Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/noJjjBvO1PK2GIQKu681V5oHZKk.roa
File: noJjjBvO1PK2GIQKu681V5oHZKk.roa (raw, json)
Hash identifier: piKlpU+eAXamadW2VVxyropl8CZ/4iTw526xEvWor+k=
Subject key identifier: 9E:82:63:8C:1B:CE:D4:F2:B6:18:84:0A:BB:AF:35:57:9A:07:64:A9
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 01882A8F9A30E3E50C16E897D6DBD0041A5F
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/noJjjBvO1PK2GIQKu681V5oHZKk.roa
Signing time: Wed 17 May 2023 16:33:54 +0000
ROA not before: Wed 17 May 2023 16:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13157
IP address blocks: 185.244.56.0/24 maxlen: 24
185.244.56.0/22 maxlen: 22
193.29.250.0/24 maxlen: 24
62.112.32.0/19 maxlen: 19
2a04:ce40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:8f:9a:30:e3:e5:0c:16:e8:97:d6:db:d0:04:1a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: May 17 16:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e82638c1bced4f2b618840abbaf35579a0764a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:23:c3:a2:46:85:50:ed:e7:6d:7c:50:76:
56:d5:ce:80:dc:23:98:6f:f1:2b:29:0e:dd:35:f5:
66:25:ca:2c:6c:aa:ab:1b:13:12:26:e3:4f:c6:d3:
69:e3:2e:2b:af:b5:e2:50:82:7e:c9:35:e9:91:7e:
62:8d:43:36:ac:43:df:4d:f3:0e:77:d4:60:51:ba:
29:08:22:34:e2:2e:6f:db:ba:7f:8d:d4:30:8c:37:
fd:ed:2b:32:ce:fc:80:f9:f4:62:75:ac:4e:f9:2d:
91:a6:be:c7:e8:f1:9f:46:73:fc:e3:bb:e8:c9:d7:
f4:6c:5a:07:7a:c7:16:ab:89:53:42:e4:9f:2d:2c:
f3:8b:66:a6:f4:94:d6:d5:f9:26:95:b0:79:9b:e9:
59:7e:f6:13:94:a2:4e:df:de:de:87:2d:40:0e:75:
66:a8:e5:ac:0c:4b:48:8a:5a:bf:ee:2e:af:91:bd:
35:2a:9e:b0:5c:8f:5f:7e:36:8c:fc:17:45:5c:e9:
5d:46:2f:3b:ad:9d:4b:52:c1:49:eb:ab:e1:45:84:
9a:bc:8f:38:d3:a2:8a:96:13:94:73:3a:22:b1:af:
25:33:f8:d6:8a:c0:c9:86:90:cf:13:c5:64:01:a6:
7f:71:e9:a9:16:98:bc:13:4a:ea:3f:17:72:ba:21:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:63:8C:1B:CE:D4:F2:B6:18:84:0A:BB:AF:35:57:9A:07:64:A9
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/noJjjBvO1PK2GIQKu681V5oHZKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.32.0/19
185.244.56.0/22
193.29.250.0/24
IPv6:
2a04:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
53:57:bc:10:e5:c7:37:7f:a3:3f:9e:77:21:b8:0e:0d:71:64:
32:ee:09:0c:d9:0c:21:2f:1e:c3:4f:62:ad:da:bf:50:3b:49:
64:ba:6c:c1:cc:d4:8a:d9:fe:8c:57:72:e9:55:27:63:37:0f:
30:0c:71:f2:43:64:b7:db:71:5f:67:88:76:26:e3:e6:a4:31:
9b:9c:56:96:ec:cb:ae:29:9a:07:23:f5:a9:42:23:0b:91:19:
98:1a:9f:06:30:33:4e:21:96:97:36:18:18:86:81:63:1a:2e:
08:08:ae:a2:3d:1f:8a:62:2d:9a:31:ec:39:b2:9a:78:08:36:
30:fe:5c:01:e8:ed:1e:88:f2:10:77:7d:3d:1f:33:37:c5:f1:
d2:6d:c0:21:c9:ed:b9:af:77:57:1a:5a:b0:93:6c:f0:d6:6f:
82:94:61:8c:54:ca:7b:cd:92:7c:18:2c:41:01:a8:f0:cd:6a:
f8:7b:c5:1a:0f:99:33:b0:bf:c6:a6:e2:81:5b:17:76:06:f4:
54:aa:ad:cb:fd:de:80:89:5e:a0:58:41:c9:af:f9:75:59:5a:
e0:33:b6:6d:80:11:ee:19:e3:93:71:8d:59:46:ab:da:37:2d:
a9:aa:95:2c:24:a7:dd:2a:6e:dd:a8:8c:e3:73:a3:c7:32:e4:
b0:0e:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:14:40 2025 by rpki-client