Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/JEvWhJfXtNq50pnMlZLXdFz7phs.roa
File: JEvWhJfXtNq50pnMlZLXdFz7phs.roa (raw, json)
Hash identifier: 19JaMOHJ9zf/Kb+7mH8bbecJ6A7Dr4RKhPDyy2I05Uc=
Subject key identifier: 24:4B:D6:84:97:D7:B4:DA:B9:D2:99:CC:95:92:D7:74:5C:FB:A6:1B
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 0F8BA487
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/JEvWhJfXtNq50pnMlZLXdFz7phs.roa
Signing time: Sat 01 Jan 2022 07:58:24 +0000
ROA not before: Sat 01 Jan 2022 07:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41828
IP address blocks: 195.47.228.0/24 maxlen: 24
91.185.192.0/19 maxlen: 19
2a02:840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260809863 (0xf8ba487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Jan 1 07:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=244bd68497d7b4dab9d299cc9592d7745cfba61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:04:65:4d:ce:9c:d0:67:f1:b9:37:21:1f:
76:8e:3b:87:58:67:b6:5d:f8:c9:87:7f:0e:92:5e:
5b:16:da:ca:43:23:b2:02:eb:89:3b:da:3f:b8:c9:
87:f3:c9:d4:cc:30:0a:c1:20:38:f1:27:04:f9:6d:
86:68:fb:2b:3b:97:20:f2:fa:6f:64:03:a6:74:38:
b6:34:65:8b:12:bd:04:20:36:90:66:3d:22:7a:de:
70:0a:ce:7c:2a:85:48:8f:b6:8d:aa:75:0c:92:a5:
62:e6:77:ee:d1:a1:5a:fc:4b:f3:85:3e:e9:bd:45:
e7:84:6d:5f:78:8d:00:a9:f8:a3:2e:12:14:f8:9a:
a5:60:3d:98:76:a9:98:35:15:31:90:b4:33:80:36:
59:44:32:a6:78:bb:53:bc:df:9e:ce:57:6a:5d:65:
f7:39:de:a8:11:ea:73:e2:d5:fc:a7:1a:14:b1:fc:
35:ce:32:00:9d:6a:f6:20:2b:61:e2:7e:34:e7:49:
d2:20:e7:5e:6f:f6:25:62:fd:60:e1:9c:39:0a:30:
87:08:e8:f4:e8:5f:5d:46:ca:06:ad:1b:59:bf:60:
77:35:28:29:14:03:f6:d4:da:11:0e:6c:14:e8:ed:
6f:eb:d2:3d:1f:a1:c7:3b:53:bf:3f:03:18:66:f7:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:D6:84:97:D7:B4:DA:B9:D2:99:CC:95:92:D7:74:5C:FB:A6:1B
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/JEvWhJfXtNq50pnMlZLXdFz7phs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.185.192.0/19
195.47.228.0/24
IPv6:
2a02:840::/32
Signature Algorithm: sha256WithRSAEncryption
33:7b:83:fe:1a:a9:86:97:2b:8c:3d:0e:3f:4d:31:c3:54:42:
16:4d:b5:05:23:bd:69:50:02:80:66:ca:ca:a2:d8:e4:2f:d6:
e2:81:4d:06:54:17:ca:2c:55:61:90:89:7f:22:5d:09:0d:6f:
31:b9:e2:7f:5a:a2:75:b7:57:ae:c1:2d:7c:31:18:5e:65:53:
ba:7e:7f:46:36:8a:23:1c:38:81:05:8b:d9:f5:ab:51:d1:ee:
39:2d:47:d2:a6:48:6e:1b:cd:0e:db:c1:45:5f:58:d5:28:88:
e1:fd:38:89:9e:73:6b:f2:67:5c:4d:53:ee:ec:9c:2a:31:cd:
e9:41:66:2a:e2:4a:24:a0:2b:91:c2:a0:24:77:75:3c:cb:a1:
c1:5e:c8:cc:44:e3:af:28:03:de:88:4a:67:51:7c:7c:ce:3f:
ac:fa:b9:9b:fe:98:5d:43:93:eb:0e:f7:7e:ec:59:b8:a3:62:
ed:98:4a:92:da:b0:4e:d8:eb:23:75:31:2f:69:a7:db:bd:61:
b9:63:ea:43:7b:e4:e5:eb:d9:00:bb:76:e3:a6:53:b0:cd:65:
13:bb:76:d4:c8:51:14:ba:6a:77:94:9b:96:0b:a3:8c:86:ce:
82:71:5e:e3:eb:bc:42:9d:bb:17:45:f4:14:97:ad:c3:b7:5b:
d8:2f:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:59:39 2025 by rpki-client