Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JITnLjO9075Lk_SmX2zYAG5H3sA.roa
File: JITnLjO9075Lk_SmX2zYAG5H3sA.roa (raw, json)
Hash identifier: c+TXjH3vnqvhyJhQnrIMGU6vK0AjQcxm+2ZajaxlqZI=
Subject key identifier: 24:84:E7:2E:33:BD:D3:BE:4B:93:F4:A6:5F:6C:D8:00:6E:47:DE:C0
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 018692BC172845505479B735024098200DD3
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JITnLjO9075Lk_SmX2zYAG5H3sA.roa
Signing time: Mon 27 Feb 2023 11:57:25 +0000
ROA not before: Mon 27 Feb 2023 11:57:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210894
IP address blocks: 95.66.198.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:bc:17:28:45:50:54:79:b7:35:02:40:98:20:0d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Feb 27 11:57:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2484e72e33bdd3be4b93f4a65f6cd8006e47dec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:0c:e0:6f:40:75:64:ef:d0:5f:55:44:3f:
fb:9b:1f:0e:45:a1:f6:af:71:20:14:39:43:df:d0:
30:b5:d1:87:8c:0c:57:b5:31:0a:72:e9:53:38:eb:
34:91:9e:5a:92:eb:d5:db:24:14:df:9a:d4:fd:ab:
8d:59:4c:32:7d:e0:ed:a7:e1:55:2d:1c:54:9e:ad:
2e:f0:da:24:5d:49:6b:3a:a8:5b:7c:ac:63:64:96:
98:34:7b:d7:8e:70:f2:80:f1:5d:3a:91:3f:2f:49:
74:42:af:11:ec:8a:b9:9d:8c:2a:fc:4e:8a:4d:05:
fb:32:84:18:47:9a:f0:f3:1b:73:6e:51:35:fb:b4:
a7:09:bd:99:88:d7:e8:d1:d0:a9:8c:8c:bc:88:36:
4e:ef:98:71:23:aa:07:82:48:44:4b:78:38:b4:81:
4c:72:ba:ba:02:dd:1b:f6:1c:9e:36:c1:ae:fa:48:
12:c3:2c:79:c0:16:3c:0e:01:19:35:51:86:ba:5a:
18:81:b9:8e:34:bc:2a:15:68:8d:b0:ce:30:f7:d2:
6c:6f:db:6e:32:b9:94:10:04:58:c5:38:a3:5d:16:
65:3c:3e:03:2d:ec:c1:54:f0:75:9e:5a:48:59:2f:
d0:e0:4f:8f:3e:d4:7c:4c:79:7d:09:63:ea:ef:d6:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:E7:2E:33:BD:D3:BE:4B:93:F4:A6:5F:6C:D8:00:6E:47:DE:C0
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JITnLjO9075Lk_SmX2zYAG5H3sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.198.0/23
Signature Algorithm: sha256WithRSAEncryption
88:d4:61:d9:bd:d2:5e:a0:d4:7c:ed:50:94:40:b3:49:a1:47:
6f:a9:ba:1b:86:e4:34:14:cb:8b:31:5a:04:76:7e:3e:16:fa:
83:2c:06:f2:86:29:fd:be:6e:45:24:7d:60:be:14:04:a6:83:
bb:a9:57:24:ba:4f:ca:83:02:f2:41:e0:c7:cf:79:ee:55:47:
11:1c:54:9e:3b:95:9d:b3:03:66:33:03:bd:1f:37:82:a6:76:
eb:eb:1c:bc:09:f8:3f:bb:8f:94:ee:af:50:d5:a1:de:aa:fa:
af:86:e2:18:e5:c5:ed:fb:e3:87:01:17:15:45:6d:e3:e9:f7:
a9:da:6f:2f:35:b0:e0:e8:24:ff:c4:2b:21:df:26:a5:e5:2f:
32:5d:ba:bb:8f:c9:0a:47:a2:e8:90:f6:37:b4:25:c8:85:17:
57:54:ed:95:07:23:01:16:6d:fd:6a:87:73:ec:0e:d4:df:a8:
04:87:c0:03:52:29:8a:76:66:0b:c0:5e:12:a2:ea:61:9a:8e:
db:72:df:0b:6c:8b:c6:26:52:83:f9:69:7f:30:3a:d2:a3:da:
12:d3:99:f9:10:98:9c:a2:4d:a0:5e:fc:d2:32:8e:7c:12:5b:
ce:95:89:12:17:05:77:39:78:85:e3:4f:84:ac:ed:22:b9:c0:
ce:4a:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:44:49 2025 by rpki-client