Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/J4zM5LsYguILBeh8Vokc9XPiw8k.roa
File: J4zM5LsYguILBeh8Vokc9XPiw8k.roa (raw, json)
Hash identifier: sV+Rmr223qrF0B6VbbsO/mU+rhRRI7Dj6fKCZbWowW0=
Subject key identifier: 27:8C:CC:E4:BB:18:82:E2:0B:05:E8:7C:56:89:1C:F5:73:E2:C3:C9
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 0185706719FBE44446C428D8EA9EE537D994
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/J4zM5LsYguILBeh8Vokc9XPiw8k.roa
Signing time: Mon 02 Jan 2023 02:54:43 +0000
ROA not before: Mon 02 Jan 2023 02:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49855
IP address blocks: 185.98.240.0/22 maxlen: 22
91.202.40.0/22 maxlen: 22
31.24.144.0/21 maxlen: 21
109.69.64.0/21 maxlen: 21
2a02:16d0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:19:fb:e4:44:46:c4:28:d8:ea:9e:e5:37:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Jan 2 02:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=278ccce4bb1882e20b05e87c56891cf573e2c3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:2d:e8:c5:a4:df:99:af:17:ca:fa:67:fe:
ef:fc:d8:7c:22:22:73:df:e6:54:61:f5:7f:82:9c:
37:b1:1f:5b:da:42:79:89:b9:b5:b0:23:4f:9d:9c:
4c:eb:f9:a9:df:48:c9:64:c8:0d:ee:f8:06:65:10:
b6:51:5f:1f:77:b1:bd:f9:8e:d6:6f:f0:9c:2a:5c:
25:ab:c1:0c:ef:65:67:96:59:aa:46:31:41:09:a2:
49:e9:8d:7c:d3:06:53:30:41:ea:25:22:bd:0f:80:
56:d3:37:0c:0f:e7:ff:78:c5:ff:a1:f3:a9:6d:48:
ab:aa:5b:e7:15:a4:34:12:99:3d:05:c3:35:f6:b2:
e6:2b:58:45:79:0a:fb:c5:dd:56:33:39:78:66:e6:
70:3f:a7:19:e1:57:71:95:8b:93:8b:d6:31:f1:f7:
b1:3c:b9:67:76:65:fa:5f:24:f5:7c:7d:c7:6e:0c:
d2:21:ac:02:0a:78:39:4e:86:37:99:10:6d:70:2e:
18:ab:4c:79:ad:29:e0:1b:2a:18:1c:43:e2:9c:e2:
e6:66:28:63:05:c9:15:2f:96:aa:fc:af:ec:b2:f3:
16:e9:dc:4d:b7:4b:90:6d:08:bc:77:46:f1:3e:b6:
68:fb:30:47:d1:01:05:22:ae:5a:b7:57:9e:56:e0:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:CC:E4:BB:18:82:E2:0B:05:E8:7C:56:89:1C:F5:73:E2:C3:C9
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/J4zM5LsYguILBeh8Vokc9XPiw8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.144.0/21
91.202.40.0/22
109.69.64.0/21
185.98.240.0/22
IPv6:
2a02:16d0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:66:51:82:da:7b:a0:d0:32:22:6d:16:78:b1:dd:c7:6c:77:
0d:da:8b:6f:41:9e:fe:95:3b:a6:71:14:3b:76:1c:9f:b1:12:
63:c7:98:bd:14:1f:04:e3:84:2d:23:69:62:f2:a3:88:a7:0e:
31:e7:84:b4:44:38:25:d4:e1:6a:1f:12:f7:cc:19:a5:a3:e9:
be:b3:d5:c3:42:23:bf:be:6c:d1:4b:97:eb:07:ce:b7:66:e6:
b8:5d:2e:b2:3a:18:14:69:3d:69:f5:25:07:8d:be:58:48:cf:
72:46:7d:8f:d4:6e:9f:56:09:99:03:16:bd:81:83:43:f1:ca:
d1:9d:81:e6:06:db:5e:84:9b:81:fd:03:ea:c6:18:c9:10:c3:
f2:d4:34:ef:cb:d0:63:9d:c9:7b:77:d0:0e:b8:23:23:ee:72:
7e:1c:11:f9:53:14:69:f4:97:50:46:37:ff:a2:a7:44:28:d5:
50:22:bb:94:ed:1f:99:05:c5:13:2e:97:9c:17:6e:59:21:57:
4a:26:f8:b0:d3:48:1e:d5:cd:74:02:5b:a9:33:da:e1:88:ab:
0e:75:93:f5:e7:f8:27:0d:fa:07:5e:fa:b0:aa:91:89:14:e5:
ab:ba:b7:66:ea:22:75:a3:20:0a:c3:c7:31:03:c2:24:c9:86:
4e:4d:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:49 2025 by rpki-client