Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/JDqqSJU28B4fWPLaMUIIUtoOLSc.roa
File: JDqqSJU28B4fWPLaMUIIUtoOLSc.roa (raw, json)
Hash identifier: FU6uJwf4QgQS618qZDYCN9BEouUzJfsAjVYCI6OjitI=
Subject key identifier: 24:3A:AA:48:95:36:F0:1E:1F:58:F2:DA:31:42:08:52:DA:0E:2D:27
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 01856D53CC735D4889DE5A86E3FDA4448FB8
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/JDqqSJU28B4fWPLaMUIIUtoOLSc.roa
Signing time: Sun 01 Jan 2023 12:34:46 +0000
ROA not before: Sun 01 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59480
IP address blocks: 95.215.220.0/23 maxlen: 23
2001:67c:1038::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:cc:73:5d:48:89:de:5a:86:e3:fd:a4:44:8f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Jan 1 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243aaa489536f01e1f58f2da31420852da0e2d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:cc:aa:e9:ba:84:8c:1f:29:a4:6e:7f:3f:
b9:59:7d:3e:08:54:4c:f9:3c:e6:fd:f9:a1:a4:03:
af:d1:b0:7c:30:16:06:c8:c1:43:5d:7e:4f:a2:cf:
80:b8:32:cb:71:dc:6b:7b:29:08:68:39:df:c6:05:
e1:d2:35:87:a5:4d:27:b5:bc:e6:3e:3c:c3:d1:52:
3f:0d:3b:03:78:15:2a:97:44:95:3d:98:49:28:5c:
c7:da:0b:08:b3:19:80:a1:98:99:47:8a:13:bf:92:
a2:5f:d8:9b:15:c5:cf:38:89:2c:30:37:c9:c4:b3:
c1:e9:8f:dc:69:9e:03:f7:1c:e8:dd:ca:6a:39:f5:
5d:ce:5f:91:f0:5d:a2:b7:28:55:39:ab:63:8c:cc:
54:92:8b:61:7d:52:91:8c:1f:75:d4:dc:4a:23:71:
3e:71:21:d7:42:89:7b:ea:ab:20:0c:86:dd:1b:f7:
4e:0a:b9:69:e3:51:25:84:a3:25:c1:d3:66:2f:26:
fc:7e:6b:a8:41:62:34:e0:0b:0b:b2:04:fc:6a:57:
64:b9:fc:7a:8e:79:ff:4c:a6:31:c2:9a:15:14:76:
81:11:d6:dc:a3:34:d2:6c:ce:75:db:2a:b5:75:77:
3d:9e:ce:f2:d3:bb:b5:76:16:93:b5:c4:89:28:59:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:AA:48:95:36:F0:1E:1F:58:F2:DA:31:42:08:52:DA:0E:2D:27
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/JDqqSJU28B4fWPLaMUIIUtoOLSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.220.0/23
IPv6:
2001:67c:1038::/48
Signature Algorithm: sha256WithRSAEncryption
5d:e7:a2:a4:b2:66:2d:d8:f1:11:39:65:d8:d1:21:95:c5:f3:
e6:5b:b8:88:7f:b5:9c:e6:6a:5e:26:23:5b:4f:2c:b4:42:50:
ca:16:d3:b7:06:0c:ed:71:8e:dd:71:73:6d:b0:cb:bf:63:c5:
8b:b6:5e:df:32:c6:70:4a:db:6e:f4:7c:fd:e7:42:2f:c8:88:
62:42:e9:a7:a1:84:79:a7:b8:2e:af:4c:f4:80:a8:e2:2a:15:
fc:da:00:f7:06:ad:0e:78:0f:b3:5d:f0:e4:1e:8e:ce:d6:88:
d0:ed:f3:05:f2:8e:91:e3:cf:21:e4:0c:a2:db:eb:52:c1:78:
52:07:8a:21:0f:6a:5e:72:6a:bd:0f:f0:47:68:53:a1:70:69:
bf:87:4a:9d:76:df:0d:ef:f0:bb:30:4a:54:9e:e6:f1:25:72:
29:5a:b0:a3:a6:c9:c8:22:c5:07:a7:f3:67:0a:b0:3b:ad:6e:
06:30:54:a9:6f:13:33:43:ec:51:cb:b1:46:8b:2d:32:f4:63:
5b:4e:c7:0e:29:74:79:65:16:94:06:51:bc:5d:b5:18:34:fa:
a7:4c:6a:30:86:59:bf:03:96:d5:12:6e:f9:92:d6:5c:e5:42:
39:1b:5a:a8:14:95:ac:f3:61:95:62:4f:58:ca:1b:b5:6f:cf:
62:37:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:09 2025 by rpki-client