Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J-Bxe8oiGN0KrPng6TUdCKGDtoA.roa
File: J-Bxe8oiGN0KrPng6TUdCKGDtoA.roa (raw, json)
Hash identifier: BH1lhXZc9f1O6lhk0cSFQ434fEIHNdxxlCMH6vFwepA=
Subject key identifier: 27:E0:71:7B:CA:22:18:DD:0A:AC:F9:E0:E9:35:1D:08:A1:83:B6:80
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018747CA872D219A1EC3FF9BAE9C7D482EC1
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J-Bxe8oiGN0KrPng6TUdCKGDtoA.roa
Signing time: Mon 03 Apr 2023 15:44:27 +0000
ROA not before: Mon 03 Apr 2023 15:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51961
IP address blocks: 178.250.190.0/23 maxlen: 24
178.250.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:ca:87:2d:21:9a:1e:c3:ff:9b:ae:9c:7d:48:2e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Apr 3 15:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e0717bca2218dd0aacf9e0e9351d08a183b680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:ae:d1:0c:7d:ca:15:58:1e:54:32:16:af:
58:59:89:47:c5:1f:e2:3f:bc:f1:52:68:79:87:12:
2f:50:60:0b:41:a5:dc:ea:be:a7:6f:25:65:da:df:
fe:d0:f7:eb:79:0d:bd:5c:b4:48:87:e0:4c:d0:c3:
b3:0a:a5:4f:c8:c3:a6:c2:b5:b5:6a:f2:4b:25:83:
7e:2a:2b:d6:94:08:3d:9f:3a:98:0d:2a:58:96:2c:
7a:e7:6d:42:f8:66:19:38:3a:e8:e8:9b:5d:ca:0d:
06:63:ae:be:b7:5e:9c:de:c6:86:d4:80:e4:60:f1:
f0:37:9f:b9:8f:eb:3f:83:f3:87:73:b2:f3:4f:8d:
68:74:4c:2d:2a:15:45:19:aa:e0:ee:6f:c6:d0:c8:
7c:bc:65:38:61:a7:cd:47:29:2f:34:70:98:cb:4a:
61:bb:32:34:fc:3b:32:ac:f2:93:fb:10:54:73:45:
fc:de:28:35:be:65:36:09:bc:28:34:a5:1e:b9:8b:
68:09:02:66:38:ed:8f:08:0d:a5:90:1b:69:24:c0:
01:bf:da:bb:6e:89:90:d4:43:0b:d1:b2:7f:43:66:
8b:0e:f9:94:42:06:f6:ea:b3:3c:65:53:18:a5:29:
82:03:5b:70:d0:6d:f5:e3:ce:0e:9a:81:fa:ae:f2:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:71:7B:CA:22:18:DD:0A:AC:F9:E0:E9:35:1D:08:A1:83:B6:80
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J-Bxe8oiGN0KrPng6TUdCKGDtoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.184.0/23
178.250.190.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:18:e4:61:4e:e0:25:1d:04:95:f0:11:9c:d8:ea:55:7a:a6:
49:a1:f8:20:d3:4b:52:e4:b2:74:54:0d:c6:cc:a1:12:9b:85:
d2:74:53:1a:db:3c:ca:39:c4:1b:aa:49:99:b7:d0:13:e0:bd:
91:02:1d:aa:f1:94:f9:18:a5:f1:0f:53:b8:e7:77:51:f6:0c:
af:24:fa:af:e2:52:96:9b:97:0a:af:93:cf:72:19:7a:21:53:
b6:9a:18:be:47:02:8c:1a:2f:9a:7e:34:c7:6a:6f:3a:dc:5c:
58:af:3e:b6:4a:df:e0:3e:4f:9b:f2:97:cb:a5:e2:07:89:84:
e2:e1:56:58:10:1f:9e:4d:f8:78:f8:54:34:19:53:ea:dd:a9:
ce:4b:a4:71:c2:54:1c:50:ca:ae:61:27:4b:76:d1:4a:f5:6e:
41:01:cc:fd:8d:24:45:01:4d:3f:9f:00:fb:d5:cb:7e:cb:ca:
9a:e4:c8:f1:c2:5b:29:d5:cb:97:1b:bc:f2:3e:4f:e8:42:ad:
80:9a:d1:3c:27:89:35:24:cf:2e:3b:42:f7:69:a8:7d:70:77:
6b:02:cb:38:3b:29:0e:dd:6a:38:b5:98:2a:7f:5d:b1:3f:d4:
bf:86:bf:48:36:5f:28:5b:ed:48:14:7c:30:34:fa:5d:13:1c:
dc:88:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:35 2025 by rpki-client