Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jIffflB2w9HAQGbJZ-s13MtK74A.roa
File: jIffflB2w9HAQGbJZ-s13MtK74A.roa (raw, json)
Hash identifier: 4jiGkwtgka0Jp4XVWt4ALAlHn45b/Kfrp/JnDL8Z4Rs=
Subject key identifier: 8C:87:DF:7E:50:76:C3:D1:C0:40:66:C9:67:EB:35:DC:CB:4A:EF:80
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188E50959573981978A3467A0968689F657
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jIffflB2w9HAQGbJZ-s13MtK74A.roa
Signing time: Thu 22 Jun 2023 21:36:15 +0000
ROA not before: Thu 22 Jun 2023 21:36:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.126.82.0/24 maxlen: 24
176.125.248.0/24 maxlen: 24
185.194.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e5:09:59:57:39:81:97:8a:34:67:a0:96:86:89:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 22 21:36:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c87df7e5076c3d1c04066c967eb35dccb4aef80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:07:cc:c4:c7:b5:b7:72:8c:45:e1:6f:64:
48:71:76:a0:16:e5:14:54:33:be:a8:57:20:93:d6:
e7:02:b6:1d:7e:2c:f4:01:3c:2f:a2:7f:3f:6b:0b:
b5:17:8d:9d:fe:a8:7c:77:5e:3f:4e:f2:e9:0c:b7:
cb:7a:e8:92:7a:9c:ab:3d:f1:9d:2c:1d:02:83:56:
26:46:7e:4e:aa:d9:8f:11:62:76:1f:db:0c:d5:34:
d2:db:8b:63:f0:62:e5:6b:5e:0a:e6:85:66:26:aa:
7c:7a:1f:f3:a7:ff:44:eb:f2:cf:d4:ed:e0:c3:27:
28:15:5a:ce:ac:e6:85:45:b1:ea:da:78:a1:d9:a5:
f2:b5:04:77:5f:65:af:f4:e3:88:00:29:63:79:2b:
42:24:6d:f5:71:0d:c5:7c:b7:05:ca:4e:70:b2:1e:
94:6a:0a:dc:9c:69:c8:2e:67:29:84:11:d0:b2:42:
11:d3:60:50:61:04:17:96:e0:4c:96:ee:8a:1f:bc:
ce:9c:6f:3c:26:e0:f8:d3:c1:44:1a:bb:6b:9e:e5:
8f:dc:9b:a0:92:1f:a4:3f:96:16:76:ab:0c:37:4a:
26:8e:d7:69:3f:d2:02:69:7e:9e:62:f4:be:0f:ad:
6a:7e:6c:87:37:67:68:aa:1c:75:21:fc:3b:44:5f:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:87:DF:7E:50:76:C3:D1:C0:40:66:C9:67:EB:35:DC:CB:4A:EF:80
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jIffflB2w9HAQGbJZ-s13MtK74A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.126.82.0/24
185.194.176.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1b:3c:bc:86:64:06:8d:0e:57:c7:29:16:e4:5c:f5:2e:35:
9b:e1:45:05:cc:b1:c9:4e:24:37:87:61:88:10:fd:86:b2:36:
a1:59:e1:b2:9b:d6:e0:e9:33:6a:69:ea:be:0b:38:e5:f7:9b:
dc:dd:0a:d7:cd:6d:ab:fb:1c:f2:64:a7:ec:eb:cb:4d:c3:71:
0c:8f:e5:ad:76:fe:b5:e5:ad:a3:f2:40:70:68:31:87:ae:02:
4d:61:2d:48:b9:d4:56:db:be:6c:f5:f7:58:5c:05:af:b4:1d:
5d:16:8a:9b:f0:eb:94:15:0e:8c:a7:65:40:5b:dd:b9:a7:c3:
b6:4d:c2:b9:01:e7:0c:bd:63:37:a3:8c:8c:e2:c1:ed:dd:76:
45:3a:cd:48:a2:f7:8c:7d:ad:e7:80:b4:c4:f0:c7:17:2b:fc:
f4:cb:b8:ce:cb:c8:47:49:12:54:e4:95:ae:b2:cf:e5:72:d4:
ab:46:af:f1:5a:6a:40:e0:72:8c:a3:dd:0c:a3:78:44:93:e3:
db:7d:28:9e:85:8d:7f:2d:37:69:eb:16:77:9a:da:04:c1:1f:
d4:cd:73:38:30:db:a1:9a:5e:cc:05:19:74:03:f1:89:a6:ad:
c5:d8:d6:4f:f3:63:a6:8d:a4:22:cb:3b:8f:71:7e:0b:8d:0b:
95:89:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:36 2025 by rpki-client