Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/JxJVfgiwbghL9ZxZuQKIfs2NqRo.roa
File: JxJVfgiwbghL9ZxZuQKIfs2NqRo.roa (raw, json)
Hash identifier: 1fylfD7yU5ufOT/lIR+pQDs3hu9NnFDjPRlnhHr8vk8=
Subject key identifier: 27:12:55:7E:08:B0:6E:08:4B:F5:9C:59:B9:02:88:7E:CD:8D:A9:1A
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 01856F428D24C2E5FA0B94281C704C3AF2C1
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/JxJVfgiwbghL9ZxZuQKIfs2NqRo.roa
Signing time: Sun 01 Jan 2023 21:35:10 +0000
ROA not before: Sun 01 Jan 2023 21:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199995
IP address blocks: 185.76.68.0/22 maxlen: 22
185.151.84.0/24 maxlen: 24
185.109.54.0/23 maxlen: 23
185.151.85.0/24 maxlen: 24
185.109.52.0/24 maxlen: 24
185.109.53.0/24 maxlen: 24
185.151.86.0/24 maxlen: 24
185.151.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:8d:24:c2:e5:fa:0b:94:28:1c:70:4c:3a:f2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Jan 1 21:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2712557e08b06e084bf59c59b902887ecd8da91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:d9:61:ef:ce:28:ac:03:0d:0f:40:3e:e5:
bc:51:41:26:49:10:34:4d:9f:87:b2:7e:f3:fd:2c:
ae:60:42:53:df:33:32:1a:23:f1:7c:8b:16:c5:f1:
a3:37:ca:61:cb:78:d1:42:22:aa:ec:eb:06:61:20:
d3:0c:57:3d:7d:5f:4f:5b:ad:20:67:3e:59:ef:71:
bf:02:5a:00:b7:ba:46:8a:80:ee:29:f1:9a:71:18:
1c:ce:de:ac:77:5d:50:cc:3c:d2:d4:2c:3a:8d:64:
5c:8b:10:00:7d:02:53:d4:7d:96:6f:03:1d:d8:1f:
b6:bc:a3:bc:f4:c6:58:59:e4:5a:9e:66:d2:6e:e1:
be:9f:96:43:0f:ef:9f:df:3c:25:7e:d5:fd:b4:15:
21:6f:82:02:9b:35:5a:4d:ad:00:6c:0c:74:5b:40:
5a:9e:24:86:e5:62:d1:21:a4:6b:8b:83:8b:75:db:
d0:83:f9:c5:77:35:20:68:ef:b5:f2:3f:99:a2:04:
28:ca:6d:47:55:93:c4:90:61:db:6e:85:14:f3:1d:
6e:e7:c4:87:29:99:04:5e:23:0f:49:75:6a:41:01:
c3:1a:32:8b:0f:03:e1:bb:8e:b9:db:a5:5f:19:68:
db:c8:d6:2e:f5:6b:2b:90:a6:2f:0b:c0:16:0f:bc:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:55:7E:08:B0:6E:08:4B:F5:9C:59:B9:02:88:7E:CD:8D:A9:1A
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/JxJVfgiwbghL9ZxZuQKIfs2NqRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.68.0/22
185.109.52.0/22
185.151.84.0/22
Signature Algorithm: sha256WithRSAEncryption
47:6a:a4:bb:61:71:17:69:71:28:dd:e0:8f:8c:e7:38:30:3b:
7c:f1:63:9f:c1:37:83:ef:33:59:3f:1f:34:21:d1:f1:9d:8c:
21:0c:aa:a7:03:68:a8:bf:30:f0:b4:eb:cf:aa:73:c9:e1:7e:
33:bb:78:0e:21:3a:21:fa:a6:fb:24:6d:3e:64:8f:59:11:f3:
1b:4e:7f:9a:7f:c9:e1:49:29:f3:29:6f:3d:46:df:b4:16:b4:
c3:1f:07:0c:6d:6b:a5:72:1e:34:f3:9c:65:e6:77:4c:41:d8:
85:17:1c:d4:94:fc:33:b1:9f:39:37:c4:6d:58:01:41:ee:96:
74:2b:3a:73:e2:a7:16:a0:4d:94:b8:be:b9:b7:e8:16:3a:8c:
79:67:2b:46:07:1b:06:a9:74:80:6f:73:98:43:c9:f3:d9:33:
ac:63:f7:55:60:d1:26:80:2b:84:3f:1f:4c:8a:0c:bd:57:05:
08:20:9d:ba:fe:3e:19:10:dd:19:45:21:5f:a3:0c:fd:c5:74:
cf:47:88:95:d3:8c:4e:b0:56:a1:e7:69:60:76:71:80:af:42:
f6:fd:37:ec:fb:cc:f4:25:09:ac:a4:d4:11:f9:f3:20:c3:68:
8b:9d:d8:35:a0:64:53:4d:3d:cc:56:1b:69:eb:fd:eb:95:86:
f4:8f:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:56 2025 by rpki-client