Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/JR0Wx1SHHKx5U_bbNb4cZlWJRU0.roa
File: JR0Wx1SHHKx5U_bbNb4cZlWJRU0.roa (raw, json)
Hash identifier: vEftOYnQyv5vPdtOxR7++KTpVXMg2P3AxJfRXmA8/HI=
Subject key identifier: 25:1D:16:C7:54:87:1C:AC:79:53:F6:DB:35:BE:1C:66:55:89:45:4D
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 01857102CD441992522AA402C40D1D2CCFFD
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/JR0Wx1SHHKx5U_bbNb4cZlWJRU0.roa
Signing time: Mon 02 Jan 2023 05:44:47 +0000
ROA not before: Mon 02 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12302
IP address blocks: 194.102.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:cd:44:19:92:52:2a:a4:02:c4:0d:1d:2c:cf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jan 2 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=251d16c754871cac7953f6db35be1c665589454d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:14:cd:a9:20:a3:98:60:35:7f:f6:98:fc:
7e:d7:eb:c6:50:19:3e:02:cf:9c:17:2c:aa:4e:51:
c9:ac:c9:90:87:97:27:61:0c:af:9f:2e:20:cc:1d:
a1:1e:e2:ab:21:17:e3:23:f1:21:75:1c:75:9c:ec:
a4:54:48:9a:f8:21:fa:2d:35:ae:cb:b3:bf:97:a8:
01:a7:a4:0c:69:a4:51:6f:90:f5:ac:92:1b:84:5b:
25:9e:8f:8c:c2:a5:9f:12:3a:4b:eb:fd:50:84:60:
a7:de:1d:f5:4b:f0:c1:f3:f7:65:55:e6:1f:0e:85:
9b:80:03:ae:25:c1:6f:8c:ce:af:b3:ed:58:79:d0:
e3:70:bd:df:79:c4:ac:d4:11:cf:fe:37:b1:3a:ed:
0a:74:df:5e:f9:41:49:da:ad:55:9e:44:fe:53:5b:
5a:fa:1f:e9:af:d5:7c:41:53:3d:5e:25:1f:32:7f:
83:78:8f:2b:6b:14:44:2f:5e:6d:0f:93:57:f8:f3:
c4:fc:cf:3d:4b:77:84:f2:cb:26:e4:cb:46:22:de:
34:c5:13:70:a1:25:88:e2:e0:cc:ec:a5:d2:0c:45:
7b:a3:20:e6:6b:74:a4:31:dc:09:96:72:0a:dc:17:
bd:89:9d:d1:2a:90:e1:15:0b:e3:62:85:19:1f:04:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:16:C7:54:87:1C:AC:79:53:F6:DB:35:BE:1C:66:55:89:45:4D
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/JR0Wx1SHHKx5U_bbNb4cZlWJRU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.127.0/24
Signature Algorithm: sha256WithRSAEncryption
33:be:8d:45:2d:70:05:f6:1b:10:ce:09:c2:17:f2:5a:29:62:
20:c2:44:8e:ee:03:82:61:20:7d:62:7f:7e:a6:86:4c:7c:1b:
49:8e:26:aa:f5:0f:39:bd:a6:e2:00:3b:65:55:0f:5b:f4:23:
60:05:74:14:29:e6:f4:74:f8:a4:2c:2d:d2:ea:77:cd:b6:1c:
7b:45:8e:c6:45:7a:5f:18:ad:b1:43:dc:e8:55:24:02:ce:e2:
75:a2:95:17:0a:fc:60:56:06:05:76:d1:da:09:0b:95:f8:d7:
22:84:5f:f2:40:e9:1c:e0:c6:b1:ba:e5:bb:4f:cd:66:c2:a9:
a0:6b:4c:ec:ca:d1:a7:60:be:41:a2:f3:9b:12:6f:72:92:13:
78:9a:2c:de:14:46:44:ef:c2:c2:4c:02:93:04:a7:fb:80:a6:
69:4c:59:92:62:76:62:14:d5:78:18:bf:5e:b5:bb:e1:0f:31:
ed:11:13:86:88:73:fb:62:8c:5b:c3:7b:3f:5a:e0:d8:da:4c:
fe:6b:fc:31:47:17:23:23:68:16:aa:48:6d:6b:f8:24:aa:20:
d2:ed:a3:07:ee:8d:b7:d7:cb:63:af:77:db:a2:62:8c:75:b6:
10:f7:6e:89:64:50:33:2f:e1:b0:9f:4b:2d:04:ee:8f:85:a7:
0a:af:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:42 2025 by rpki-client