Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/JA2LYj-oKJDSmUiYTio5uYbcCww.roa
File: JA2LYj-oKJDSmUiYTio5uYbcCww.roa (raw, json)
Hash identifier: Xhdsf9RP4ySE12qMDdU1U2B9l5RIY696aIV5a83tRm4=
Subject key identifier: 24:0D:8B:62:3F:A8:28:90:D2:99:48:98:4E:2A:39:B9:86:DC:0B:0C
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 018AE09A40689340CF4CE542515B50DC7B3F
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/JA2LYj-oKJDSmUiYTio5uYbcCww.roa
Signing time: Fri 29 Sep 2023 11:01:59 +0000
ROA not before: Fri 29 Sep 2023 11:01:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42093
IP address blocks: 194.48.214.0/24 maxlen: 24
2001:67c:1724::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:9a:40:68:93:40:cf:4c:e5:42:51:5b:50:dc:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Sep 29 11:01:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=240d8b623fa82890d29948984e2a39b986dc0b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:d0:cc:0a:4a:12:aa:fb:64:87:27:b1:74:
6c:2c:3c:2c:da:d7:19:53:9f:ac:39:99:d2:d7:76:
04:a3:9a:f3:6f:cf:20:e6:9e:06:43:dc:39:74:70:
25:b2:63:7f:af:a0:1d:cd:f4:a7:5b:04:af:3e:0f:
bf:ee:e2:35:9d:98:ba:25:fc:2b:cf:58:9d:f5:8a:
05:cf:f1:a9:1b:db:19:ee:7e:b0:93:3a:83:22:61:
9e:48:00:16:09:33:42:0f:c5:fb:2d:e8:42:d7:8f:
f7:bf:54:22:fb:e5:f7:c8:a4:84:cc:19:28:50:a7:
50:26:e0:10:8e:d1:b4:90:c3:6e:89:87:de:da:16:
84:2f:6f:39:e2:9a:51:e1:fd:05:11:91:55:e7:86:
17:01:82:b4:d7:9c:05:0e:b1:73:da:a1:39:ef:f0:
05:32:be:5f:e9:7b:43:6c:a3:db:5c:df:49:e9:8d:
9f:76:74:f3:02:93:05:23:dc:04:cf:ab:63:18:18:
a5:06:ef:55:e3:01:c2:dc:3e:95:ee:9c:44:77:2c:
f8:8c:36:6a:76:9f:90:18:f6:96:a1:18:a0:95:ac:
51:c9:d9:0d:e5:10:53:2f:c5:dc:7a:f6:35:70:8d:
2d:71:8e:59:ab:80:07:85:fa:40:3c:7e:5b:02:bf:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0D:8B:62:3F:A8:28:90:D2:99:48:98:4E:2A:39:B9:86:DC:0B:0C
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/JA2LYj-oKJDSmUiYTio5uYbcCww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.214.0/24
IPv6:
2001:67c:1724::/48
Signature Algorithm: sha256WithRSAEncryption
b1:5a:c7:56:34:ba:72:a3:09:05:e2:e4:80:c9:50:29:20:c1:
b2:95:89:d8:2a:e2:e7:68:e7:5b:d4:f6:8f:f4:21:54:ca:61:
a4:aa:e4:57:5f:f4:7f:47:85:27:2b:72:bc:de:ec:37:ed:4f:
3c:31:db:32:03:2e:bb:b1:47:55:1b:36:fd:5b:35:f8:fd:af:
ea:c0:b2:4b:0a:6b:96:eb:ad:2f:58:a1:33:5c:c9:02:6c:dd:
02:a5:e0:6e:bd:2c:9d:86:2a:97:15:29:0a:ae:78:63:16:fa:
52:f8:59:ae:ab:28:bc:39:99:eb:4f:e0:84:92:7a:45:37:1c:
bd:a9:95:34:40:3d:ad:ec:1c:e9:7d:7f:77:94:12:61:4c:0c:
a6:2c:81:8e:e4:48:65:f6:52:07:1f:88:e8:89:65:c9:1a:6e:
ae:26:01:3a:d5:6b:bb:01:7d:97:df:70:cd:d6:ad:70:ae:20:
a1:c5:b2:8f:98:d0:91:c4:71:cf:3e:a5:c7:55:d6:bd:ca:a5:
16:b6:6b:51:86:f9:5c:eb:b5:4f:23:31:a0:07:4b:5b:7d:36:
77:9c:f7:23:da:fe:4c:44:8b:5f:de:fb:ad:50:25:09:cb:d9:
eb:0a:ff:d5:3d:b6:c9:47:19:38:82:b4:c2:9c:89:64:56:39:
da:3d:3b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:02:01 2025 by rpki-client