Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/JUxXWmdTXlt0wjassIRvYY1UK18.roa
File: JUxXWmdTXlt0wjassIRvYY1UK18.roa (raw, json)
Hash identifier: wWZRjnZbYy1zvQFrU4KCB3hoIsf3JyWNpGAmWXt18Qs=
Subject key identifier: 25:4C:57:5A:67:53:5E:5B:74:C2:36:AC:B0:84:6F:61:8D:54:2B:5F
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 16872043
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/JUxXWmdTXlt0wjassIRvYY1UK18.roa
Signing time: Sat 01 Jan 2022 06:53:34 +0000
ROA not before: Sat 01 Jan 2022 06:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49524
IP address blocks: 46.141.0.0/17 maxlen: 17
46.141.128.0/17 maxlen: 17
109.237.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377954371 (0x16872043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Jan 1 06:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=254c575a67535e5b74c236acb0846f618d542b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:b4:3d:18:fd:d2:11:85:ae:9d:27:07:0b:
3f:12:91:c7:78:9a:b7:86:ee:36:5d:0b:45:1d:bf:
a0:7f:f3:b8:bf:a2:2d:84:79:bd:8a:74:18:cf:30:
bc:f3:e4:f3:21:43:98:0b:12:be:a6:4a:73:6d:cc:
4e:88:de:eb:56:51:20:36:45:95:ef:c9:f2:54:5d:
87:38:9b:cb:55:0b:63:bb:a4:8b:c5:03:67:99:43:
29:6d:ac:12:02:c8:88:fa:08:7d:68:c7:e6:8f:98:
fc:e4:54:7d:d0:f6:a7:a0:82:10:24:39:50:39:74:
0d:72:f2:6a:b9:f9:ca:d6:01:58:1b:df:2e:d4:6c:
e0:52:49:ad:5f:9d:c7:da:73:26:2e:fe:3a:83:a2:
f5:bf:f5:de:59:01:80:fd:36:59:fc:37:6b:4b:7d:
bb:a9:df:d0:76:ea:4c:dc:58:32:bf:be:12:1e:3e:
b8:d2:b6:cc:13:f6:10:5f:fe:35:a9:42:ce:c9:36:
50:48:91:a7:c4:cf:b0:fe:45:c6:17:3a:7c:69:da:
5b:4f:39:99:e2:5b:3d:7e:2c:3d:1a:02:3c:68:27:
3a:5a:f9:b9:aa:b8:49:19:87:36:17:cc:b8:2b:67:
57:aa:87:f4:98:e9:17:e1:ca:c7:28:63:41:5d:98:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:57:5A:67:53:5E:5B:74:C2:36:AC:B0:84:6F:61:8D:54:2B:5F
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/JUxXWmdTXlt0wjassIRvYY1UK18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.141.0.0/16
109.237.160.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:48:79:2a:58:28:56:cb:a1:9d:e8:52:b1:83:d8:f4:1d:91:
77:9d:95:2f:dd:ba:07:b0:a2:ba:1c:50:f2:20:4a:f3:06:81:
87:39:47:d6:30:5d:64:81:9b:96:ee:c9:13:73:9f:aa:3a:2d:
1a:1e:c1:12:79:d0:e9:f0:60:ca:9b:b8:9f:f5:61:1c:5f:35:
c9:db:07:c6:ae:24:3a:6b:59:1e:ac:1b:b4:75:1a:06:1a:b1:
74:6b:b6:28:e4:88:73:fd:36:08:ea:b0:87:32:cf:59:66:61:
0f:28:1e:d1:79:ac:31:e9:06:e5:c6:45:d7:fa:04:15:36:c4:
22:6e:18:30:00:9c:71:62:db:45:58:9d:75:ed:b3:eb:ea:59:
7b:1b:c8:49:1b:d8:67:ff:05:29:a3:22:f0:79:31:b2:81:7c:
43:ee:2c:59:99:98:e9:cc:88:42:be:a6:da:f2:bd:65:fb:e7:
74:dd:c8:d1:df:73:72:b1:e6:75:92:bf:4a:20:fb:fc:ca:0d:
52:f4:6f:54:b8:bf:f5:62:86:19:a2:86:e0:6c:d3:8c:24:61:
3d:47:df:44:26:32:74:0f:de:f8:4c:60:4d:5f:95:48:1d:4a:
8f:a0:0d:c5:16:34:d2:0c:dc:93:00:23:ff:b0:a8:ab:0d:5e:
27:71:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:29:52 2025 by rpki-client