Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/J3h-DDyZIaMd0d0tW8WxkmiwZsM.roa
File: J3h-DDyZIaMd0d0tW8WxkmiwZsM.roa (raw, json)
Hash identifier: 2evKQE0wy4v+xizIxVJqvaLjjJIKBY5m52sgUt9X8Gw=
Subject key identifier: 27:78:7E:0C:3C:99:21:A3:1D:D1:DD:2D:5B:C5:B1:92:68:B0:66:C3
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018CAA2A7556D0717CAEA64613D64E4F447D
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/J3h-DDyZIaMd0d0tW8WxkmiwZsM.roa
Signing time: Wed 27 Dec 2023 07:25:58 +0000
ROA not before: Wed 27 Dec 2023 07:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29555
IP address blocks: 85.117.98.0/24 maxlen: 24
85.117.96.0/24 maxlen: 24
85.117.97.0/24 maxlen: 24
85.117.99.0/24 maxlen: 24
85.117.102.0/24 maxlen: 24
85.117.100.0/24 maxlen: 24
85.117.103.0/24 maxlen: 24
85.117.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:2a:75:56:d0:71:7c:ae:a6:46:13:d6:4e:4f:44:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Dec 27 07:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27787e0c3c9921a31dd1dd2d5bc5b19268b066c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:da:13:01:bd:55:58:f6:5c:53:cb:9f:a2:
a1:04:dd:c5:c8:8d:05:b6:56:99:c7:8a:64:c9:63:
30:17:9e:08:ed:31:c2:71:f9:88:d4:bd:07:5d:af:
40:93:e3:7e:ff:ae:f4:84:01:1a:de:24:c2:93:20:
9f:10:20:31:a9:d4:f8:0f:72:c4:c7:0d:22:00:c5:
ec:67:8f:b0:12:07:8a:45:e3:a5:d4:3f:e0:cd:0c:
34:b8:2b:4a:18:3e:8b:08:e4:33:53:14:19:1d:9a:
40:05:d8:27:64:e7:e9:2c:65:f2:db:cc:9d:e6:e0:
5a:12:d4:f0:52:95:cb:02:4c:ab:6b:d9:39:15:71:
be:cf:9e:86:e1:fb:fc:03:80:23:92:c5:21:1b:63:
11:2f:c5:c2:cd:8c:b2:ee:7d:47:ea:f4:ce:2d:22:
83:8b:b1:0c:1d:82:33:11:c7:13:ed:0f:36:c6:7c:
53:cd:ec:83:95:bf:e5:91:36:75:b3:8e:74:e0:cf:
44:bc:90:5d:0b:2c:a9:1a:2d:0b:7a:ea:2c:f1:c8:
72:35:cc:19:11:fe:3c:b7:60:66:a9:79:12:db:df:
83:e3:af:f0:7d:f3:58:02:bc:05:e5:41:e9:ed:93:
bc:1f:fb:1a:70:61:e2:0d:2a:23:39:9a:cd:8d:5b:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:78:7E:0C:3C:99:21:A3:1D:D1:DD:2D:5B:C5:B1:92:68:B0:66:C3
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/J3h-DDyZIaMd0d0tW8WxkmiwZsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0/21
Signature Algorithm: sha256WithRSAEncryption
54:6a:17:c5:92:71:92:8f:d0:07:a2:dd:1e:91:0b:a1:ca:ec:
5f:39:e3:51:fa:ae:dc:51:b9:dd:d5:9e:2c:4e:44:a5:55:74:
42:d0:10:80:ba:36:6f:1c:28:e9:f9:e6:c2:5a:95:d1:7d:41:
62:76:5a:d6:b4:4f:19:7f:65:60:7c:18:ae:81:99:c0:c7:29:
60:cc:cd:26:20:81:e1:75:d6:cf:f1:1f:7b:81:1c:1c:38:5e:
06:de:3d:d4:cd:af:c8:28:00:88:41:0b:88:92:9b:66:0a:ca:
a4:93:e9:9a:98:78:f8:ce:a5:15:cb:3b:42:55:59:65:f9:8e:
2f:0e:8c:7d:8a:5e:07:e6:41:6c:84:ba:7b:be:0e:2e:5a:84:
00:ad:94:56:93:ad:fa:2b:37:b3:e2:22:7d:6b:52:52:14:82:
ba:cc:4e:11:09:dd:99:cb:7d:2a:36:dc:c3:f0:78:6c:8d:e1:
09:cf:f5:cb:a0:92:f9:03:32:57:25:16:36:ef:2a:16:cc:fd:
8f:24:2e:f0:de:2d:7d:e9:2b:7a:02:13:74:f9:10:1e:8b:c4:
bd:6d:6f:21:94:49:c7:d9:a3:6b:28:cd:2a:25:c8:c5:8f:8b:
5a:aa:27:ee:5b:2b:16:cd:d6:2d:fe:e7:34:80:59:db:61:fc:
a7:fe:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:19:11 2025 by rpki-client