Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/JLV-NFwNfet1kvQm6rDHP057Pfw.roa
File: JLV-NFwNfet1kvQm6rDHP057Pfw.roa (raw, json)
Hash identifier: mxDY1Wo3cNj1JAOVtQjEBq4hnuGDPmvwPF/noWfdpYQ=
Subject key identifier: 24:B5:7E:34:5C:0D:7D:EB:75:92:F4:26:EA:B0:C7:3F:4E:7B:3D:FC
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 0185724C907E881DFC56685CD6DBAEEA7F54
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/JLV-NFwNfet1kvQm6rDHP057Pfw.roa
Signing time: Mon 02 Jan 2023 11:44:58 +0000
ROA not before: Mon 02 Jan 2023 11:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29075
IP address blocks: 91.109.176.0/20 maxlen: 20
128.204.224.0/20 maxlen: 20
85.118.32.0/19 maxlen: 19
141.255.144.0/20 maxlen: 20
185.118.0.0/22 maxlen: 22
185.123.24.0/22 maxlen: 22
45.94.124.0/22 maxlen: 22
45.10.224.0/22 maxlen: 22
178.20.48.0/21 maxlen: 21
212.85.144.0/20 maxlen: 20
188.121.224.0/19 maxlen: 19
2a02:2178::/29 maxlen: 29
2a00:1b88::/32 maxlen: 32
2a02:2178::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:90:7e:88:1d:fc:56:68:5c:d6:db:ae:ea:7f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 2 11:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24b57e345c0d7deb7592f426eab0c73f4e7b3dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:9e:64:43:fd:d5:bd:23:60:c1:a6:6c:50:
c5:bf:49:9e:6f:68:c0:19:67:8b:2c:00:65:74:23:
11:4f:2c:d7:33:ea:d5:a0:ee:2d:2c:79:e8:d6:23:
47:c9:c9:03:45:c2:93:4b:fa:75:43:35:95:e9:f1:
42:3b:3f:3d:4b:e0:94:ea:8b:ef:6b:5b:5f:ca:1a:
56:e5:a6:bd:fb:8b:88:73:17:79:ca:48:8d:47:1c:
a6:57:5d:c7:42:7b:7f:b2:c9:b3:c2:c6:ec:17:1d:
9e:05:f9:1e:5a:e7:cf:e9:65:59:f1:f9:6f:9b:79:
09:01:8b:4d:a9:0c:8e:f8:43:2f:35:e1:f3:49:af:
18:3f:bf:af:30:00:f2:22:7a:32:72:03:3b:f9:07:
10:b0:42:f6:30:b3:15:94:af:c9:15:1c:e3:49:4c:
09:c8:bc:47:4c:b4:6f:55:9e:9d:3b:77:68:03:92:
5e:a0:bd:1f:9f:3f:7d:4b:6b:f5:29:81:cb:de:89:
eb:b5:74:d7:ad:0d:8e:dd:79:65:a8:f6:d3:48:d4:
a4:76:f3:b5:d5:b9:ed:4f:75:ab:a9:54:2d:94:54:
8e:f1:ed:79:86:c4:c3:22:8d:b7:8a:7a:62:5b:f8:
c2:03:3f:98:01:69:f7:e1:8b:7a:5e:d3:fd:8a:38:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:7E:34:5C:0D:7D:EB:75:92:F4:26:EA:B0:C7:3F:4E:7B:3D:FC
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/JLV-NFwNfet1kvQm6rDHP057Pfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.224.0/22
45.94.124.0/22
85.118.32.0/19
91.109.176.0/20
128.204.224.0/20
141.255.144.0/20
178.20.48.0/21
185.118.0.0/22
185.123.24.0/22
188.121.224.0/19
212.85.144.0/20
IPv6:
2a00:1b88::/32
2a02:2178::/29
Signature Algorithm: sha256WithRSAEncryption
97:e6:ee:34:79:52:74:bc:cf:bb:4d:3e:a9:eb:bb:93:6d:59:
8c:17:cd:41:0c:ed:2c:17:83:8e:8c:c7:0c:da:8d:b8:5e:c1:
60:b3:54:1c:8d:96:ae:21:2e:05:bf:fb:13:f0:e0:d8:47:77:
99:fe:b8:cd:ec:fb:17:0d:f8:14:8c:aa:3f:46:85:4e:6c:bd:
e1:13:a6:3b:87:21:7e:6d:e8:fb:1e:09:d9:ac:8d:71:d0:5e:
39:cd:8c:fb:11:ad:35:54:ab:e5:30:65:a5:a3:ba:e7:11:10:
c9:3c:d9:30:bc:f1:a8:9f:80:13:74:7a:45:7e:2a:25:a7:12:
0f:fd:90:05:79:9a:ec:df:b1:12:92:9b:ab:b4:9b:06:57:5d:
4a:e9:34:d0:de:3f:a3:dd:5e:ae:84:43:56:a3:88:0c:00:cc:
e5:43:a2:10:ee:96:d3:ab:3e:5f:4c:1f:7d:a3:e7:35:c6:87:
e0:11:a4:ec:cb:8d:37:c4:c2:74:de:d5:df:85:a4:41:a5:ac:
28:90:73:a5:b3:5f:41:d3:37:bd:3e:99:17:03:98:87:61:ad:
e2:5a:af:65:c0:ec:e9:19:2c:6a:9c:74:a0:c7:a9:03:42:6b:
48:55:4d:9b:45:81:0a:15:68:ee:9a:70:12:86:25:af:f3:77:
eb:0c:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:50 2025 by rpki-client