:82:a9:e6:7f:23:7c:ad:3a:
3d:63:54:f4:ee:11:d1:8d:a3:ee:db:f3:62:98:cc:99:3f:f3:
4f:0a:b9:58:0e:17:9e:cc:0f:2a:e9:f6:42:42:03:d1:31:4c:
77:18:c5:f1:f1:cd:60:10:7c:0d:84:5a:04:92:37:f3:68:55:
8c:b0:05:ab:4d:49:c5:ee:96:5a:ea:e5:99:b2:85:39:60:ae:
48:1f:c4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:43 2025 by rpki-client