Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/jSjRNpEe4roY7FOCxriU8_HvHoM.roa
File: jSjRNpEe4roY7FOCxriU8_HvHoM.roa (raw, json)
Hash identifier: vHyyZ/Vv7Ngvd5OTbnO7xwB71a6aub1fAn8Hmp41IOY=
Subject key identifier: 8D:28:D1:36:91:1E:E2:BA:18:EC:53:82:C6:B8:94:F3:F1:EF:1E:83
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 018571F0F662276BFEA2E173277773CD66D6
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/jSjRNpEe4roY7FOCxriU8_HvHoM.roa
Signing time: Mon 02 Jan 2023 10:04:55 +0000
ROA not before: Mon 02 Jan 2023 10:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.191.240.0/22 maxlen: 22
2a0a:2140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:f6:62:27:6b:fe:a2:e1:73:27:77:73:cd:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Jan 2 10:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d28d136911ee2ba18ec5382c6b894f3f1ef1e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:0d:db:18:fb:d8:b2:b8:b5:80:74:ee:6b:
82:3b:c8:f5:d3:3d:b9:29:40:7e:cb:88:4b:94:2a:
77:b3:64:27:e7:9f:4e:82:df:6d:cc:59:db:1a:0a:
7d:74:c2:80:95:2d:42:34:61:19:7e:4e:f3:6b:e5:
97:19:3b:ef:11:50:f9:f7:7a:68:4a:bb:54:05:d4:
9a:72:cd:39:d4:51:27:b9:88:c5:12:e4:fc:1c:1a:
fd:42:4f:37:24:8c:47:99:d7:54:96:b8:01:eb:fb:
c4:d3:22:96:df:02:1f:a4:58:2c:75:da:d5:3f:f5:
8f:11:5f:61:13:de:1c:d3:b4:49:7b:6f:22:9c:8f:
23:bb:56:f7:12:40:c9:33:fa:1c:08:13:c1:28:d1:
e1:d8:23:85:5a:18:0e:fa:61:2f:0c:3b:db:22:26:
83:68:07:b6:77:4f:ba:4c:11:2a:5a:b9:60:fd:65:
31:eb:54:2b:b3:7f:46:ce:06:6a:31:f6:08:58:e9:
e3:76:03:d4:1e:67:57:7d:49:5f:11:bc:68:bb:c4:
cb:28:20:35:94:b9:97:30:e6:ff:5e:83:c3:1d:69:
6a:63:bc:a6:5c:1e:b3:88:3b:eb:bf:ae:53:74:48:
02:cd:ec:7c:6f:a0:22:4c:27:eb:fa:ee:1f:45:93:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:D1:36:91:1E:E2:BA:18:EC:53:82:C6:B8:94:F3:F1:EF:1E:83
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/jSjRNpEe4roY7FOCxriU8_HvHoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.240.0/22
IPv6:
2a0a:2140::/29
Signature Algorithm: sha256WithRSAEncryption
3d:fb:ed:90:5e:d6:2d:58:87:de:2f:4b:8d:e7:54:7a:44:e5:
c1:7d:67:8e:6e:c4:fc:2f:46:21:59:1f:fd:5e:ee:5e:ef:a2:
0b:7b:2d:83:6d:47:d0:41:69:11:cd:82:db:83:c5:f1:76:66:
12:73:be:cb:4b:5a:5b:8f:ad:f9:6b:fc:4f:17:6c:cc:bc:c5:
fe:5e:c1:82:1b:fe:39:fd:e0:bd:a4:b4:db:c1:67:47:87:72:
a2:4a:e3:ea:19:5a:7f:a4:8b:5a:db:87:8e:5e:aa:5d:14:01:
40:82:6b:c8:31:28:7d:ad:9f:df:ca:0e:57:ab:01:8d:a1:80:
63:4e:d6:87:1a:89:11:51:f6:b5:c0:8b:78:4e:9a:97:d9:6f:
21:c2:b9:9a:78:f4:4c:58:c7:4f:de:79:65:e6:1c:db:47:07:
4a:6b:9a:88:79:dc:f5:9f:78:b4:38:b7:28:63:91:c6:04:73:
a4:a3:88:85:7f:57:10:2d:4c:2c:41:04:89:56:df:7a:47:11:
43:45:92:6c:e6:b5:de:0c:54:e4:a9:2f:1d:52:05:1f:d6:ef:
83:cd:f5:c3:25:7c:b7:8a:fc:e4:21:19:37:8d:a8:3d:0c:34:
dd:d1:55:26:26:c2:e5:4d:a7:f7:74:d5:9b:b1:17:a2:da:04:
2d:c2:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:25:07 2025 by rpki-client