Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/jPXoRp9hzKQRSVN_40Buzu_PLV0.roa
File: jPXoRp9hzKQRSVN_40Buzu_PLV0.roa (raw, json)
Hash identifier: sKcdBMa8+K9nNsiccMw1MukrzsoYjaMfXTAmT9ZegNo=
Subject key identifier: 8C:F5:E8:46:9F:61:CC:A4:11:49:53:7F:E3:40:6E:CE:EF:CF:2D:5D
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 0183C23D8BACD5DB289340B8FE9FF28F04A7
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/jPXoRp9hzKQRSVN_40Buzu_PLV0.roa
Signing time: Mon 10 Oct 2022 14:12:36 +0000
ROA not before: Mon 10 Oct 2022 14:12:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43108
IP address blocks: 185.242.184.0/24 maxlen: 24
2a13:6000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:3d:8b:ac:d5:db:28:93:40:b8:fe:9f:f2:8f:04:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Oct 10 14:12:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cf5e8469f61cca41149537fe3406eceefcf2d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:4f:37:c4:50:5e:86:1a:0f:20:09:bc:57:
47:27:90:54:b4:6f:e9:dd:de:79:f0:1f:fa:da:b3:
a3:6f:6d:06:c5:ef:34:c1:18:e4:73:72:25:31:9e:
4a:df:d5:23:4d:45:60:8d:f3:81:c3:fc:80:7c:64:
24:aa:78:81:49:f9:9f:9f:b2:02:b1:d4:5e:bb:4f:
e0:ee:43:7b:2e:70:c3:a9:8d:db:f7:0a:df:d5:ba:
ae:04:4d:8e:78:32:bd:4e:39:b4:cb:38:7c:7d:f4:
5b:30:94:d0:53:a2:34:0a:e0:02:f8:53:95:27:7f:
02:c2:e1:f1:84:fe:5b:6e:b4:ea:38:ad:43:ff:fa:
a3:e3:db:21:95:6f:77:2b:9c:a2:b6:6e:6b:0e:88:
5b:11:7e:ce:f5:4c:3d:30:d1:cd:05:79:fe:e7:f9:
55:d7:d3:e3:a8:04:a0:86:1c:61:25:c1:dc:df:09:
2c:5d:c2:57:a2:cb:18:3e:63:4b:e3:63:09:4e:4e:
75:c6:bc:a2:dc:39:ef:fe:ac:1d:5a:3c:3c:bb:1e:
de:0c:54:7b:0b:c5:ec:69:99:a7:7a:d3:9d:13:ad:
62:c8:c3:aa:4c:3d:81:c9:fc:77:dc:84:ae:47:f1:
50:92:25:1c:f1:a2:6b:d6:74:45:41:20:b5:69:0f:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:E8:46:9F:61:CC:A4:11:49:53:7F:E3:40:6E:CE:EF:CF:2D:5D
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/jPXoRp9hzKQRSVN_40Buzu_PLV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.184.0/24
IPv6:
2a13:6000::/29
Signature Algorithm: sha256WithRSAEncryption
6b:eb:2e:cf:6f:45:29:1e:1e:44:90:b5:37:b5:cf:a6:97:ce:
3b:14:11:87:c0:18:3a:04:26:51:fe:9d:a3:4c:f2:cb:47:d0:
0f:e6:bf:0d:8f:05:62:45:fc:bf:bd:c9:71:f9:15:e1:52:fd:
d5:a7:82:07:0d:7d:b2:56:dc:e9:22:23:82:80:b7:e8:b6:bd:
8b:3a:9d:9a:7a:85:bc:d3:bb:d8:33:44:67:83:3f:5f:df:95:
29:1f:47:d4:07:24:68:b6:92:5d:3a:0f:2d:bf:6e:9d:93:d0:
82:d5:79:22:a1:84:8a:95:a1:f8:f5:8a:8e:5f:f1:6c:0e:4e:
22:26:f5:87:7e:28:0f:3c:cb:d4:8c:56:d3:7b:0b:35:38:6f:
88:0e:80:c4:a6:2d:35:1f:f4:cd:8d:84:37:78:5c:c9:05:04:
96:d8:aa:b3:86:7b:3a:bd:bf:87:87:8f:25:3b:33:a6:44:f2:
92:3a:e3:37:79:b1:b6:15:ab:38:01:bf:0a:dd:23:19:21:75:
53:ec:25:7b:d8:b2:e2:20:52:41:30:02:9d:6e:d4:bd:79:42:
28:2e:c7:83:9c:86:f6:fe:53:38:60:64:ce:14:65:a1:42:e1:
77:52:f8:5b:34:b0:50:5c:29:6a:a6:5a:7c:f9:17:9e:67:98:
3f:62:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:27 2025 by rpki-client