Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/jqd3MASG9WkhSme7JcgmKNpGEF4.roa
File: jqd3MASG9WkhSme7JcgmKNpGEF4.roa (raw, json)
Hash identifier: +3SmsmlFNmjkS+v6c8e5RBwo0E6gTHnOE+jZFbQW8b0=
Subject key identifier: 8E:A7:77:30:04:86:F5:69:21:4A:67:BB:25:C8:26:28:DA:46:10:5E
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 08CCD3A9
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/jqd3MASG9WkhSme7JcgmKNpGEF4.roa
Signing time: Sat 01 Jan 2022 10:02:20 +0000
ROA not before: Sat 01 Jan 2022 10:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209635
IP address blocks: 185.185.78.0/23 maxlen: 23
185.185.79.0/24 maxlen: 24
2a0f:a0c0:fffe::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147641257 (0x8ccd3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 1 10:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ea777300486f569214a67bb25c82628da46105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:80:a1:72:e7:b8:16:88:0d:bf:1e:43:cc:
0d:b8:ba:67:b5:40:66:4e:d8:4d:a9:a7:38:d3:24:
57:32:ac:db:0d:2a:b6:93:b5:2a:8a:3c:ca:84:37:
14:6b:18:94:86:f8:24:89:bf:63:2e:19:81:1f:42:
af:7c:59:25:1e:a3:1d:a7:89:32:40:a7:c5:a4:4c:
fe:b2:44:7f:a6:11:04:63:cc:2b:dc:93:93:41:54:
14:9e:5d:bc:f2:b9:74:85:4f:db:ee:db:36:c8:3a:
f9:85:0b:3f:09:23:c6:d8:3a:f0:f2:1a:86:29:75:
33:7e:8c:65:cc:11:e6:0f:53:a9:bd:aa:92:17:d9:
65:2b:85:8b:9e:1c:a5:ed:d5:7e:6a:b8:d7:01:4c:
77:00:1d:d5:4f:f5:fb:9c:43:4c:6e:47:70:16:cc:
ca:9f:06:8e:a3:df:d0:59:03:65:cc:22:7c:a2:77:
71:65:8b:c9:c3:5c:3d:e6:8e:84:36:9b:69:6d:a8:
25:a0:2c:88:1b:51:a5:4a:19:6d:c6:0f:be:12:f6:
28:3d:76:01:d5:7e:31:0f:fe:28:d7:41:c4:9f:bc:
4c:45:24:21:f7:b6:c4:0a:9b:f3:b2:44:00:1f:47:
e0:49:ea:d0:f0:a7:02:ad:88:f6:a7:c9:f2:55:cf:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:77:30:04:86:F5:69:21:4A:67:BB:25:C8:26:28:DA:46:10:5E
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/jqd3MASG9WkhSme7JcgmKNpGEF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.78.0/23
IPv6:
2a0f:a0c0:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
9a:31:6a:12:86:57:34:8d:5e:03:44:95:3c:a8:43:b4:73:9c:
bb:96:e7:11:f8:d1:f4:48:5b:f1:a8:7e:95:fd:21:fe:b8:4b:
11:c7:7c:b8:41:0e:e8:64:29:0b:9b:aa:04:dc:e7:a7:07:2d:
02:e1:e2:c9:8c:08:26:d3:64:73:f8:7c:46:93:5d:b3:5b:63:
aa:fc:6e:3c:5f:b2:b2:57:b1:a1:d2:8c:b0:68:f2:36:ef:fc:
d3:30:88:92:20:4e:f2:70:43:97:ed:63:60:21:b2:b8:d4:f2:
87:10:cc:75:ec:41:17:65:44:70:cf:56:6e:2d:a1:dd:98:a6:
0a:09:8d:1f:00:9b:9c:8f:e9:0f:ec:04:4c:50:41:32:0f:36:
ab:dc:29:46:cb:74:1e:96:ea:f4:64:76:23:0a:08:92:0c:67:
04:5e:ac:c2:73:a1:65:36:b7:cc:06:39:41:cd:f6:3b:1d:a0:
69:dd:82:42:2f:a3:6e:9d:ca:e8:21:35:6b:8a:3b:d1:be:a6:
9d:f2:9c:08:5c:d9:7e:21:ca:cc:ec:3e:59:37:bd:5d:c7:44:
1a:14:e2:35:65:79:47:c8:31:45:f4:fc:67:8d:32:31:6e:fe:
cd:95:6b:5a:db:76:6a:79:e9:bb:71:78:b1:a2:d6:71:76:e2:
a4:e5:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:37 2025 by rpki-client