Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/jm-SaxtcGpvDKtpIN9M2tmoqhCM.roa
File: jm-SaxtcGpvDKtpIN9M2tmoqhCM.roa (raw, json)
Hash identifier: F5/9HeZvDvlfY3uC4mPGZKCHt9Lx/UkERh/ZIRW4uvE=
Subject key identifier: 8E:6F:92:6B:1B:5C:1A:9B:C3:2A:DA:48:37:D3:36:B6:6A:2A:84:23
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 018281985C5AAFF790D37E5D3A0617DA9299
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/jm-SaxtcGpvDKtpIN9M2tmoqhCM.roa
Signing time: Tue 09 Aug 2022 07:53:42 +0000
ROA not before: Tue 09 Aug 2022 07:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208752
IP address blocks: 217.199.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:98:5c:5a:af:f7:90:d3:7e:5d:3a:06:17:da:92:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Aug 9 07:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e6f926b1b5c1a9bc32ada4837d336b66a2a8423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:06:85:76:23:15:79:b2:7c:a7:a1:3e:34:
42:70:51:08:a2:28:99:7f:b2:49:ed:ff:16:77:11:
15:bc:40:b5:64:f8:a4:28:c0:2b:f1:5f:8a:ac:ce:
dd:06:be:03:f8:ed:cb:c7:69:dd:19:d8:31:e4:99:
0d:51:97:d2:05:6c:7a:43:95:fd:c7:d9:9b:8c:c1:
eb:76:e5:3e:b4:27:7a:2e:fe:05:22:c3:67:93:e4:
76:2a:2b:e0:b8:89:1b:15:67:27:7e:55:2a:8f:01:
f9:a5:b1:fb:65:6b:f9:d2:e1:8b:fa:0c:94:77:94:
6d:49:95:84:d0:87:06:58:23:67:39:7a:2c:c5:7b:
1c:6a:e3:a4:2c:3d:09:b2:bf:9d:2d:a7:b7:a1:5b:
75:2a:5b:4f:1b:3a:c6:8d:5d:1d:ce:99:60:88:16:
8c:20:fe:14:bd:5a:e9:04:fe:28:66:91:d0:3b:00:
d6:a3:04:a6:9b:9a:4b:86:cb:bf:ad:f6:89:f2:c0:
38:6f:0a:88:ae:8c:dd:54:4d:95:63:9b:cc:30:95:
cb:13:9f:a9:84:e8:9e:62:15:18:18:96:4e:ca:7c:
cf:1d:1a:e3:32:1d:bd:d2:5c:e4:bc:5a:45:a2:19:
9c:99:2c:ae:9c:13:14:b7:8a:29:62:4a:46:c9:69:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6F:92:6B:1B:5C:1A:9B:C3:2A:DA:48:37:D3:36:B6:6A:2A:84:23
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/jm-SaxtcGpvDKtpIN9M2tmoqhCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.199.217.0/24
Signature Algorithm: sha256WithRSAEncryption
36:21:f8:ba:1f:66:88:38:35:ba:4b:dc:6d:58:f1:3a:67:43:
7b:d8:20:39:b1:65:fa:1d:21:84:1b:6c:22:1b:b6:92:ed:f7:
da:db:e2:94:19:30:12:73:90:5e:64:2d:d9:b8:30:d7:21:ef:
a2:a5:79:47:3f:01:25:5b:2a:a8:06:4e:90:25:27:8f:99:9c:
ba:bd:42:fd:ea:4a:e1:d7:cd:60:2b:6a:bd:9c:b8:05:ac:09:
e0:42:19:b8:f7:7e:9a:d5:6e:6a:9b:09:a0:a7:7b:35:48:cf:
95:27:34:86:d0:86:5f:e4:d7:8a:f5:90:e2:93:8f:49:9e:c8:
82:c0:ff:b8:68:cf:aa:f0:fd:88:76:44:b6:e9:ff:06:02:c8:
54:b9:78:37:e2:51:b4:8e:50:7b:a7:b6:f7:fc:60:ee:b8:b9:
97:45:42:ea:e8:8c:21:a7:37:a3:a2:66:7e:f5:dc:c6:04:4c:
25:95:5a:17:4c:4c:65:93:62:17:f8:62:e4:9f:e1:75:e8:36:
2b:12:3a:60:16:0b:73:b6:1e:b5:be:a8:70:90:b1:ab:29:77:
29:34:25:22:4b:24:69:1b:14:fa:c0:65:52:8e:61:76:a8:c5:
6c:b3:41:af:28:da:b6:ad:a8:95:07:33:e8:a3:3c:38:3a:60:
6c:b7:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:49:07 2025 by rpki-client