Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/JabyWBLv8tvUiqhNhAq5z5m4kYc.roa
File: JabyWBLv8tvUiqhNhAq5z5m4kYc.roa (raw, json)
Hash identifier: qIZNbcWqw3eoPdH2g4i7DyuKAihK23EQiCZQ0dv9Qqs=
Subject key identifier: 25:A6:F2:58:12:EF:F2:DB:D4:8A:A8:4D:84:0A:B9:CF:99:B8:91:87
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 018698BB6ECE615498F86DA1B6C75B45ED0D
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/JabyWBLv8tvUiqhNhAq5z5m4kYc.roa
Signing time: Tue 28 Feb 2023 15:54:25 +0000
ROA not before: Tue 28 Feb 2023 15:54:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209500
IP address blocks: 193.31.7.0/24 maxlen: 24
83.229.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:bb:6e:ce:61:54:98:f8:6d:a1:b6:c7:5b:45:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Feb 28 15:54:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25a6f25812eff2dbd48aa84d840ab9cf99b89187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:9c:ec:e9:6c:71:1b:40:22:c4:c7:68:06:
74:53:4a:d9:12:ff:a2:ae:2f:7f:ad:4f:da:42:67:
14:db:a2:80:63:c1:8c:f0:10:ad:93:f9:89:77:1a:
42:2c:89:7a:e0:8d:79:7c:21:1c:1e:bc:4e:a2:95:
ce:5e:8a:06:c4:e2:57:ab:4f:51:a7:ce:10:6e:2a:
ba:d7:6e:15:66:96:7d:03:81:b0:af:55:b1:ff:d4:
5b:3a:00:c9:dd:ab:b8:51:e7:ef:e2:ed:4c:05:46:
3b:26:8f:4f:fb:fb:f0:fa:d8:7a:17:cf:58:a3:7c:
44:d5:5c:2f:60:98:31:b8:60:fb:ca:9a:9a:e7:fd:
93:21:aa:39:c6:88:64:34:c3:ed:09:86:8e:af:98:
f0:ee:51:11:9d:39:6d:32:d7:ac:67:fe:b6:b2:1b:
98:5e:38:91:03:ec:8c:cb:b1:5d:cd:86:5c:7e:2c:
af:e4:01:d6:a9:bb:d9:a5:3b:ac:91:bc:b2:d2:f4:
bd:d5:a2:a9:48:ca:43:5a:2b:56:21:8c:57:d4:7f:
f3:d2:32:b6:2f:96:84:0b:77:3d:d0:35:99:35:0d:
6d:54:de:c7:f8:d5:cb:62:d7:4e:16:f8:e4:df:bc:
8f:ba:f4:bc:c7:8a:57:74:2c:b6:e1:5c:ed:7e:7f:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:F2:58:12:EF:F2:DB:D4:8A:A8:4D:84:0A:B9:CF:99:B8:91:87
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/JabyWBLv8tvUiqhNhAq5z5m4kYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.62.0/24
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ea:92:7f:22:22:de:ba:32:cc:6a:92:7a:d9:d3:e0:6e:02:
1f:fe:b6:98:fd:e3:25:cc:61:0c:62:d3:1f:09:44:62:4c:9a:
97:ff:ef:14:7a:86:9d:14:28:0a:41:2a:b5:53:0a:04:3f:7a:
ec:6e:20:67:be:55:dd:31:83:55:e7:21:0d:1c:08:1f:d6:9c:
99:4d:c2:70:c2:96:95:ce:cd:02:5e:b0:e8:3e:33:70:33:e3:
69:15:04:dc:da:85:4b:e2:b3:da:7b:9b:fd:8c:15:26:0b:a1:
c1:a1:85:d7:e1:83:79:c7:20:38:31:18:e4:2e:e3:2b:eb:4d:
b0:eb:e2:87:5b:5f:db:a5:f0:6c:50:b1:08:38:c2:d2:65:b1:
c2:e6:33:19:bc:d4:d6:54:e1:ae:13:62:b6:8d:61:15:ff:96:
d4:12:a0:6f:de:ca:3e:a0:2d:93:ce:5f:61:f7:13:73:69:f8:
13:06:7a:a3:6e:cc:f9:3f:8b:b0:51:02:89:f6:49:57:ac:e7:
9d:4e:94:3d:1e:2c:6e:36:a4:f2:5a:d4:3c:82:05:e0:a5:14:
57:a1:58:b5:79:31:52:e7:89:d1:5f:ac:e9:60:be:ed:d9:5f:
03:66:f8:11:0b:c0:ce:07:c8:78:f7:03:9c:34:23:4e:9c:cc:
88:72:b4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:38 2025 by rpki-client