Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/JXBlbidyehvtAQ74gEEwlK_-m60.roa
File: JXBlbidyehvtAQ74gEEwlK_-m60.roa (raw, json)
Hash identifier: 4e+GI/2UfZv4HQy7miKhZ66ByQ7TquC+EdDiTNHtOuM=
Subject key identifier: 25:70:65:6E:27:72:7A:1B:ED:01:0E:F8:80:41:30:94:AF:FE:9B:AD
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 0804C037
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/JXBlbidyehvtAQ74gEEwlK_-m60.roa
Signing time: Sat 01 Jan 2022 07:01:34 +0000
ROA not before: Sat 01 Jan 2022 07:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204457
IP address blocks: 185.248.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134529079 (0x804c037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Jan 1 07:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2570656e27727a1bed010ef880413094affe9bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:4a:c1:30:55:f0:b4:b9:ae:a7:5f:1b:cb:
d9:37:8a:de:7e:df:ac:33:b0:be:58:f8:a6:49:c8:
5e:44:34:65:15:74:4f:a3:a3:de:3c:d1:91:a6:1b:
1f:26:8e:6a:18:c8:7e:32:4d:fc:52:cd:96:6a:36:
1d:01:30:2d:50:6d:82:68:92:71:23:c2:d3:14:26:
7e:c8:59:0d:dd:09:ea:58:2f:32:76:ef:52:57:d1:
20:6e:cb:51:3b:4e:7b:c7:e5:16:39:28:49:64:de:
0f:65:5d:9a:75:77:ed:f4:99:5e:b2:6a:86:37:62:
52:f2:c8:ae:83:a6:d1:71:3c:d4:45:0e:33:16:0f:
09:4b:b2:81:a6:37:c7:36:16:06:85:cb:f4:63:a1:
56:14:fe:bf:c6:28:2d:61:f6:a7:44:42:d4:82:7e:
fa:6b:12:22:73:fc:43:f2:8c:d8:d9:73:58:97:ee:
ed:5f:b9:b7:a1:48:1b:e7:4b:39:5e:57:19:27:e4:
11:b6:a8:bc:1c:88:5d:83:f3:4c:30:e0:3f:e9:ac:
a8:7e:7b:15:03:3b:91:72:c1:71:d4:7d:ea:7e:b2:
c2:27:57:2a:7a:80:ec:90:29:80:e2:ea:95:8b:06:
85:75:a0:ed:d7:31:c1:f4:02:f8:6f:40:99:6b:7b:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:65:6E:27:72:7A:1B:ED:01:0E:F8:80:41:30:94:AF:FE:9B:AD
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/JXBlbidyehvtAQ74gEEwlK_-m60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.12.0/22
Signature Algorithm: sha256WithRSAEncryption
98:5a:41:a6:53:21:49:38:16:06:4e:20:84:95:5e:22:b6:80:
6c:52:a8:c9:da:94:21:be:7b:41:d6:3d:14:42:59:94:5c:8c:
d0:e3:ca:8d:e3:1a:26:ae:6c:ef:c9:86:3f:c1:c5:6b:81:5d:
d9:7e:fb:7a:cc:b1:85:f5:68:b4:d6:d9:6a:1d:e3:14:e0:2f:
56:31:42:ef:73:18:7a:f6:23:4f:59:40:74:a3:da:f5:cc:68:
f5:38:8a:72:e3:dd:4c:4d:61:7f:6e:db:e2:ca:60:ef:fe:bd:
10:4b:d0:9b:2c:61:e8:f1:27:7f:2c:0d:54:01:cc:d1:93:7b:
7a:f4:b9:a2:eb:72:e0:ae:d8:5b:ca:5a:44:e9:f2:37:55:45:
09:79:a4:3c:74:18:85:1a:7e:48:12:bb:c6:83:cb:1b:61:b3:
f2:e1:4f:bc:a8:c1:cf:94:8c:89:29:25:6d:95:bd:51:5f:bc:
be:dc:00:8c:42:97:78:21:06:67:a6:02:0d:83:3c:94:b5:50:
a0:ac:39:e8:62:80:76:6d:c3:aa:f8:67:6e:c6:04:c7:48:44:
3d:9a:1c:4d:8f:3f:76:43:dc:f4:e2:fe:af:d8:f6:c0:6a:26:
82:fc:bc:da:39:24:ab:36:7c:46:dc:09:d1:8b:53:60:43:49:
52:30:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:57:30 2025 by rpki-client