Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jx-GNulbL7poG2jLI6srdEoB0gw.roa
File: jx-GNulbL7poG2jLI6srdEoB0gw.roa (raw, json)
Hash identifier: 07jJIYXChb+VkhJb193seBK/VvJRaaGdrbSO2Yv1sho=
Subject key identifier: 8F:1F:86:36:E9:5B:2F:BA:68:1B:68:CB:23:AB:2B:74:4A:01:D2:0C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01833DC79FE2D6B3AB778338AAB2E6379B52
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jx-GNulbL7poG2jLI6srdEoB0gw.roa
Signing time: Wed 14 Sep 2022 20:53:56 +0000
ROA not before: Wed 14 Sep 2022 20:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15723
IP address blocks: 46.23.103.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.200.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
185.81.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:c7:9f:e2:d6:b3:ab:77:83:38:aa:b2:e6:37:9b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 14 20:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f1f8636e95b2fba681b68cb23ab2b744a01d20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:eb:0b:01:49:cd:94:83:ba:eb:c1:5e:29:
2b:fd:6a:68:42:7d:69:fd:20:fe:07:b8:e7:69:dc:
20:cf:cb:84:81:e8:08:df:e6:04:c6:37:02:d2:10:
38:d6:1d:9d:a0:69:7a:bb:ef:6e:13:a9:5e:57:15:
f1:94:7a:04:d5:ab:1f:6b:0b:c7:1f:e2:20:98:53:
d4:54:ec:94:3f:02:5c:73:1c:85:e2:e7:f5:66:66:
07:89:ab:dd:4f:32:d2:5d:64:02:01:13:bb:cf:8c:
28:8a:d7:44:5b:1c:10:9d:6e:f6:8a:38:aa:31:d5:
3f:f2:4b:38:bd:90:48:e3:ba:c5:99:68:21:5b:76:
13:8d:d3:66:57:bf:13:91:7c:e6:39:2d:9e:cb:99:
8d:19:77:37:5a:bc:c5:d4:67:23:32:74:ff:38:c6:
29:6d:b5:e7:8b:46:b0:ab:ee:b5:3f:6c:04:e6:80:
51:c0:2d:b6:85:04:f8:5b:fa:67:e0:f4:2d:58:e1:
89:57:e1:82:da:16:6c:85:7a:59:06:01:6b:d5:02:
94:4e:80:bb:65:b6:a4:5d:d2:4f:de:99:e2:a6:71:
17:66:eb:e2:fe:cc:66:e0:31:7e:f4:69:40:b7:19:
27:5e:0e:27:92:d4:bd:62:08:5a:58:1a:2b:be:3d:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1F:86:36:E9:5B:2F:BA:68:1B:68:CB:23:AB:2B:74:4A:01:D2:0C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jx-GNulbL7poG2jLI6srdEoB0gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.200.0/22
46.23.100.0/22
185.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:a6:a9:ed:66:ba:31:e3:6f:26:63:67:18:0c:c8:0f:09:5a:
5a:3c:d7:9c:22:1e:61:5a:6d:06:a4:2a:df:38:12:4a:5c:c0:
ee:cc:57:6d:98:35:9b:38:04:b7:1b:4e:4b:cd:54:f7:90:ec:
29:04:f2:44:2c:5d:6e:e0:66:35:21:69:ec:06:df:6d:fe:b8:
75:a8:24:42:6c:e2:11:11:f8:95:d1:c7:f6:30:b8:5d:23:ad:
52:ae:ca:d9:73:71:35:74:44:0d:24:fa:83:48:6b:33:59:d3:
10:5c:a0:0a:d6:4e:5c:3b:08:b5:9b:d2:83:7f:c6:ef:f9:91:
89:f3:c8:02:06:83:f2:be:1e:f4:c8:35:79:88:5f:cf:3d:c8:
15:b5:28:cb:f0:cb:7c:1a:37:34:76:fe:00:83:33:3b:55:69:
2a:4b:36:d0:bc:23:66:20:47:92:53:0e:c6:e5:74:50:f9:3f:
8a:e7:f8:a0:c0:7f:52:b2:50:90:cd:0a:20:0f:5e:0b:3f:ed:
51:bc:7d:a6:ff:e6:63:b8:d4:a1:d3:86:62:ab:b1:39:38:35:
4d:96:3b:66:c0:1f:9d:c4:fb:2a:5c:fc:48:af:65:09:8e:c8:
bc:39:66:01:fe:60:e4:6f:f6:87:b7:c7:af:c2:a8:cf:ae:61:
22:0e:58:24
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYM9x5/i1rOrd4M4qrLmN5tSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjIwOTE0MjA1MzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjFmODYzNmU5NWIyZmJhNjgxYjY4Y2IyM2FiMmI3NDRhMDFkMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlljrCwFJzZSDuuvBXikr/WpoQn1p
/SD+B7jnadwgz8uEgegI3+YExjcC0hA41h2doGl6u+9uE6leVxXxlHoE1asfawvH
H+IgmFPUVOyUPwJccxyF4uf1ZmYHiavdTzLSXWQCARO7z4woitdEWxwQnW72ijiq
MdU/8ks4vZBI47rFmWghW3YTjdNmV78TkXzmOS2ey5mNGXc3WrzF1GcjMnT/OMYp
bbXni0awq+61P2wE5oBRwC22hQT4W/pn4PQtWOGJV+GC2hZshXpZBgFr1QKUToC7
ZbakXdJP3pnipnEXZuvi/sxm4DF+9GlAtxknXg4nktS9YghaWBorvj3wmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI8fhjbpWy+6aBtoyyOrK3RKAdIMMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvangtR051bGJMN3BvRzJqTEk2c3JkRW9CMGd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJYDIAwQC
LhdkAwQCuVHYMA0GCSqGSIb3DQEBCwUAA4IBAQCdpqntZrox428mY2cYDMgPCVpa
PNecIh5hWm0GpCrfOBJKXMDuzFdtmDWbOAS3G05LzVT3kOwpBPJELF1u4GY1IWns
Bt9t/rh1qCRCbOIREfiV0cf2MLhdI61SrsrZc3E1dEQNJPqDSGszWdMQXKAK1k5c
Owi1m9KDf8bv+ZGJ88gCBoPyvh70yDV5iF/PPcgVtSjL8Mt8Gjc0dv4AgzM7VWkq
SzbQvCNmIEeSUw7G5XRQ+T+K5/igwH9SslCQzQogD14LP+1RvH2m/+ZjuNSh04Zi
q7E5ODVNljtmwB+dxPsqXPxIr2UJjsi8OWYB/mDkb/aHt8evwqjPrmEiDlgk
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:15 2025 by rpki-client