Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/jvt1rR9bLyLFLXDo2WCk9UlR6sI.roa
File: jvt1rR9bLyLFLXDo2WCk9UlR6sI.roa (raw, json)
Hash identifier: u9sp/R3xvRNBKyZ1HSroNZ1G/BUtOj88MPhW1yoDyDw=
Subject key identifier: 8E:FB:75:AD:1F:5B:2F:22:C5:2D:70:E8:D9:60:A4:F5:49:51:EA:C2
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 444AE8A0
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/jvt1rR9bLyLFLXDo2WCk9UlR6sI.roa
Signing time: Sat 01 Jan 2022 16:02:46 +0000
ROA not before: Sat 01 Jan 2022 16:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.1.112.0/24 maxlen: 24
2001:7f8:83::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145759904 (0x444ae8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 1 16:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8efb75ad1f5b2f22c52d70e8d960a4f54951eac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:4a:29:c4:31:7c:d3:b2:f2:6b:f9:ff:be:
af:03:e6:22:a0:85:1c:cd:eb:a3:fd:fe:56:07:be:
dd:47:b7:0a:c9:e8:32:59:10:43:1e:19:b9:22:10:
08:b8:6a:7c:e1:ae:de:10:4d:17:6f:2d:3f:a8:cc:
67:6e:90:09:38:a2:d6:54:57:43:9f:b5:bb:7e:00:
4b:00:9e:9f:90:ff:56:89:7e:9e:17:af:33:7e:08:
d9:f4:3a:36:9b:d1:76:9f:55:5a:87:a9:32:ea:5f:
3b:6c:61:a0:b8:7d:bd:e2:2f:90:c8:b7:25:5e:16:
f5:77:52:0b:23:13:58:b8:13:2f:01:38:e7:39:8c:
a0:68:be:ca:da:1f:31:94:70:24:89:99:98:e5:9b:
c1:a1:7f:24:68:c9:fd:0e:fd:06:5b:32:81:4a:92:
b0:eb:c3:45:b5:c6:47:de:0b:a3:c8:dc:f6:85:68:
64:21:ad:02:ec:8a:2e:3e:0f:9c:41:09:6e:f0:7d:
6b:f3:e1:92:78:ca:6c:10:2d:0c:88:5f:e2:15:76:
b1:16:eb:0c:cc:15:7d:e8:64:6b:c3:60:0b:ab:aa:
89:22:fa:58:ca:da:54:b2:18:42:ac:d0:37:b2:ed:
e4:56:06:81:93:c8:99:c6:d7:1e:c1:2f:1a:42:45:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FB:75:AD:1F:5B:2F:22:C5:2D:70:E8:D9:60:A4:F5:49:51:EA:C2
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/jvt1rR9bLyLFLXDo2WCk9UlR6sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.112.0/24
IPv6:
2001:7f8:83::/48
Signature Algorithm: sha256WithRSAEncryption
ca:96:a9:6e:ef:e4:85:01:ef:3f:ea:4e:7d:56:59:d3:24:1e:
36:00:9e:97:40:51:2a:c2:75:ea:15:2f:ea:88:92:cd:d1:e7:
b4:a0:69:4c:f9:99:54:a0:05:61:6f:2b:32:26:65:b6:31:65:
fd:5c:e6:f2:8e:f7:86:8c:5f:18:c5:93:33:e8:78:20:f5:2d:
6d:eb:06:6a:f9:c6:a2:c9:87:f4:11:92:b2:98:69:18:57:ec:
20:b6:7c:00:7d:ef:d7:95:ca:14:6e:1e:76:30:ae:da:76:8d:
21:9c:fe:df:33:36:44:21:37:28:fb:be:b6:db:4f:80:3a:a0:
36:e0:0a:1f:1f:b9:39:29:f9:d4:41:fa:4b:a9:b2:b5:c8:12:
07:83:ba:a8:d9:4c:78:f4:5e:14:1c:4e:75:19:14:3b:dc:4a:
9c:d6:e1:4e:75:2d:43:bf:ed:65:65:0a:b0:b6:df:bf:89:c2:
63:32:d5:4a:ce:59:65:ff:db:f4:27:e9:65:b3:0c:03:69:bf:
f4:8a:33:d9:86:15:10:0e:ae:e8:ce:c5:04:a5:77:ce:9f:2b:
6b:da:26:b9:35:26:70:16:83:88:71:66:90:e7:ca:33:98:24:
04:00:41:dd:a7:f4:77:ec:7a:ea:9d:c3:97:6a:1d:96:70:fb:
7b:81:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:10:41 2025 by rpki-client