Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/JeQ3XbP7bAhmBU8PJbcmFEEVZr0.roa
File: JeQ3XbP7bAhmBU8PJbcmFEEVZr0.roa (raw, json)
Hash identifier: ytpChVsVzWEIJkZ1+VEdPwOYT76WjLmOJ1rCQ9RRyaU=
Subject key identifier: 25:E4:37:5D:B3:FB:6C:08:66:05:4F:0F:25:B7:26:14:41:15:66:BD
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 01856DCAE8162F6825F8DB4D2D06C6475425
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/JeQ3XbP7bAhmBU8PJbcmFEEVZr0.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 194.115.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e8:16:2f:68:25:f8:db:4d:2d:06:c6:47:54:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25e4375db3fb6c0866054f0f25b72614411566bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:2d:d2:5e:d7:fb:93:e9:7b:e9:ea:b2:aa:
15:1d:64:43:05:ec:65:ba:64:5c:dd:95:bd:b4:11:
65:12:3e:15:a5:70:98:5b:76:8f:2b:4e:79:98:f4:
7f:23:bf:31:4e:af:b3:90:13:cd:b2:45:50:60:8b:
ff:5a:d2:00:0d:0f:93:04:81:9d:c4:18:50:24:4e:
92:22:e9:ce:86:aa:53:31:b3:47:90:a6:a2:7d:ea:
c4:4b:c2:7a:d2:61:ec:c6:bd:c3:10:32:3b:86:41:
61:d4:f1:de:3b:ff:e1:c9:e5:b3:9f:76:0e:95:59:
25:f4:ae:eb:7f:a3:5f:cc:36:f8:42:b1:f4:2a:b8:
57:ef:88:a4:29:e4:41:6c:46:0e:32:f3:10:00:38:
aa:b3:c0:0e:1b:16:2b:cf:c1:9d:68:b1:d9:7d:59:
99:80:39:83:62:6e:96:04:24:ae:0d:dd:62:5a:aa:
db:8c:4e:39:24:34:02:14:2b:86:a1:a9:f7:fe:6e:
ff:e1:74:1f:30:b3:cf:86:0e:d4:ca:2b:5d:04:d0:
8e:76:0e:c3:3b:31:30:83:27:0a:12:67:0b:00:61:
41:cf:a0:42:82:f6:7e:c8:0a:8f:32:a6:94:d3:db:
73:f3:cc:d3:72:3d:68:69:42:5a:93:25:0f:d7:a9:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:37:5D:B3:FB:6C:08:66:05:4F:0F:25:B7:26:14:41:15:66:BD
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/JeQ3XbP7bAhmBU8PJbcmFEEVZr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.182.0/23
Signature Algorithm: sha256WithRSAEncryption
82:55:c1:a6:96:ad:1c:06:3e:df:ce:0d:2f:77:e0:7a:72:0c:
31:20:b5:0a:99:4b:e2:65:fe:3c:6c:82:46:47:8b:ef:17:f4:
97:cc:fb:05:9f:86:56:fa:bd:82:91:81:91:f0:2e:60:54:49:
27:3f:f5:e1:dc:ca:be:f2:2e:c6:8d:1b:b7:a4:f5:d8:89:6b:
8c:8d:a2:21:3f:e1:33:d7:d6:0e:91:e3:c8:b5:7d:c4:bc:09:
62:b4:41:8a:c2:b8:73:32:0c:eb:da:dc:db:39:95:56:e2:93:
a4:10:79:c1:9e:ad:e8:5a:91:9c:cf:1c:fa:9f:f0:2d:2f:3d:
9f:6d:d5:e9:e2:48:8d:a4:6b:be:c5:2e:0c:06:8a:64:df:51:
ae:aa:ad:ab:9a:f0:11:1b:87:61:c8:73:b1:bc:1b:56:47:6b:
c1:73:ca:3a:1f:b9:c5:0f:17:bc:db:d1:c4:52:42:7d:b9:9b:
c9:50:aa:46:53:87:02:a6:08:3f:b9:21:6c:77:6f:f7:a7:c6:
81:c3:07:e3:bf:05:3d:6e:84:d4:e9:df:f7:1d:7e:3b:c4:47:
2e:00:e7:e9:61:96:2e:e1:a2:d5:22:5b:64:eb:cf:c0:4e:35:
05:8a:c5:c1:1b:a6:73:04:73:ef:16:24:e9:8a:25:4d:cb:04:
ad:68:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:48:19 2025 by rpki-client