Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/g_j-EQ35dtOFxxpD7uz-jmy2Pfc.roa
File: g_j-EQ35dtOFxxpD7uz-jmy2Pfc.roa (raw, json)
Hash identifier: rbSmMOHZjGKt19+Vyry+Zix/KJ+wto4NjBwFuFnrrto=
Subject key identifier: 83:F8:FE:11:0D:F9:76:D3:85:C7:1A:43:EE:EC:FE:8E:6C:B6:3D:F7
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 894F54
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/g_j-EQ35dtOFxxpD7uz-jmy2Pfc.roa
Signing time: Sat 01 Jan 2022 00:52:48 +0000
ROA not before: Sat 01 Jan 2022 00:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205201
IP address blocks: 194.28.130.0/24 maxlen: 24
188.120.123.0/24 maxlen: 24
188.120.121.0/24 maxlen: 24
188.120.122.0/24 maxlen: 24
188.120.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8998740 (0x894f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Jan 1 00:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83f8fe110df976d385c71a43eeecfe8e6cb63df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:18:1b:a0:ea:dd:58:be:c3:e3:99:40:05:
9c:42:11:6f:7c:7c:a8:87:b5:0e:04:12:58:d3:c1:
c7:c1:01:e8:66:2c:74:9a:a2:b3:3f:75:4d:88:f3:
52:66:6d:b2:54:b2:b6:5c:40:bf:f2:6d:10:21:34:
6e:dd:c8:29:f7:95:39:0b:20:bd:2a:ee:92:b3:32:
94:aa:b7:84:1f:ed:10:f0:10:d5:1e:02:05:b6:f7:
15:08:b0:2b:88:20:be:dd:9e:d1:57:ec:4d:00:25:
fe:e4:ed:26:d5:87:3c:99:c3:01:25:df:f9:9d:70:
ce:80:cc:18:22:20:cd:c4:87:8f:64:50:d5:08:6b:
a1:9b:c1:35:af:df:56:55:a1:84:aa:86:ff:c9:18:
2a:1e:68:03:d2:59:c0:f1:94:6a:88:12:4f:18:95:
f3:90:aa:07:3d:45:99:b1:b3:10:a2:58:3b:16:96:
1a:ce:2c:f2:92:e1:aa:c6:1f:2b:7e:e2:0e:73:37:
14:a9:d0:9f:a5:b8:a3:12:66:f8:87:7b:1f:8a:a7:
a3:87:91:b3:e5:7a:e9:4e:61:28:c6:0e:ee:43:10:
dc:3d:f2:e0:4f:e1:d1:34:70:1c:e9:94:d3:60:3c:
ca:7e:52:92:74:be:01:6f:c1:07:82:67:87:04:74:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F8:FE:11:0D:F9:76:D3:85:C7:1A:43:EE:EC:FE:8E:6C:B6:3D:F7
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/g_j-EQ35dtOFxxpD7uz-jmy2Pfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.120.121.0-188.120.123.255
188.120.126.0/24
194.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cf:a9:79:eb:d5:b2:73:a3:c7:ac:b7:68:33:94:95:35:bf:
11:d8:55:8f:7a:a4:8f:75:49:fa:8c:88:51:c1:48:c8:3d:e5:
9c:32:a5:68:40:b4:36:e2:c4:31:d9:45:e6:1f:98:3a:f9:13:
2a:61:eb:6a:16:9f:7a:b6:f0:b2:e9:42:77:41:98:2b:ea:b5:
c0:30:1c:33:90:e1:05:88:97:b5:bb:f8:44:86:0a:84:b6:e6:
c4:45:8f:04:66:66:90:28:26:ec:9a:0f:49:35:42:5e:de:bd:
73:5e:4a:ff:27:fb:83:05:9a:aa:51:51:11:69:48:4a:fc:58:
5b:73:aa:6d:0c:f1:f9:2c:77:2b:4d:5e:f1:a4:d4:6f:b2:12:
e1:84:d0:bf:a2:40:23:f1:55:48:e4:e6:a7:4c:8e:d1:15:d3:
88:4b:2c:5e:b8:b4:04:15:1a:9f:6d:27:f6:ba:a2:00:d9:11:
2a:b6:5e:ca:94:83:06:12:76:b2:34:17:3d:08:55:b4:68:db:
d5:85:3e:04:fe:ca:40:5a:1d:07:1d:ac:9e:7a:ab:cf:70:a5:
bf:74:a1:cc:22:1f:39:50:4d:b1:af:53:5e:c4:9e:52:b5:b5:
0d:ff:09:8b:be:fd:2e:f4:34:e9:33:b2:5c:4e:63:2b:88:14:
20:08:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:17:45 2025 by rpki-client