Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Jj_kzCN6pj4PjA0blh6JfoJ_Amg.roa
File: Jj_kzCN6pj4PjA0blh6JfoJ_Amg.roa (raw, json)
Hash identifier: +whLXHquOuo1MAzlcg72dG+bIrUaChPJlVp9H2JRQAw=
Subject key identifier: 26:3F:E4:CC:23:7A:A6:3E:0F:8C:0D:1B:96:1E:89:7E:82:7F:02:68
Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial: 0186C289C1E415C3041C3B282BEDDA88C208
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Jj_kzCN6pj4PjA0blh6JfoJ_Amg.roa
Signing time: Wed 08 Mar 2023 18:44:13 +0000
ROA not before: Wed 08 Mar 2023 18:44:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49352
IP address blocks: 213.189.195.0/24 maxlen: 24
213.189.199.0/24 maxlen: 24
213.189.194.0/24 maxlen: 24
188.93.213.0/24 maxlen: 24
188.93.208.0/23 maxlen: 23
188.93.215.0/24 maxlen: 24
188.93.214.0/24 maxlen: 24
178.21.14.0/23 maxlen: 23
178.21.13.0/24 maxlen: 24
178.21.12.0/22 maxlen: 22
178.21.12.0/24 maxlen: 24
185.38.16.0/24 maxlen: 24
185.38.17.0/24 maxlen: 24
185.38.18.0/24 maxlen: 24
185.38.19.0/24 maxlen: 24
194.67.64.0/24 maxlen: 24
194.67.75.0/24 maxlen: 24
194.67.76.0/23 maxlen: 23
176.99.4.0/24 maxlen: 24
176.99.9.0/24 maxlen: 24
176.99.5.0/24 maxlen: 24
176.99.7.0/24 maxlen: 24
176.99.8.0/24 maxlen: 24
176.99.6.0/24 maxlen: 24
176.99.5.190/32 maxlen: 32
188.93.209.127/32 maxlen: 32
194.67.106.0/24 maxlen: 24
188.93.208.172/32 maxlen: 32
178.21.9.0/24 maxlen: 24
62.113.93.0/24 maxlen: 24
2a02:f20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:89:c1:e4:15:c3:04:1c:3b:28:2b:ed:da:88:c2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Validity
Not Before: Mar 8 18:44:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=263fe4cc237aa63e0f8c0d1b961e897e827f0268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:72:f2:cb:29:9d:a9:cd:df:a1:e1:bc:1b:
f3:84:bf:e0:d2:e8:93:46:ab:38:37:e0:85:14:29:
dc:df:88:49:03:b8:b8:d7:20:d5:b6:6f:1c:58:8f:
86:4a:18:e5:88:37:fb:a9:cb:cf:ec:6a:43:36:cd:
f8:17:39:15:1b:15:3d:03:d4:76:d0:60:7b:7a:01:
d9:1a:e6:09:ec:de:67:f0:48:e9:d8:45:69:92:07:
78:92:26:f5:3c:4b:21:63:11:cc:f0:3b:d7:58:90:
95:13:dc:fd:ab:11:69:be:75:1e:30:46:ef:ee:dc:
9b:06:c1:d9:2b:0c:7b:2e:c5:ee:75:3c:40:2c:d0:
cd:04:c2:34:e8:dc:0e:d0:d2:ba:0f:66:0a:7c:7f:
ed:2e:29:85:77:2d:4e:10:bc:02:24:53:73:38:45:
58:0f:8a:e0:ae:3e:97:45:06:f5:77:b4:4d:9f:bf:
24:88:56:64:8f:18:39:26:a0:2e:df:35:2b:26:72:
0c:64:19:7e:bb:7f:1a:81:2b:78:a6:29:d2:76:13:
37:ec:b3:3a:cd:80:fa:c7:1e:a1:7b:7c:a3:46:26:
32:20:e0:62:b2:38:19:67:84:c1:dd:38:f0:bf:cf:
b9:35:5f:02:9d:09:39:b5:ec:e2:1b:03:5f:5b:fc:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:E4:CC:23:7A:A6:3E:0F:8C:0D:1B:96:1E:89:7E:82:7F:02:68
X509v3 Authority Key Identifier:
keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Jj_kzCN6pj4PjA0blh6JfoJ_Amg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.93.0/24
176.99.4.0-176.99.9.255
178.21.9.0/24
178.21.12.0/22
185.38.16.0/22
188.93.208.0/23
188.93.213.0-188.93.215.255
194.67.64.0/24
194.67.75.0-194.67.77.255
194.67.106.0/24
213.189.194.0/23
213.189.199.0/24
IPv6:
2a02:f20::/32
Signature Algorithm: sha256WithRSAEncryption
3b:79:5a:d2:f7:9e:5f:35:6c:73:9d:d9:11:af:7e:f3:43:47:
20:42:fc:08:43:b3:bb:ce:73:53:bd:10:ac:87:a0:8d:70:5c:
e9:9f:24:52:29:b5:aa:b1:a7:4c:b6:fb:19:fb:2d:d3:c5:1e:
08:dd:a0:81:ae:62:6b:8f:e4:d2:8b:8f:4a:6d:8c:2b:b2:c9:
4a:bc:4c:9f:66:01:1c:46:70:49:dd:0c:d0:cd:94:26:6b:06:
36:48:2c:52:54:2d:bc:fe:9d:44:60:9c:fa:15:18:5f:1e:ea:
65:09:0b:ee:78:14:21:19:ea:37:82:4d:8d:53:73:ef:27:74:
06:5a:e7:e3:4c:f9:30:c6:8f:a3:c5:67:91:88:12:f2:8a:f3:
b5:0e:a2:60:71:e5:5c:11:a2:73:f7:7c:08:3b:69:72:12:ca:
08:40:94:bf:f8:f3:bd:bf:0c:85:f9:01:69:6e:83:f1:f3:f4:
58:e3:10:cd:88:a7:6c:20:bf:68:aa:fa:de:0c:34:5b:70:76:
17:95:04:5d:8b:17:4e:2c:52:56:c5:f3:e6:f1:22:d5:b2:8e:
06:f0:76:f8:00:a5:00:68:b6:62:e8:24:48:3d:fc:0a:e1:93:
16:40:d9:66:aa:63:4d:73:8d:08:6d:89:c1:da:c0:99:75:58:
40:96:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:53:28 2025 by rpki-client