Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/je-SDWtqjz4f4rPB9_GHfwZbD4c.roa
File: je-SDWtqjz4f4rPB9_GHfwZbD4c.roa (raw, json)
Hash identifier: P16rG5X/DjBOk9rqK0f7z0W4EM8EepC1cU6+GjhvxaE=
Subject key identifier: 8D:EF:92:0D:6B:6A:8F:3E:1F:E2:B3:C1:F7:F1:87:7F:06:5B:0F:87
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 0F
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/je-SDWtqjz4f4rPB9_GHfwZbD4c.roa
Signing time: Thu 17 Feb 2022 18:59:15 +0000
ROA not before: Thu 17 Feb 2022 18:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213052
IP address blocks: 2a12:4440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Feb 17 18:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8def920d6b6a8f3e1fe2b3c1f7f1877f065b0f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:1c:64:ef:b6:cc:da:f9:39:45:d6:b9:98:
b7:03:57:c6:99:fc:fd:23:40:13:42:11:d4:4a:1b:
d0:b5:3b:ef:24:85:fe:76:7c:cc:7c:96:b0:c2:5f:
e7:8c:99:03:3a:e9:79:4b:f7:9e:da:c5:cd:73:e9:
56:f3:bf:4e:31:c9:9e:53:9b:84:64:ad:b6:e1:ac:
24:45:13:63:22:c3:89:f2:b7:d3:9d:46:a1:20:f3:
45:34:fa:f4:d9:1a:bf:3e:82:73:63:29:3b:b3:52:
1e:b8:a6:9f:91:65:50:ff:60:a2:04:03:3e:61:bd:
4c:f5:1c:81:2e:fb:2c:f7:63:ed:31:ba:ab:2e:a2:
6f:54:9e:bd:48:66:4e:b0:65:d2:00:97:5d:e0:55:
a7:74:a6:07:39:51:94:3a:e5:c1:24:a6:2a:a0:0f:
dd:65:a5:1f:d4:89:18:6f:64:fa:87:b2:20:47:c9:
9b:fa:ad:38:72:38:e4:04:55:1c:c7:aa:2b:05:b4:
82:80:f9:60:ee:10:d5:62:58:1d:40:2a:f2:fb:20:
24:8b:32:e6:6d:83:f4:66:34:44:c0:25:e1:5d:b9:
e4:17:d9:51:df:e5:50:e8:2a:15:d6:7b:eb:5f:f9:
35:50:6a:d2:d4:69:93:d6:f6:da:1b:70:27:fe:10:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:92:0D:6B:6A:8F:3E:1F:E2:B3:C1:F7:F1:87:7F:06:5B:0F:87
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/je-SDWtqjz4f4rPB9_GHfwZbD4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4440::/32
Signature Algorithm: sha256WithRSAEncryption
6c:fe:a8:bc:11:9d:48:f3:98:86:67:7f:b0:e4:21:4b:f0:02:
c7:97:bf:61:48:ba:3e:c6:26:f7:2f:f2:3e:d7:72:9b:d4:77:
62:8d:40:60:66:71:05:c5:48:e1:60:a6:e6:0f:75:5f:9f:ba:
84:e1:27:2c:bc:73:80:9b:89:41:c9:7d:5b:4f:2a:a6:08:29:
72:d8:6e:ca:a3:28:73:ae:3c:ca:24:c2:da:b7:9f:eb:96:98:
af:a3:15:d4:98:10:58:fe:ad:af:86:8b:56:49:40:92:a6:24:
6b:ab:0f:e3:57:5b:e8:f8:f5:9d:fa:8b:a4:21:64:b6:49:43:
b6:08:f6:5b:62:5c:d7:12:0d:e2:92:9f:4a:63:d0:db:61:25:
45:49:ae:5b:5b:cd:87:5c:d1:96:e1:41:03:1a:0c:f1:9d:15:
0f:89:de:1a:61:4b:19:35:dc:b6:88:c1:90:74:83:0a:fa:f0:
64:ab:df:cd:b5:64:59:80:53:98:24:3a:b5:db:ec:af:15:cc:
bb:b5:f7:5d:d2:c3:5d:16:48:cb:5f:f5:b3:17:e0:6d:a7:33:
8d:00:42:3d:40:d8:31:c7:67:de:a6:71:90:4f:bb:ae:15:5a:
1e:7a:79:be:a6:6f:96:db:71:c8:4c:98:78:23:98:61:6c:54:
f2:d0:88:e2
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0ZmE1
Y2RlNTI0Zjc4MTBkNTg2OGJjNDlhYjBiZjY2MjFmNDRkYzIxMB4XDTIyMDIxNzE4
NTkxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRlZjkyMGQ2YjZhOGYz
ZTFmZTJiM2MxZjdmMTg3N2YwNjViMGY4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANtjHGTvtsza+TlF1rmYtwNXxpn8/SNAE0IR1Eob0LU77ySF/nZ8
zHyWsMJf54yZAzrpeUv3ntrFzXPpVvO/TjHJnlObhGSttuGsJEUTYyLDifK3051G
oSDzRTT69Nkavz6Cc2MpO7NSHrimn5FlUP9gogQDPmG9TPUcgS77LPdj7TG6qy6i
b1SevUhmTrBl0gCXXeBVp3SmBzlRlDrlwSSmKqAP3WWlH9SJGG9k+oeyIEfJm/qt
OHI45ARVHMeqKwW0goD5YO4Q1WJYHUAq8vsgJIsy5m2D9GY0RMAl4V255BfZUd/l
UOgqFdZ761/5NVBq0tRpk9b22htwJ/4QWMcCAwEAAaOCAgowggIGMB0GA1UdDgQW
BBSN75INa2qPPh/is8H38Yd/BlsPhzAfBgNVHSMEGDAWgBRPpc3lJPeBDVhovEmr
C/ZiH0TcITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUF
BzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q2
WE41U1QzZ1ExWWFMeEpxd3YyWWg5RTNDRS5jZXIwgY0GCCsGAQUFBwELBIGAMH4w
fAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RF
RkFVTFQvZTMvZDYwODhjLTMxMTAtNDFlMS1iOTk2LTMyZDRhZDhmNTZkZS8xL2pl
LVNEV3Rxano0ZjRyUEI5X0dIZndaYkQ0Yy5yb2EwgYEGA1UdHwR6MHgwdqB0oHKG
cHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvZDYw
ODhjLTMxMTAtNDFlMS1iOTk2LTMyZDRhZDhmNTZkZS8xL1Q2WE41U1QzZ1ExWWFM
eEpxd3YyWWg5RTNDRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggr
BgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoSREAwDQYJKoZIhvcNAQELBQADggEB
AGz+qLwRnUjzmIZnf7DkIUvwAseXv2FIuj7GJvcv8j7XcpvUd2KNQGBmcQXFSOFg
puYPdV+fuoThJyy8c4CbiUHJfVtPKqYIKXLYbsqjKHOuPMokwtq3n+uWmK+jFdSY
EFj+ra+Gi1ZJQJKmJGurD+NXW+j49Z36i6QhZLZJQ7YI9ltiXNcSDeKSn0pj0Nth
JUVJrltbzYdc0ZbhQQMaDPGdFQ+J3hphSxk13LaIwZB0gwr68GSr3821ZFmAU5gk
OrXb7K8VzLu1913Sw10WSMtf9bMX4G2nM40AQj1A2DHHZ96mcZBPu64VWh56eb6m
b5bbcchMmHgjmGFsVPLQiOI=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:55 2025 by rpki-client