Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/jPxTXPoAnePnbzfG3aqVNRfiunk.roa
File: jPxTXPoAnePnbzfG3aqVNRfiunk.roa (raw, json)
Hash identifier: a4uKsJjxb6ytxXWGltZPZrOE437LubWK/gEu7AOsqmM=
Subject key identifier: 8C:FC:53:5C:FA:00:9D:E3:E7:6F:37:C6:DD:AA:95:35:17:E2:BA:79
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 17B79A23
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/jPxTXPoAnePnbzfG3aqVNRfiunk.roa
Signing time: Sat 01 Jan 2022 14:01:16 +0000
ROA not before: Sat 01 Jan 2022 14:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58027
IP address blocks: 192.94.233.0/24 maxlen: 24
2001:67c:1b00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397908515 (0x17b79a23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Jan 1 14:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cfc535cfa009de3e76f37c6ddaa953517e2ba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:95:93:6e:b4:77:77:83:1c:80:f9:99:4d:
97:48:4b:10:a6:44:7b:b3:2c:f2:61:c7:76:62:9b:
d8:6f:59:5a:94:37:f4:55:a0:31:08:60:b2:b7:45:
ee:83:b4:9d:9d:f4:27:32:e1:ee:55:a5:d9:d8:06:
90:7f:82:52:ae:d5:ac:c1:2e:06:15:e1:97:0a:e5:
f2:6d:c2:f8:d5:45:72:15:8f:79:bc:9c:ea:02:14:
8c:4e:72:5a:18:0e:c6:93:fb:ec:74:ad:32:08:52:
76:98:74:bf:c9:fd:32:c7:b5:c6:79:45:6b:29:9b:
74:76:8c:3b:87:7c:65:a6:97:89:0c:d5:3b:c5:df:
ca:c9:c8:7f:c2:de:3d:92:a9:41:8f:b1:e9:42:db:
82:fe:33:1c:30:eb:bd:23:02:e2:d7:9a:73:66:cb:
5a:3f:d6:60:1b:ed:b8:9b:dd:f3:f8:2e:7b:1e:6b:
18:cb:9f:73:9e:3f:73:d3:9a:39:3f:4d:55:de:8b:
e5:69:c5:e4:ae:9d:39:16:9d:4d:9e:75:0b:f7:f5:
59:df:a4:38:7b:5c:8e:47:22:7e:89:65:21:67:83:
ad:11:4d:11:74:81:73:ad:e1:a2:59:b9:df:36:ba:
cf:6d:2e:54:e6:16:0f:ab:41:0a:ac:ec:c6:ce:54:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FC:53:5C:FA:00:9D:E3:E7:6F:37:C6:DD:AA:95:35:17:E2:BA:79
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/jPxTXPoAnePnbzfG3aqVNRfiunk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.233.0/24
IPv6:
2001:67c:1b00::/48
Signature Algorithm: sha256WithRSAEncryption
6c:cf:a3:3d:90:83:c5:7c:87:be:73:41:cc:82:88:0f:ef:ad:
c5:53:5c:b9:76:78:54:8e:53:1b:62:e4:99:ca:36:c2:d0:32:
f1:fa:39:cd:1d:94:56:09:27:8d:cf:db:25:86:37:4f:d2:97:
ea:01:91:cc:22:d3:07:98:f7:74:07:03:ac:d0:4d:94:b8:7d:
1a:03:00:70:54:ee:82:ff:17:d3:e4:28:fd:56:5e:65:5f:27:
b6:dc:b9:db:39:ec:9e:9d:c2:ea:55:81:9b:bf:82:ba:fe:e4:
dd:61:8b:91:39:76:e6:86:68:af:2d:67:5a:0e:e7:10:85:64:
02:35:50:21:ac:61:c8:8a:76:9c:e0:66:09:f5:49:7a:bb:24:
ce:e7:03:12:2a:49:e3:9a:14:22:31:a6:19:7d:93:b9:48:14:
e2:da:99:75:ff:7d:86:5f:ca:20:6e:9f:94:90:ec:a7:7f:58:
5f:00:d3:1a:20:87:cc:e5:1f:89:0c:23:cf:1d:ba:d2:84:1e:
03:53:fc:3d:85:c0:58:98:f2:2e:8a:a0:8f:45:66:38:09:ff:
67:57:84:fe:02:80:78:ba:69:4a:a3:57:f0:2d:fc:a8:9d:4f:
7e:2a:c5:e8:c2:99:a6:4a:df:d9:88:1c:07:30:de:6f:d5:ff:
28:eb:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:44:58 2025 by rpki-client