Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/jAo9bCiRj8HCPZSjZnSpvyjB12Y.roa
File: jAo9bCiRj8HCPZSjZnSpvyjB12Y.roa (raw, json)
Hash identifier: N0B06Ivonl3unO8Rt5VlVXoStM5HFJklCGAxjP8MHyc=
Subject key identifier: 8C:0A:3D:6C:28:91:8F:C1:C2:3D:94:A3:66:74:A9:BF:28:C1:D7:66
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018C40D64F1E666245CE58C9CDBC733B8A2C
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/jAo9bCiRj8HCPZSjZnSpvyjB12Y.roa
Signing time: Wed 06 Dec 2023 20:33:55 +0000
ROA not before: Wed 06 Dec 2023 20:33:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48400
IP address blocks: 85.140.93.0/24 maxlen: 24
85.140.92.0/23 maxlen: 23
85.140.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:d6:4f:1e:66:62:45:ce:58:c9:cd:bc:73:3b:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Dec 6 20:33:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c0a3d6c28918fc1c23d94a36674a9bf28c1d766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:7c:53:95:5f:74:97:06:59:37:23:7b:ba:
13:eb:8f:88:36:0b:a5:3e:69:57:a8:b0:ba:c6:55:
1c:13:36:4b:51:64:85:5e:06:2d:4c:af:09:fd:3e:
23:5d:d4:25:7c:85:0d:94:44:67:53:07:05:e5:6a:
5c:37:76:d6:f5:a6:ef:e7:17:af:bf:94:3d:f2:39:
5b:40:95:f6:65:ae:52:1c:0e:59:6c:8f:e6:90:16:
f0:8e:ed:af:05:2a:db:3e:3c:04:ca:af:30:f3:6b:
9e:0a:2c:33:3c:f6:7d:21:53:53:0c:42:e5:e9:32:
6f:54:f4:a8:1c:93:b2:09:66:20:6e:fa:4b:d4:d8:
9f:c6:f6:ad:7f:e3:78:7f:9c:68:82:73:d0:bd:8e:
df:fb:86:6c:09:f7:d0:46:27:74:6a:f0:02:69:4e:
8c:4a:31:42:e0:53:bc:cd:a3:75:0f:63:49:4b:93:
19:d5:ee:49:22:b5:96:6e:c8:fc:6e:10:9a:f6:5c:
7f:2d:2a:38:57:89:3b:4d:00:f4:06:fd:61:e4:42:
73:dd:d9:4a:84:fc:86:52:b8:83:b8:de:f5:7f:db:
61:dc:16:73:91:e7:7e:df:53:37:d5:1c:8d:98:c8:
30:3c:64:27:86:e2:e8:fa:fa:bc:83:b3:01:1a:63:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:3D:6C:28:91:8F:C1:C2:3D:94:A3:66:74:A9:BF:28:C1:D7:66
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/jAo9bCiRj8HCPZSjZnSpvyjB12Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.92.0/23
Signature Algorithm: sha256WithRSAEncryption
10:b4:89:d0:3c:a0:a2:17:48:50:f6:47:07:41:2f:d1:9e:5e:
2d:eb:a2:ed:81:f2:6e:a9:d5:1c:d2:89:0c:59:25:c5:c2:e0:
1d:bf:ad:f5:de:9c:9e:19:ef:0a:64:aa:a8:25:d6:1e:bc:06:
04:18:0d:42:db:8d:da:45:a5:56:e7:2b:1d:46:84:7b:54:c0:
a5:10:1f:02:cf:43:79:28:85:8e:b9:94:76:81:dc:f1:34:c7:
3c:25:5c:70:0f:3a:80:54:f8:8f:ba:26:31:8e:b8:5c:12:71:
46:ad:13:0d:1d:c5:c4:26:ee:99:8c:5c:69:d2:71:be:33:91:
43:dd:8d:51:fc:a8:1b:d2:3e:1c:a3:26:ed:eb:e9:e7:91:00:
bf:b2:ab:ec:dd:4b:6a:cc:74:75:eb:76:de:3e:b7:6d:ff:b8:
47:e6:8b:f3:b7:9a:64:f6:12:ea:07:dc:e4:4c:b9:2b:df:58:
80:02:f8:56:b9:d9:29:bb:27:33:05:b9:31:10:eb:38:37:37:
9a:86:03:1c:2a:d2:9a:39:b5:ec:6e:5b:2b:0f:52:09:27:4c:
33:91:28:7b:16:b1:39:f4:14:04:f1:0f:55:c7:4d:19:76:83:
0c:67:30:e9:f1:fa:6f:42:7e:1b:bf:ca:a6:4d:a8:8b:cc:96:
ff:6d:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:45:31 2025 by rpki-client