Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/Jplq0lwp92wiWpawihjHJZqsr8s.roa
File: Jplq0lwp92wiWpawihjHJZqsr8s.roa (raw, json)
Hash identifier: AbKeGGHfiypEjvmf4w8WtX6qifS+sTEWszRlqWK0hG4=
Subject key identifier: 26:99:6A:D2:5C:29:F7:6C:22:5A:96:B0:8A:18:C7:25:9A:AC:AF:CB
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 01867413256ACDB1A13B9B80785B959129C0
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/Jplq0lwp92wiWpawihjHJZqsr8s.roa
Signing time: Tue 21 Feb 2023 13:04:17 +0000
ROA not before: Tue 21 Feb 2023 13:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51139
IP address blocks: 178.249.228.0/22 maxlen: 22
178.249.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:13:25:6a:cd:b1:a1:3b:9b:80:78:5b:95:91:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: Feb 21 13:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26996ad25c29f76c225a96b08a18c7259aacafcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:7a:83:80:a9:df:11:89:00:05:61:8d:cb:
35:c2:b7:4a:b6:94:0f:0a:df:44:da:d1:1c:1e:d7:
bb:47:19:b7:e0:0d:2c:c7:77:1b:26:af:1d:61:47:
65:47:9d:6c:cc:1f:0e:65:e2:9b:ac:5c:85:2c:c8:
bb:b0:d6:05:e7:99:f0:af:05:4d:1a:78:5e:aa:1e:
c2:7c:b3:13:3e:7f:03:3e:e3:7e:b0:e4:eb:12:7c:
4f:5e:ca:c0:e7:a6:e0:ac:35:a2:dc:48:17:6b:72:
e5:e1:ef:e3:8a:81:01:82:34:0a:bf:66:3a:93:02:
48:97:3f:b1:f8:47:9f:cb:8c:52:13:55:59:02:0f:
7a:63:9c:13:0c:12:94:56:bd:c7:1d:64:83:6c:cd:
5b:db:c5:0a:0f:f3:2e:44:f3:d7:95:b3:c3:9a:b2:
b7:f7:cf:6a:6e:50:c2:95:10:a0:26:28:85:42:35:
d7:90:4d:51:41:0c:45:d9:6f:7d:75:87:d1:3d:87:
1e:c5:5d:ed:55:73:c8:8d:99:6a:48:18:e2:7a:fc:
bb:1a:48:29:bb:cd:02:47:07:1e:7e:87:7d:b9:e2:
d5:9b:30:7a:51:68:61:a9:81:82:6e:e4:50:da:cc:
1e:ef:ee:64:f8:e8:c3:c5:0c:2c:4f:94:2a:cf:d5:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:6A:D2:5C:29:F7:6C:22:5A:96:B0:8A:18:C7:25:9A:AC:AF:CB
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/Jplq0lwp92wiWpawihjHJZqsr8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.224.0/21
Signature Algorithm: sha256WithRSAEncryption
13:d6:87:02:cb:fd:5b:9c:e9:4f:f3:cd:48:16:22:b8:0d:d4:
10:f7:24:e9:05:27:fc:38:9a:45:68:7e:1c:bb:21:92:d3:6e:
30:b1:03:ca:be:57:88:e4:3f:dc:d4:40:3e:54:05:94:59:49:
46:88:b5:cd:08:2b:6a:63:06:4b:42:c6:53:d6:42:7d:ef:8f:
d0:7c:6a:fe:02:98:6d:9f:2f:65:a9:3b:b3:a0:2e:7d:46:67:
e4:37:6e:93:f1:21:8a:59:3b:40:46:b1:16:b2:81:b3:64:46:
f5:fa:1c:5b:5c:d2:f5:6e:99:de:18:a0:55:ef:29:5c:fa:ef:
cd:42:6a:fd:12:c5:e4:6d:05:a6:6a:ee:82:de:0a:39:0c:6f:
67:51:37:78:a1:ad:96:aa:c6:d2:fb:cd:f4:b5:f5:59:b4:f1:
a6:44:0a:a1:d5:4c:f3:b1:54:ee:65:05:b0:4e:a0:e6:a3:c4:
6d:cd:29:53:54:a2:97:b1:51:f7:e4:cd:f1:6a:e9:4e:ac:50:
59:96:87:0d:37:68:0d:07:54:e6:2f:bc:f8:26:da:ac:93:52:
2c:86:d1:77:5a:78:af:4d:9b:fa:71:f6:66:b1:62:c0:8f:aa:
0e:d1:bc:61:52:3a:7a:85:d6:10:27:59:48:c9:6e:34:d4:60:
af:07:5d:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ0EyVqzbGhO5uAeFuVkSnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZWVmOWRiOTNkZTExYTAyNTNkNWFhOGM1M2VjY2FlMGY5
YzNkMzMwHhcNMjMwMjIxMTMwNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjk5NmFkMjVjMjlmNzZjMjI1YTk2YjA4YTE4YzcyNTlhYWNhZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2F6g4Cp3xGJAAVhjcs1wrdKtpQP
Ct9E2tEcHte7Rxm34A0sx3cbJq8dYUdlR51szB8OZeKbrFyFLMi7sNYF55nwrwVN
Gnheqh7CfLMTPn8DPuN+sOTrEnxPXsrA56bgrDWi3EgXa3Ll4e/jioEBgjQKv2Y6
kwJIlz+x+Eefy4xSE1VZAg96Y5wTDBKUVr3HHWSDbM1b28UKD/MuRPPXlbPDmrK3
989qblDClRCgJiiFQjXXkE1RQQxF2W99dYfRPYcexV3tVXPIjZlqSBjievy7Gkgp
u80CRwcefod9ueLVmzB6UWhhqYGCbuRQ2swe7+5k+OjDxQwsT5Qqz9Vo+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaZatJcKfdsIlqWsIoYxyWarK/LMB8GA1UdIwQY
MBaAFLLu+duT3hGgJT1aqMU+zK4PnD0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3U3NTI1UGVFYUFsUFZxb3hUN01yZy1jUFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83M2U5MGQtMDU1My00ZmU2LTk2ZGUt
ZGVlZjhkMTU0OTUwLzEvSnBscTBsd3A5MndpV3Bhd2loakhKWnFzcjhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83M2U5MGQtMDU1My00ZmU2LTk2ZGUtZGVlZjhkMTU0OTUw
LzEvc3U3NTI1UGVFYUFsUFZxb3hUN01yZy1jUFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvngMA0G
CSqGSIb3DQEBCwUAA4IBAQAT1ocCy/1bnOlP881IFiK4DdQQ9yTpBSf8OJpFaH4c
uyGS024wsQPKvleI5D/c1EA+VAWUWUlGiLXNCCtqYwZLQsZT1kJ974/QfGr+Apht
ny9lqTuzoC59RmfkN26T8SGKWTtARrEWsoGzZEb1+hxbXNL1bpneGKBV7ylc+u/N
Qmr9EsXkbQWmau6C3go5DG9nUTd4oa2WqsbS+830tfVZtPGmRAqh1UzzsVTuZQWw
TqDmo8RtzSlTVKKXsVH35M3xaulOrFBZlocNN2gNB1TmL7z4Jtqsk1IshtF3Wniv
TZv6cfZmsWLAj6oO0bxhUjp6hdYQJ1lIyW401GCvB11p
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:14:31 2025 by rpki-client