Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/j_9j__9EtinPINXjuXzSFTT7r4A.roa
File: j_9j__9EtinPINXjuXzSFTT7r4A.roa (raw, json)
Hash identifier: x3AztanSTOE0W5bQIXcxIPhMvkrl19LDKTy+dhadAlc=
Subject key identifier: 8F:FF:63:FF:FF:44:B6:29:CF:20:D5:E3:B9:7C:D2:15:34:FB:AF:80
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 01856F54855B88B40963C2CA81E44F5E9CCD
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/j_9j__9EtinPINXjuXzSFTT7r4A.roa
Signing time: Sun 01 Jan 2023 21:54:48 +0000
ROA not before: Sun 01 Jan 2023 21:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60722
IP address blocks: 92.255.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:85:5b:88:b4:09:63:c2:ca:81:e4:4f:5e:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Jan 1 21:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fff63ffff44b629cf20d5e3b97cd21534fbaf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:f9:eb:95:73:2a:db:ab:ed:82:13:6d:3e:
c2:9f:2c:41:58:3e:35:d7:1e:45:08:d1:3a:f7:49:
ca:7d:2f:a3:19:a8:72:48:f7:f8:65:48:4f:05:8f:
2b:5a:7f:29:69:8b:a0:5a:23:c5:e2:51:cd:e7:ac:
f4:11:6e:74:87:05:78:28:76:6f:21:89:ac:6f:c3:
93:34:29:6b:58:48:29:71:5d:bf:3a:dd:43:15:6c:
2b:8f:54:cd:7f:ab:08:fd:8e:e0:ad:ee:1e:8f:8d:
88:46:c6:56:7e:a8:f6:3b:6d:77:16:ac:b0:14:df:
69:61:64:11:19:07:0f:f0:fb:18:5d:71:1e:ba:51:
82:1f:04:f7:64:9a:ac:81:60:61:05:f2:2f:5a:65:
35:74:28:48:cb:e5:e4:11:ad:e2:85:97:76:48:72:
7a:eb:de:2c:f7:78:69:b0:70:cc:a6:c3:fe:8d:da:
09:2b:7d:e2:45:5d:1c:6a:66:88:11:02:5f:4e:85:
b6:f7:d9:74:45:5d:d5:38:7e:1b:f3:1b:39:22:bf:
65:e8:9e:dd:58:ae:33:9d:11:f7:5b:a1:73:c5:a9:
b8:dc:3f:db:f5:06:4e:b2:91:ae:f9:22:0f:62:c0:
e5:d6:96:2c:ad:c9:35:5c:dc:c6:87:8b:6e:69:81:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FF:63:FF:FF:44:B6:29:CF:20:D5:E3:B9:7C:D2:15:34:FB:AF:80
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/j_9j__9EtinPINXjuXzSFTT7r4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c6:41:a6:da:fc:b8:c7:2d:5a:ea:9d:a5:e6:6a:66:83:53:
47:66:a0:78:f2:58:7d:ab:1a:c6:8e:8a:a3:b3:d8:19:83:e9:
66:a0:26:ff:74:79:2c:96:3b:9a:19:6e:b8:7a:d2:e9:3c:79:
ae:5f:d9:dc:d4:69:47:a0:f2:e3:6b:44:63:b1:b2:97:45:25:
8b:19:38:79:29:b9:55:e5:b1:7c:7e:17:92:9c:07:4e:2d:7c:
b5:02:1b:63:b8:ad:51:b8:12:7d:67:1e:bf:7c:46:48:c0:9c:
a7:fc:88:b8:8c:3a:5e:e1:b0:f9:a6:cd:db:64:b4:3d:5e:57:
06:fd:bb:69:d8:be:de:cc:d9:d0:2d:d2:18:2a:ab:fe:57:9b:
de:80:30:0c:26:15:c8:17:f3:b6:a3:ab:42:ea:40:c4:4c:1f:
15:82:d9:c0:0c:32:f4:e3:05:54:ea:4d:fe:3b:40:80:50:9e:
2f:1e:1f:7e:eb:4b:36:cd:af:ac:72:3a:b3:c9:b1:59:7d:4a:
6d:e4:30:cf:ff:b4:dd:4f:f9:b3:44:a6:a9:48:49:35:0d:62:
e7:33:88:5f:75:62:2a:fd:f4:b0:8b:62:68:8a:7d:a8:e1:91:
a3:bc:c8:b7:c3:7f:9c:82:91:96:ba:73:6f:92:59:5f:15:9b:
30:f0:3d:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvVIVbiLQJY8LKgeRPXpzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOGQzNWVjYWU4YTUyOGNlZWM2NGRlM2JkNjNiNzNmYTQy
ZDVmNGEwHhcNMjMwMTAxMjE1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmZmNjNmZmZmNDRiNjI5Y2YyMGQ1ZTNiOTdjZDIxNTM0ZmJhZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzn565VzKtur7YITbT7CnyxBWD41
1x5FCNE690nKfS+jGahySPf4ZUhPBY8rWn8paYugWiPF4lHN56z0EW50hwV4KHZv
IYmsb8OTNClrWEgpcV2/Ot1DFWwrj1TNf6sI/Y7gre4ej42IRsZWfqj2O213Fqyw
FN9pYWQRGQcP8PsYXXEeulGCHwT3ZJqsgWBhBfIvWmU1dChIy+XkEa3ihZd2SHJ6
694s93hpsHDMpsP+jdoJK33iRV0camaIEQJfToW299l0RV3VOH4b8xs5Ir9l6J7d
WK4znRH3W6Fzxam43D/b9QZOspGu+SIPYsDl1pYsrck1XNzGh4tuaYEHvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI//Y///RLYpzyDV47l80hU0+6+AMB8GA1UdIwQY
MBaAFFKNNeyuilKM7sZN471jtz+kLV9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWIt
N2EzNzIwZDNjZmZjLzEval85al9fOUV0aW5QSU5YanVYelNGVFQ3cjRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWItN2EzNzIwZDNjZmZj
LzEvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP9BMA0G
CSqGSIb3DQEBCwUAA4IBAQCnxkGm2vy4xy1a6p2l5mpmg1NHZqB48lh9qxrGjoqj
s9gZg+lmoCb/dHksljuaGW64etLpPHmuX9nc1GlHoPLja0RjsbKXRSWLGTh5KblV
5bF8fheSnAdOLXy1AhtjuK1RuBJ9Zx6/fEZIwJyn/Ii4jDpe4bD5ps3bZLQ9XlcG
/btp2L7ezNnQLdIYKqv+V5vegDAMJhXIF/O2o6tC6kDETB8VgtnADDL04wVU6k3+
O0CAUJ4vHh9+60s2za+scjqzybFZfUpt5DDP/7TdT/mzRKapSEk1DWLnM4hfdWIq
/fSwi2Join2o4ZGjvMi3w3+cgpGWunNvkllfFZsw8D3D
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:10 2025 by rpki-client