Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/js5Le7W9c1NsS_Kkv7wzZg4xCAI.roa
File: js5Le7W9c1NsS_Kkv7wzZg4xCAI.roa (raw, json)
Hash identifier: r4tJpCN1Q9aRXpYgC+AlzIjDJMK3iRuS1SDw4IOSTD4=
Subject key identifier: 8E:CE:4B:7B:B5:BD:73:53:6C:4B:F2:A4:BF:BC:33:66:0E:31:08:02
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0A164603
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/js5Le7W9c1NsS_Kkv7wzZg4xCAI.roa
Signing time: Thu 28 Apr 2022 07:53:01 +0000
ROA not before: Thu 28 Apr 2022 07:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34376
IP address blocks: 85.14.31.0/24 maxlen: 24
82.119.93.0/24 maxlen: 24
85.14.35.0/24 maxlen: 24
85.14.33.0/24 maxlen: 24
85.14.32.0/24 maxlen: 24
85.14.32.0/22 maxlen: 22
85.14.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169231875 (0xa164603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Apr 28 07:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ece4b7bb5bd73536c4bf2a4bfbc33660e310802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:f3:f8:e5:c1:29:a9:3d:1c:71:bb:2c:2b:
2a:49:3f:87:9d:ea:53:28:6c:b7:5a:c3:d0:26:a6:
10:4b:a7:b5:1b:e8:c3:fd:a8:c7:6b:4b:06:7e:ff:
ca:b6:63:88:3a:eb:97:d3:87:55:34:7c:90:d5:f6:
0b:70:c2:93:5b:5a:5e:0d:d5:a9:00:74:4b:52:f0:
cc:5c:77:ae:45:d9:67:c2:f1:9b:c4:49:bb:18:69:
5d:ef:a6:c8:a2:8a:1a:d8:4a:12:f6:32:13:a5:96:
92:3f:73:89:20:d4:e3:30:23:1b:f4:2c:1d:60:8f:
b5:ac:fe:4a:a7:81:6f:46:09:f3:5c:4a:7d:b3:1f:
a9:53:a2:86:8c:13:0b:89:67:b1:a9:1c:37:ee:96:
da:43:b1:77:2c:36:30:32:72:25:a8:1c:21:97:46:
8d:75:39:49:9c:14:4a:60:75:21:9a:64:39:c4:8c:
15:34:ce:37:e7:fe:87:96:02:36:39:07:a9:e6:b6:
3c:ec:e5:65:d1:81:6e:0a:ad:c3:96:06:c9:85:ff:
34:40:f4:9d:a2:06:6a:ec:8e:03:95:47:e3:34:5d:
02:c9:93:78:6b:dd:04:23:35:81:6d:87:59:99:bd:
8e:68:7a:3c:7f:47:c4:58:e5:54:53:e6:06:f3:be:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CE:4B:7B:B5:BD:73:53:6C:4B:F2:A4:BF:BC:33:66:0E:31:08:02
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/js5Le7W9c1NsS_Kkv7wzZg4xCAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.93.0/24
85.14.31.0-85.14.35.255
Signature Algorithm: sha256WithRSAEncryption
27:b2:86:b6:88:b0:8d:38:41:5d:9c:39:4c:80:b2:3f:13:1e:
bb:ed:38:10:f4:e8:45:93:76:b7:99:91:dd:1c:74:92:19:50:
35:2b:23:07:f8:83:0f:84:27:66:88:5e:d3:75:eb:d6:f8:5a:
0e:51:e6:11:40:ec:83:3a:a0:29:56:5d:7d:98:98:82:56:c3:
88:ce:cc:33:2f:72:4a:70:2a:d4:d6:79:64:f6:a4:06:2f:b7:
5e:20:0f:19:45:fa:d2:5c:2b:6e:a2:fc:1f:bf:b7:d8:20:c7:
db:46:3e:09:93:c7:be:77:80:6a:89:cf:11:a0:62:c1:77:a1:
02:0a:67:b2:10:84:c7:aa:3c:27:57:64:89:82:a4:f3:f5:27:
0e:95:4a:a2:16:05:b1:3f:38:1e:7c:24:60:f9:f1:07:7f:4c:
23:5c:1b:e4:62:24:10:b6:f5:b4:bb:de:3c:10:86:28:ce:ff:
c4:53:a7:f8:0e:59:8f:79:6d:4a:59:85:b0:28:7b:ca:25:47:
44:39:a8:a0:8d:30:89:0c:75:7b:17:4b:32:af:40:aa:b3:f8:
0a:9f:58:80:84:7e:74:77:91:b7:17:8b:a3:36:81:81:e4:38:
33:cc:b4:6c:7b:44:33:85:d4:4e:6a:df:1a:5f:1d:a1:1f:09:
a9:ea:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:54:01 2025 by rpki-client