Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/J_sTWo_7jogLu-NkAtylj9QyaQw.roa
File: J_sTWo_7jogLu-NkAtylj9QyaQw.roa (raw, json)
Hash identifier: jG2D9mwSPs82vZ58LOtd+7WN7iGx0I8aKYsXSK7gf6g=
Subject key identifier: 27:FB:13:5A:8F:FB:8E:88:0B:BB:E3:64:02:DC:A5:8F:D4:32:69:0C
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 01856C0A2C5C304CFFBB93B2399CF065BD53
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/J_sTWo_7jogLu-NkAtylj9QyaQw.roa
Signing time: Sun 01 Jan 2023 06:34:44 +0000
ROA not before: Sun 01 Jan 2023 06:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39010
IP address blocks: 185.38.28.0/22 maxlen: 24
185.95.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:2c:5c:30:4c:ff:bb:93:b2:39:9c:f0:65:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Jan 1 06:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27fb135a8ffb8e880bbbe36402dca58fd432690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:b1:e6:93:3e:d5:58:21:ae:b7:60:a8:cf:
08:a2:d1:53:68:fb:7e:7f:5c:68:9a:29:fe:04:80:
23:6a:c7:ca:1c:98:cf:10:93:db:89:63:e9:1b:6f:
10:57:1e:43:cd:27:87:3b:f1:5a:91:10:ec:e7:91:
ca:25:e3:cc:6a:87:84:bf:c3:d8:f9:2c:2f:de:e4:
c5:03:ed:17:93:8a:68:0e:2b:79:da:65:b2:71:1a:
92:82:84:8f:ac:41:c8:e1:b5:89:5b:7d:75:af:77:
33:f8:39:f1:f9:db:9a:c4:71:34:ec:65:78:dd:7f:
66:c8:0d:74:14:2f:0d:fe:99:c8:7a:79:a7:ee:ff:
f6:36:c6:cf:3b:45:a6:45:f6:9a:23:36:55:5a:77:
e2:50:6e:fb:93:ef:95:03:22:ee:9d:7f:b3:0e:70:
f1:69:5b:b0:fe:86:97:30:5d:b0:75:79:fa:d5:a5:
2c:9c:3d:e2:f5:a7:02:3f:61:d8:86:b9:2e:ff:bc:
78:e7:59:ab:12:57:66:7a:69:6c:ab:30:ba:f1:1c:
70:f0:a5:32:2e:cb:e8:90:bc:9b:6a:96:3d:eb:44:
e2:6e:23:ad:29:79:0e:0b:09:e4:9b:a1:46:09:7c:
83:5d:6e:09:63:aa:5a:29:5a:a5:2a:9f:57:c1:c6:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:13:5A:8F:FB:8E:88:0B:BB:E3:64:02:DC:A5:8F:D4:32:69:0C
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/J_sTWo_7jogLu-NkAtylj9QyaQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.28.0/22
185.95.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ed:68:2e:61:15:f3:be:b2:d4:21:3b:0c:92:d5:63:56:04:
03:54:8f:6e:e7:d4:90:79:b1:c7:89:3f:3c:1c:b0:9f:9e:89:
e5:ab:63:fd:0c:44:70:83:be:37:87:12:81:98:c8:42:59:17:
db:98:89:33:fc:9b:e7:00:29:ee:b7:00:d3:d8:03:8a:c5:53:
db:72:8e:05:a6:92:03:bc:5d:72:3d:59:2b:b1:86:bc:44:28:
4f:0f:95:c6:86:f5:ba:5e:34:ca:18:43:a4:ff:8f:b9:94:07:
9d:97:13:18:b7:06:8d:c0:ec:f2:13:f6:71:bc:c3:b2:bc:09:
40:ab:1a:e5:83:e2:9f:93:7b:8a:9e:dd:e1:00:68:3e:b3:a5:
db:94:d7:7d:92:1b:81:65:2d:dd:7a:b1:02:3d:00:90:7f:32:
3a:1e:d8:0a:90:cf:b3:c8:c4:f3:15:c5:46:05:3a:ba:1e:36:
2b:0c:52:eb:b2:d3:e8:2a:43:42:f3:5b:d8:f7:1c:d5:d0:a8:
08:72:50:d4:d7:a5:24:cf:7a:7a:cb:a4:24:1e:1c:64:7c:c8:
67:e2:c1:cd:9a:c8:87:f9:52:d4:17:ed:59:52:3c:17:32:18:
e6:2e:7a:3c:2b:ea:9e:44:77:80:ff:fa:31:d0:a4:0a:62:27:
3e:3b:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:10:17 2025 by rpki-client