Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65a2e2-74cf-4d8b-aad6-b2a13440f1a5/1/X7zKo0VThYOKYYka709wqEQIDbs.roa
File: X7zKo0VThYOKYYka709wqEQIDbs.roa (raw, json)
Hash identifier: R6axI+8jCEgQJHXvjnNMmyDGnPz2tt2r0Vd34K5Ekaw=
Subject key identifier: 5F:BC:CA:A3:45:53:85:83:8A:61:89:1A:EF:4F:70:A8:44:08:0D:BB
Certificate issuer: /CN=8e95484fff3a9f618c03a79621d0798d24865071
Certificate serial: 01856FA6FF71FD17F42F2491EBCADA942451
Authority key identifier: 8E:95:48:4F:FF:3A:9F:61:8C:03:A7:96:21:D0:79:8D:24:86:50:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpVIT_86n2GMA6eWIdB5jSSGUHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65a2e2-74cf-4d8b-aad6-b2a13440f1a5/1/X7zKo0VThYOKYYka709wqEQIDbs.roa
Signing time: Sun 01 Jan 2023 23:24:53 +0000
ROA not before: Sun 01 Jan 2023 23:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43873
IP address blocks: 46.255.237.0/24 maxlen: 24
46.255.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:ff:71:fd:17:f4:2f:24:91:eb:ca:da:94:24:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e95484fff3a9f618c03a79621d0798d24865071
Validity
Not Before: Jan 1 23:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fbccaa3455385838a61891aef4f70a844080dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:34:31:40:d9:81:22:36:90:cb:d8:8a:80:
82:03:7e:0f:d0:d3:fe:e1:8f:e1:a3:b0:f1:c5:d6:
20:39:62:75:bf:17:fc:20:57:fb:38:ea:88:db:31:
92:93:18:57:c0:d5:d8:db:e2:30:f7:01:8d:91:c5:
e5:58:fc:9f:de:25:20:b6:65:cc:25:e3:45:6a:24:
33:89:bc:77:6e:19:f2:18:da:0d:9f:93:97:65:64:
8f:f0:d6:f9:2a:a4:f6:16:68:c0:1e:a2:be:74:c2:
c4:73:db:22:47:d9:37:01:0c:c2:dd:0a:65:9e:a1:
fa:a0:27:ea:53:31:e8:8e:3e:14:bb:7b:89:14:4b:
90:69:f1:74:6c:12:6e:b2:df:7b:17:fc:ce:b2:3f:
15:3d:e2:ef:2d:fd:3d:79:e9:cf:05:fb:46:26:93:
6d:d2:df:e9:73:1b:5f:13:a5:61:29:89:af:d6:f6:
1b:ac:4b:c5:f8:ba:89:ec:d0:7d:7a:03:72:aa:e4:
ee:62:55:b1:da:86:6f:65:54:ec:82:24:0f:99:b3:
56:86:48:03:79:59:c7:e6:23:f2:c0:b3:7f:29:cf:
f3:d1:f7:bc:92:bc:fe:9b:7e:9a:2a:8f:c3:cb:f5:
5d:01:00:ff:30:53:81:1f:6d:41:4e:2c:75:55:c1:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BC:CA:A3:45:53:85:83:8A:61:89:1A:EF:4F:70:A8:44:08:0D:BB
X509v3 Authority Key Identifier:
keyid:8E:95:48:4F:FF:3A:9F:61:8C:03:A7:96:21:D0:79:8D:24:86:50:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpVIT_86n2GMA6eWIdB5jSSGUHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65a2e2-74cf-4d8b-aad6-b2a13440f1a5/1/X7zKo0VThYOKYYka709wqEQIDbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65a2e2-74cf-4d8b-aad6-b2a13440f1a5/1/jpVIT_86n2GMA6eWIdB5jSSGUHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.237.0-46.255.238.255
Signature Algorithm: sha256WithRSAEncryption
27:5d:48:a7:27:8b:60:d5:df:1b:75:72:31:3e:31:b8:0a:1e:
5a:05:e5:59:5b:cf:19:f2:72:0f:b6:17:4f:c1:08:63:9d:62:
18:3a:02:51:40:18:dd:3e:e5:0b:e4:24:38:cb:43:00:42:3e:
4f:65:2d:fa:a7:0a:79:5d:5f:19:78:c3:e3:37:e1:73:35:43:
a7:1f:f7:23:e4:d9:15:5a:01:b2:e6:df:1d:9f:59:a2:47:dd:
a1:01:80:7e:80:fc:3a:7c:59:64:ee:22:de:9d:9e:d5:cf:9a:
5c:07:de:d4:1d:e4:8b:f3:ff:62:8e:25:b8:17:30:f6:f6:5e:
d0:94:a6:e8:5a:43:57:d2:72:44:17:45:ca:8b:22:e2:23:91:
d6:a6:83:9c:86:f5:6a:0d:64:30:60:6c:a2:12:f7:86:8f:f3:
6c:61:aa:d6:8b:df:63:de:dc:25:b5:90:e1:7c:dc:60:8e:4c:
8e:5f:86:0f:e0:54:ec:dd:c8:6d:20:07:e4:d8:15:6b:2a:a9:
07:78:c9:04:e2:44:22:03:e1:cc:6b:37:cd:17:6f:1c:91:7a:
68:57:5e:b6:4e:7c:99:4a:e1:ee:1a:13:2a:97:63:91:36:81:
72:04:be:03:b8:dc:fe:81:72:8a:91:62:c6:73:7b:25:e3:aa:
a2:ba:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:49 2025 by rpki-client