Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65a2e2-74cf-4d8b-aad6-b2a13440f1a5/1/bd5_mzFOBoBibn8EStlKkTPLb9M.roa
File: bd5_mzFOBoBibn8EStlKkTPLb9M.roa (raw, json)
Hash identifier: Buz3GfxzDcELqsPElu72wrQHVqCu2Wrd+Q30/qumtVo=
Subject key identifier: 6D:DE:7F:9B:31:4E:06:80:62:6E:7F:04:4A:D9:4A:91:33:CB:6F:D3
Certificate issuer: /CN=8e95484fff3a9f618c03a79621d0798d24865071
Certificate serial: 0184A313C4842CE350F1DE761DA7421D0525
Authority key identifier: 8E:95:48:4F:FF:3A:9F:61:8C:03:A7:96:21:D0:79:8D:24:86:50:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpVIT_86n2GMA6eWIdB5jSSGUHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65a2e2-74cf-4d8b-aad6-b2a13440f1a5/1/bd5_mzFOBoBibn8EStlKkTPLb9M.roa
Signing time: Wed 23 Nov 2022 06:01:32 +0000
ROA not before: Wed 23 Nov 2022 06:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43873
IP address blocks: 46.255.237.0/24 maxlen: 24
46.255.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:13:c4:84:2c:e3:50:f1:de:76:1d:a7:42:1d:05:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e95484fff3a9f618c03a79621d0798d24865071
Validity
Not Before: Nov 23 06:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dde7f9b314e0680626e7f044ad94a9133cb6fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:d2:55:cd:f0:0f:66:11:49:48:af:2c:d5:
5f:c3:29:61:8a:0e:66:f2:2d:79:26:a8:49:85:b3:
e0:3c:00:f1:0d:d0:3b:6a:f3:4a:45:36:a8:ac:1d:
74:15:d0:36:4f:99:97:34:0f:6b:eb:0a:7e:ba:0d:
58:08:2c:fa:10:d8:2f:8c:ec:51:67:af:3e:0e:6b:
82:c9:c6:0b:b2:34:3d:98:c8:47:02:d7:c3:73:4a:
ef:31:54:4b:bb:01:54:12:8e:30:f5:aa:26:58:31:
d6:40:d8:eb:1d:78:e4:27:1b:60:68:16:df:1c:9f:
6d:dc:c6:c8:cf:2a:22:86:18:e0:44:e5:be:79:f2:
ae:7d:0e:ab:da:29:cb:f7:d9:b5:87:dd:d4:ad:7e:
62:c2:78:2c:72:b5:5d:b0:c7:8a:50:f6:fc:92:f5:
2b:c7:f9:f5:31:e0:87:b3:da:61:b9:59:12:2c:74:
74:f2:f3:ed:ef:8b:0e:4b:b1:7d:1e:9a:e1:3a:ba:
d9:aa:ec:67:bb:58:7d:06:b2:1a:4e:db:3f:f9:1e:
e1:0f:59:f0:04:0d:04:be:48:81:0a:cb:12:a4:30:
32:dd:56:0c:44:40:4e:76:35:23:e0:86:30:78:31:
89:d5:3c:70:c1:12:70:cc:68:1c:a0:ca:bb:8f:b2:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DE:7F:9B:31:4E:06:80:62:6E:7F:04:4A:D9:4A:91:33:CB:6F:D3
X509v3 Authority Key Identifier:
keyid:8E:95:48:4F:FF:3A:9F:61:8C:03:A7:96:21:D0:79:8D:24:86:50:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpVIT_86n2GMA6eWIdB5jSSGUHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65a2e2-74cf-4d8b-aad6-b2a13440f1a5/1/bd5_mzFOBoBibn8EStlKkTPLb9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65a2e2-74cf-4d8b-aad6-b2a13440f1a5/1/jpVIT_86n2GMA6eWIdB5jSSGUHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.237.0-46.255.238.255
Signature Algorithm: sha256WithRSAEncryption
15:73:19:06:84:2e:cd:2b:f0:20:50:49:85:90:80:2c:33:0e:
26:f2:10:92:20:d0:19:87:a5:b0:10:7e:6d:ee:b5:21:20:20:
c5:9a:f6:d5:66:ad:cc:a2:28:e6:10:5f:b2:52:42:4b:21:32:
c9:a7:77:20:05:17:5a:4b:de:72:59:3c:b7:1e:6f:ef:7f:b3:
f0:c7:39:61:c7:41:16:9d:9a:cf:af:8a:1f:61:d1:f7:e4:8a:
a7:d3:8f:dd:2b:1a:88:f3:e7:ab:76:c0:e8:9c:6d:90:ea:16:
29:07:bd:bd:18:d8:13:cb:83:6a:e3:59:7d:04:ac:2e:fc:ff:
a0:86:54:0d:8d:eb:8a:2f:0b:4e:d0:76:30:ab:dd:8d:1b:66:
b5:f7:d3:57:3b:54:48:19:6c:f9:47:fa:88:a1:90:61:ac:4e:
b5:f6:35:61:59:90:28:0d:d2:ed:f4:d9:3a:b3:08:65:a1:ab:
2b:cc:03:95:91:56:f8:77:0a:cf:15:c7:dd:04:d4:da:f6:ef:
99:1f:c0:a2:01:f6:48:b2:44:d1:13:a9:0a:21:64:65:21:bb:
8d:7e:4e:c0:7f:b3:13:07:08:1b:0b:b0:cf:6b:8a:20:fb:d4:
24:a7:e4:26:9e:f7:91:75:e3:bd:f6:81:bc:c4:4d:98:ca:68:
29:44:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:08 2025 by rpki-client