Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/jmJOxNdzlCDIDqhzjt9tK2V1MOE.roa
File: jmJOxNdzlCDIDqhzjt9tK2V1MOE.roa (raw, json)
Hash identifier: GhD2NgDT8j6cxB1glWTge2NpuJAkJqNo6QMg0/p0P+I=
Subject key identifier: 8E:62:4E:C4:D7:73:94:20:C8:0E:A8:73:8E:DF:6D:2B:65:75:30:E1
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: D16EC0
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/jmJOxNdzlCDIDqhzjt9tK2V1MOE.roa
Signing time: Sat 01 Jan 2022 04:53:43 +0000
ROA not before: Sat 01 Jan 2022 04:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212552
IP address blocks: 185.110.191.0/24 maxlen: 24
193.163.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13725376 (0xd16ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jan 1 04:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e624ec4d7739420c80ea8738edf6d2b657530e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:cc:27:44:5f:1f:dd:65:97:43:b9:62:d0:
aa:d1:9b:26:aa:5e:85:74:0a:b7:d2:6c:7c:c5:d3:
ad:39:dd:43:b6:9f:da:ea:9d:fe:d9:2e:39:79:e3:
cd:f6:d9:5a:bc:49:5c:a8:b8:d8:dd:df:58:ad:2c:
65:91:fb:a1:64:e8:01:02:a8:c9:11:68:c6:5c:6c:
33:57:4c:2e:94:0c:92:ac:ad:26:64:89:a2:48:f9:
ac:f5:a5:d8:88:85:da:3e:28:d5:52:0e:2f:a8:2e:
49:94:9b:ce:48:52:d2:d6:88:2b:56:19:d1:71:6c:
8c:2e:10:91:7f:88:82:fc:54:bd:2d:8a:14:a3:8a:
28:d6:dc:60:ad:2f:ce:5d:15:5c:9d:66:67:77:00:
ab:95:1e:ac:f4:ba:17:7f:ac:65:1f:e2:64:00:a6:
49:e4:7a:c9:c3:6c:5c:64:2c:03:8e:84:59:76:3a:
a3:dc:50:23:65:3e:c0:4e:12:23:f7:a1:43:8d:43:
f9:72:c3:b8:31:1a:10:5c:14:20:ca:1b:61:0f:34:
66:4c:7f:71:3b:74:8f:dc:c0:13:09:4d:76:36:0a:
42:f9:89:4b:01:83:1b:ab:ce:16:3e:19:bb:ce:6c:
93:82:8f:98:ba:c8:7e:fa:0b:fc:96:5c:d3:20:c9:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:62:4E:C4:D7:73:94:20:C8:0E:A8:73:8E:DF:6D:2B:65:75:30:E1
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/jmJOxNdzlCDIDqhzjt9tK2V1MOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.191.0/24
193.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:67:03:64:4c:a9:0c:4d:2c:87:00:f1:d8:58:e0:1c:11:e5:
f4:76:2e:76:54:fd:a6:41:96:dd:a1:42:c7:fe:c9:6a:1b:ea:
ad:92:f4:c7:6b:8e:64:75:57:fb:56:07:5c:1b:1d:7b:01:07:
d2:61:53:e4:cf:11:a7:5b:b0:f8:9e:51:86:d0:44:ac:3d:39:
91:7e:7b:71:a6:00:9f:62:01:fc:62:0b:7a:7c:14:b4:07:9b:
13:d4:79:21:5b:fc:5b:3b:1e:25:8a:47:d9:22:2b:f1:74:5c:
d2:06:84:9c:4b:4f:ab:19:22:72:74:c4:22:32:2d:58:7c:f0:
b6:a8:70:bd:95:7a:25:30:14:fa:35:1f:af:c1:98:24:e8:63:
7a:c7:64:31:a7:f8:17:4b:b3:2f:05:85:76:e1:e6:b4:2e:a8:
08:ec:90:3a:73:58:b4:3f:6f:16:ee:03:0d:ef:97:d6:af:d3:
ca:2f:0e:76:7b:8d:eb:fa:d2:3b:cb:fe:96:06:54:1c:54:bf:
51:21:2f:75:c4:c9:2a:ab:cb:8a:f2:bd:9c:d1:78:0a:eb:bc:
2f:e1:fc:8c:ca:a8:34:6d:e8:1e:0f:76:bb:3d:59:ab:b0:69:
ad:e0:23:a2:47:2f:c2:b3:9f:14:1c:a3:58:76:32:24:fc:bc:
75:6e:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:52 2025 by rpki-client