Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/jAZbOvgVohLvBeTVXmveNJzZrZg.roa
File: jAZbOvgVohLvBeTVXmveNJzZrZg.roa (raw, json)
Hash identifier: 1qFRQly9Ygb8ZG963D0Z0xG9OgGws9bqcq8XJCOrk0M=
Subject key identifier: 8C:06:5B:3A:F8:15:A2:12:EF:05:E4:D5:5E:6B:DE:34:9C:D9:AD:98
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 0189B102A394176FC840D64C541EA5700F64
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/jAZbOvgVohLvBeTVXmveNJzZrZg.roa
Signing time: Tue 01 Aug 2023 12:11:27 +0000
ROA not before: Tue 01 Aug 2023 12:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48847
IP address blocks: 185.12.223.0/24 maxlen: 24
185.12.222.0/24 maxlen: 24
185.12.221.0/24 maxlen: 24
185.12.220.0/22 maxlen: 22
185.12.221.152/29 maxlen: 29
109.233.21.92/30 maxlen: 30
109.233.17.0/24 maxlen: 24
109.233.16.0/24 maxlen: 24
109.233.16.0/21 maxlen: 21
109.233.20.0/24 maxlen: 24
109.233.19.128/25 maxlen: 25
109.233.19.0/24 maxlen: 24
109.233.18.0/24 maxlen: 24
109.233.23.0/24 maxlen: 24
109.233.22.0/24 maxlen: 24
109.233.21.0/24 maxlen: 24
109.233.23.0/30 maxlen: 30
109.233.19.128/30 maxlen: 30
109.233.20.196/30 maxlen: 30
109.233.21.100/30 maxlen: 30
2a03:6900::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:02:a3:94:17:6f:c8:40:d6:4c:54:1e:a5:70:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Aug 1 12:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c065b3af815a212ef05e4d55e6bde349cd9ad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:be:ba:ee:c4:2b:7b:49:36:03:ed:65:f4:da:
32:c4:17:bd:58:19:67:b9:79:d1:36:97:24:9c:b1:
25:70:d8:98:8a:57:5f:f8:45:b1:95:30:ae:f2:7d:
9b:3b:2a:b5:f0:f6:c6:32:a1:0a:f9:38:05:cf:a9:
0d:6d:34:84:4b:45:d7:fb:62:86:34:48:38:67:5a:
ca:66:e9:f0:d4:6a:bd:76:62:82:2c:9c:d3:c0:a9:
20:55:d2:e4:81:82:a0:0b:49:90:e4:3a:4d:28:45:
9b:d7:84:3c:aa:58:d8:a2:c1:77:98:96:ef:a2:26:
8a:d1:34:be:4c:df:50:12:7e:15:25:0c:03:64:a9:
84:9a:99:66:c1:61:b3:7d:f3:74:a7:05:9f:93:fd:
7b:8a:26:11:bb:1b:86:ca:4e:20:9a:7a:80:f9:f8:
3d:89:c8:70:1c:38:54:92:01:00:b9:14:f8:2b:49:
b3:0e:ee:8f:99:5e:8e:84:f6:08:cb:4c:03:da:19:
b0:80:17:b6:6a:6d:f5:79:aa:39:54:20:d2:47:db:
75:e7:49:f0:18:78:a3:e3:8f:f7:9c:27:28:35:25:
17:97:98:8c:93:92:39:6b:9d:b6:8b:0a:00:1e:fc:
ab:61:ae:98:eb:b5:10:69:09:7d:31:09:f0:81:2b:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:5B:3A:F8:15:A2:12:EF:05:E4:D5:5E:6B:DE:34:9C:D9:AD:98
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/jAZbOvgVohLvBeTVXmveNJzZrZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.16.0/21
185.12.220.0/22
IPv6:
2a03:6900::/32
Signature Algorithm: sha256WithRSAEncryption
03:13:eb:18:e3:1b:c0:58:0a:c5:09:77:86:db:b5:f5:72:3d:
aa:03:70:72:da:5a:00:fc:d1:9c:6e:40:e7:39:42:cd:61:2c:
ba:9b:8f:11:5c:f6:25:a7:0f:37:d5:ed:13:3d:3b:eb:e5:e2:
e2:d4:0c:74:3d:8b:65:67:2e:e3:82:8a:a6:b4:f8:27:e9:1e:
05:c9:f2:14:e0:d5:81:63:95:21:7d:e5:8a:5f:51:b2:87:9b:
a7:d7:91:30:33:d2:a3:2b:34:84:f1:c8:b5:b0:5a:a8:90:36:
bb:0e:08:6a:9c:24:48:07:5e:49:16:e1:19:97:36:51:ea:03:
b6:25:cb:29:e2:c6:91:37:36:21:76:44:95:2c:18:3a:98:e6:
9a:6c:fd:cf:f1:45:28:81:b4:0f:54:1e:22:e3:84:e4:cd:ea:
a6:f3:8b:af:ff:ba:31:12:62:23:8a:0a:fa:4e:15:94:d9:d3:
4c:d7:52:cb:53:96:90:5a:61:73:e7:ea:27:09:be:6a:7d:02:
13:40:c0:23:1b:cd:8e:2a:ef:ab:65:ea:3b:e6:15:8e:a8:cf:
f5:5e:84:2f:98:eb:5a:49:10:88:df:d1:45:55:94:c2:61:d0:
9d:a9:6d:37:52:21:6f:80:3a:8b:5e:c2:c8:75:ab:38:70:1e:
1d:c4:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:54:26 2025 by rpki-client