Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JRcnUo6rfLejhwcDAFxo6Mu9oxI.roa
File: JRcnUo6rfLejhwcDAFxo6Mu9oxI.roa (raw, json)
Hash identifier: LEI+AGP7EM7Os8fsye8lbAYAduL3InQa4+DbVA3S9zo=
Subject key identifier: 25:17:27:52:8E:AB:7C:B7:A3:87:07:03:00:5C:68:E8:CB:BD:A3:12
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65FAFF577819FA83DFD4D284AA2B12
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JRcnUo6rfLejhwcDAFxo6Mu9oxI.roa
Signing time: Sun 01 Jan 2023 08:15:00 +0000
ROA not before: Sun 01 Jan 2023 08:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213133
IP address blocks: 93.179.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:fa:ff:57:78:19:fa:83:df:d4:d2:84:aa:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=251727528eab7cb7a3870703005c68e8cbbda312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:62:ab:3a:2d:a1:96:5f:7a:d1:a9:e6:66:
be:ce:40:bb:b3:c6:33:a2:9c:44:2a:cf:02:3e:80:
f8:f7:f1:51:41:b5:05:4a:8f:83:37:ae:39:29:e5:
76:5d:7b:9c:d7:92:4b:4c:2a:92:da:b8:c4:11:ee:
be:3a:6e:4a:ad:c4:c9:91:cc:fb:e6:c7:08:14:d0:
d1:d4:78:bd:0d:3a:e9:f5:88:1c:64:f2:ca:0f:31:
84:9d:9d:13:b4:14:64:c7:e5:08:83:1a:93:07:ff:
ad:44:68:d3:fa:2c:5d:d3:63:b6:18:d4:f3:1c:bd:
df:16:f5:d0:b1:6c:93:82:8d:92:67:01:b0:dc:51:
12:2b:4b:df:b5:d3:71:0a:8b:b2:8a:e4:91:dd:b2:
ae:ea:5c:8c:eb:6e:bc:de:97:dd:43:b4:7b:f4:31:
97:00:e1:9f:b4:78:43:36:80:d9:0b:fa:39:aa:b9:
fb:fd:b5:aa:71:a7:a2:51:72:c5:cf:43:0a:d6:67:
13:db:01:49:d1:c7:48:f5:b3:eb:86:6b:26:be:9c:
97:86:ff:73:9c:6c:96:38:71:8e:20:9f:cc:75:36:
87:13:d2:a6:75:c0:a6:a9:95:2f:84:50:ce:62:16:
82:f9:da:66:3c:f1:cd:ad:72:cc:79:17:f7:bc:2d:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:17:27:52:8E:AB:7C:B7:A3:87:07:03:00:5C:68:E8:CB:BD:A3:12
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JRcnUo6rfLejhwcDAFxo6Mu9oxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.95.0/24
Signature Algorithm: sha256WithRSAEncryption
17:78:69:18:0c:c0:7f:5c:5a:4b:fa:b5:9f:36:82:a4:62:a3:
61:7e:8c:0f:fc:9a:bf:17:86:96:3f:5a:27:0f:6a:9a:27:b1:
ee:8e:75:80:80:5a:cd:51:ad:54:dd:28:30:a9:05:ba:75:de:
86:ed:ce:fa:d9:1a:9d:d7:05:3b:d8:b9:e3:29:85:02:9e:66:
97:3b:c1:c3:db:c7:af:9c:d5:30:1d:cd:73:b0:3d:66:7f:cc:
e1:3f:16:d6:54:fa:3c:09:de:1d:5d:32:3b:45:d7:88:e4:2c:
69:d1:be:11:b9:2b:8e:8d:14:e4:39:cb:c8:80:c1:2d:3a:1c:
5d:c6:33:79:e0:21:76:1e:99:87:df:7d:81:19:56:d8:88:9f:
45:c4:98:56:c8:99:51:83:67:56:24:a7:54:f0:e8:8c:99:35:
49:59:76:12:9a:e7:fd:d2:08:c6:9c:3e:6b:6c:1f:ab:12:d6:
c1:64:b1:b4:05:42:6e:c6:ff:6c:65:4f:65:24:8b:2a:fa:e7:
94:64:eb:7f:31:f1:1e:f0:4a:d3:67:a7:f9:e8:f6:5f:0c:10:
07:50:33:ec:5c:8f:e2:fa:de:c6:dc:1c:69:6f:f3:e2:f9:73:
bd:9e:36:c7:fa:de:76:1c:0d:9f:a4:25:bb:61:37:48:87:94:
34:cc:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:29:30 2025 by rpki-client