Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JQgXb3nbSsqfEFkgM35S1ZYwzqM.roa
File: JQgXb3nbSsqfEFkgM35S1ZYwzqM.roa (raw, json)
Hash identifier: 0zLfaSb4bVQ67GyRL//etsG5nHZV7KBTzJih9GOEErA=
Subject key identifier: 25:08:17:6F:79:DB:4A:CA:9F:10:59:20:33:7E:52:D5:96:30:CE:A3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A2C2F1BE88D2D20C5FDB6F7C64F47E461
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JQgXb3nbSsqfEFkgM35S1ZYwzqM.roa
Signing time: Fri 25 Aug 2023 10:13:19 +0000
ROA not before: Fri 25 Aug 2023 10:13:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 91.216.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:2f:1b:e8:8d:2d:20:c5:fd:b6:f7:c6:4f:47:e4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 25 10:13:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2508176f79db4aca9f105920337e52d59630cea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:a5:42:1f:f2:02:71:cc:7c:ff:3e:04:c2:
da:87:c4:d0:5a:b2:ed:4b:a5:d9:35:f4:91:d5:65:
21:2c:c4:a0:d8:5f:da:a8:71:31:5f:d2:e2:8a:48:
f8:8b:30:c6:64:9d:74:e9:bc:68:d3:76:af:7f:d6:
fd:ad:42:2c:ed:02:ba:1e:11:79:ad:3b:79:25:94:
c1:05:1d:31:15:31:7d:0b:a1:42:07:09:a4:90:74:
8a:4f:2b:c1:d1:c1:82:5a:25:74:c3:d8:d7:61:81:
ce:79:50:be:d7:c0:18:4c:06:a0:01:a4:10:99:bc:
99:90:7f:f4:f0:f9:20:2a:d6:eb:a5:43:d6:c6:99:
53:f7:9d:d9:d8:1f:1d:8d:dc:75:e5:da:12:12:c7:
ee:fd:18:cd:0f:02:94:b2:3c:20:8b:d8:d9:4b:f3:
d8:c7:a6:0f:37:1f:81:ce:02:c8:e9:3f:46:1a:ae:
42:8d:09:3c:9a:2d:be:e3:54:36:f5:53:28:9f:ae:
0e:c4:fa:c7:c3:ab:5b:6d:82:bf:ff:8f:b8:3d:99:
d2:51:19:01:b9:cf:32:4f:8a:76:4c:fe:79:ae:ce:
68:52:45:19:3a:71:67:66:40:d1:4e:16:70:37:e7:
05:cd:fc:a0:19:ac:8e:99:60:d8:68:7b:61:e1:6b:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:08:17:6F:79:DB:4A:CA:9F:10:59:20:33:7E:52:D5:96:30:CE:A3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JQgXb3nbSsqfEFkgM35S1ZYwzqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.185.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8a:fe:55:b4:47:94:fd:54:88:d1:42:73:3c:1e:66:70:0a:
60:02:76:ad:be:6a:74:f4:e8:03:b7:d0:c5:07:a2:9e:d3:ee:
18:ed:aa:e0:4b:62:72:0e:b6:5c:59:97:ca:e3:b0:5e:87:41:
02:aa:f1:e8:0f:6c:37:17:aa:69:35:4f:73:a4:82:af:d1:2f:
e8:9b:db:bd:91:1c:0f:9c:2d:b2:84:7e:b2:10:0d:73:71:2a:
33:e6:f6:cc:7b:90:d6:a9:ac:af:2c:38:52:b3:4d:96:50:fe:
8b:3d:3f:3b:16:81:b2:8d:08:d9:3f:e1:18:3f:a4:7f:46:35:
79:87:70:b4:71:b7:69:95:08:67:38:22:db:32:4c:b5:3e:2a:
13:7a:5e:32:02:3e:eb:3b:e5:1d:04:c8:57:ed:bc:9c:e7:5c:
18:bb:6f:a5:83:a5:c5:a7:c2:a4:16:54:5c:46:a4:3e:ff:2d:
f9:33:11:60:25:0c:c2:0d:d5:c9:28:e2:0c:8e:53:5f:af:b0:
94:d6:92:05:4a:b1:84:5a:80:9f:9a:af:59:56:c9:82:71:9b:
e7:d3:22:15:db:71:db:90:48:00:6d:ec:14:12:c9:06:92:7e:
c3:ef:0f:3b:34:dd:f5:bc:74:9e:9b:58:42:5c:ed:63:1f:69:
04:07:e5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:40:59 2025 by rpki-client