Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/JFjIuPh4YI-AkOJUPJVQ_11MgjE.roa
File: JFjIuPh4YI-AkOJUPJVQ_11MgjE.roa (raw, json)
Hash identifier: QAS5k5UiFwbu4c/EBfBwqQJe9OFePZHEIV6QXuoOBD4=
Subject key identifier: 24:58:C8:B8:F8:78:60:8F:80:90:E2:54:3C:95:50:FF:5D:4C:82:31
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018A1ECB1435C31B163837D3384E9E4F25EB
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/JFjIuPh4YI-AkOJUPJVQ_11MgjE.roa
Signing time: Tue 22 Aug 2023 19:49:00 +0000
ROA not before: Tue 22 Aug 2023 19:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213360
IP address blocks: 193.38.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:cb:14:35:c3:1b:16:38:37:d3:38:4e:9e:4f:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Aug 22 19:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2458c8b8f878608f8090e2543c9550ff5d4c8231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:3e:79:91:b0:ad:54:44:dc:48:30:c4:7f:
64:c5:bc:3a:ca:71:22:6e:1b:8f:bc:9d:30:3f:16:
29:3d:60:ef:74:2a:9d:82:fe:33:66:a0:38:69:65:
c5:d4:e9:42:52:64:63:00:bb:60:80:fd:fd:a2:15:
c2:fb:37:f9:73:63:93:6e:69:99:f7:43:bf:91:cc:
32:a3:16:bb:af:73:c2:88:e4:a5:80:1a:3f:76:8b:
ed:91:23:6f:11:aa:06:e7:85:35:b9:d8:38:c8:d5:
db:a6:d7:01:2c:03:48:b3:67:93:f8:49:d5:01:13:
ea:0c:25:80:1d:05:40:3b:44:aa:79:f5:1c:8b:39:
16:60:3e:ed:39:c0:13:d7:65:5c:28:5b:db:d7:6c:
c9:e6:67:71:33:96:bf:00:ca:22:98:7d:11:4f:84:
52:24:c7:d2:0c:07:9c:fe:6a:d7:09:cf:bf:a6:08:
e2:99:e7:ae:6a:10:a8:d9:0d:cf:83:85:64:af:9b:
cb:77:63:ec:ef:f2:67:ec:50:ab:0c:67:7f:44:8a:
2e:ac:ba:f7:3a:d0:71:f4:20:d4:1d:e4:64:9b:27:
46:4b:bb:4e:fa:c4:17:e3:bb:83:91:ea:7c:ad:10:
23:17:d3:4e:5d:fb:ad:a4:33:10:b3:8a:cc:9a:a9:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:C8:B8:F8:78:60:8F:80:90:E2:54:3C:95:50:FF:5D:4C:82:31
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/JFjIuPh4YI-AkOJUPJVQ_11MgjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3e:5d:46:05:d7:2c:99:b5:01:80:b1:ef:60:cd:b3:70:72:
6e:bb:19:4e:e1:40:29:c6:d8:41:f2:c2:13:e0:b7:4d:bf:02:
8a:fe:4a:ed:5e:fb:32:04:85:ae:da:1d:72:23:08:64:ce:66:
7d:88:d7:f7:46:0c:95:29:a9:60:17:fd:59:a3:09:6f:8d:44:
18:5a:b8:5b:ba:a7:3e:35:85:b4:8e:c7:48:77:a9:54:38:76:
6a:e7:2f:e7:94:d5:8e:f5:86:73:e6:f3:02:1f:bf:cb:f0:9d:
bb:29:93:64:1d:a5:be:91:92:85:64:6d:36:4f:28:af:f3:75:
c4:4c:1d:60:ef:31:f7:8c:51:7d:a4:4c:20:f3:4f:01:ec:7d:
8a:fe:70:d0:a1:2e:b8:b3:dc:98:4e:f3:62:10:98:e6:b3:53:
24:19:d4:42:75:fb:e7:93:ca:d6:1e:09:0a:6d:b5:f7:c7:21:
03:52:c2:d1:86:ab:06:07:0a:76:00:23:8b:fd:e3:47:4c:fd:
b7:c3:35:73:87:a4:b5:ad:fb:21:b2:c6:17:2a:0c:be:f5:9b:
53:17:e5:25:fa:64:9d:13:35:63:dd:bb:2d:08:d1:7c:65:73:
86:0e:5b:c3:89:ef:83:31:f7:6e:ad:27:0d:33:58:48:ba:aa:
0f:34:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:16:57 2025 by rpki-client