Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/JRlQxt6dy_VW35gywoqOjE54mt4.roa
File: JRlQxt6dy_VW35gywoqOjE54mt4.roa (raw, json)
Hash identifier: oq4SMvK+2yVs4fHPHp66o74ST4s845lhHsH2phiOBoQ=
Subject key identifier: 25:19:50:C6:DE:9D:CB:F5:56:DF:98:32:C2:8A:8E:8C:4E:78:9A:DE
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 018BF1777C05256FCB724E10DD5BAF37259B
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/JRlQxt6dy_VW35gywoqOjE54mt4.roa
Signing time: Tue 21 Nov 2023 10:40:21 +0000
ROA not before: Tue 21 Nov 2023 10:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34412
IP address blocks: 91.246.44.0/24 maxlen: 24
77.72.80.0/24 maxlen: 24
193.3.182.0/24 maxlen: 24
62.204.61.0/24 maxlen: 24
146.19.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:77:7c:05:25:6f:cb:72:4e:10:dd:5b:af:37:25:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Nov 21 10:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=251950c6de9dcbf556df9832c28a8e8c4e789ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:cc:de:6f:fd:25:44:eb:40:29:6e:d7:5c:
24:bd:7f:8e:d3:17:91:41:d1:8d:47:c6:55:dc:e9:
c1:47:50:24:6a:e4:0c:b8:b9:80:e1:f3:d4:f8:67:
c2:5a:e0:29:55:9a:f5:0e:3c:13:a3:a3:0a:9f:cd:
71:56:5b:80:8b:a5:fa:09:82:31:2e:70:ae:61:e3:
21:36:89:0f:e1:e1:fa:42:57:40:e2:e0:8e:46:dd:
c1:87:41:40:54:63:4e:98:ed:ec:c9:5a:57:fc:de:
ff:de:59:cb:6d:13:0f:ae:e1:3f:8e:80:ff:fe:9e:
17:1b:19:46:f4:c7:ca:ad:7b:7d:1c:4c:86:12:08:
54:2a:6a:f2:f0:70:cc:9b:69:4c:3b:00:73:c6:99:
eb:67:6a:8e:cd:74:05:58:c9:9b:21:04:95:69:55:
70:ca:02:53:ce:3f:c4:c3:14:e4:c5:27:ff:55:49:
e9:0f:f3:25:7c:45:22:37:81:58:c1:1d:84:d2:d3:
52:a2:b5:70:fd:86:bd:dd:0c:60:59:26:09:f9:87:
43:52:b1:b3:11:ed:b9:5d:95:b9:50:97:f9:34:50:
b7:e0:36:92:ef:9d:7f:76:62:0e:40:ea:10:10:44:
f0:89:75:ab:4b:c5:90:47:2d:35:2f:70:81:68:bb:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:19:50:C6:DE:9D:CB:F5:56:DF:98:32:C2:8A:8E:8C:4E:78:9A:DE
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/JRlQxt6dy_VW35gywoqOjE54mt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.61.0/24
77.72.80.0/24
91.246.44.0/24
146.19.217.0/24
193.3.182.0/24
Signature Algorithm: sha256WithRSAEncryption
50:02:0e:27:75:0a:8d:c2:a2:13:97:aa:c4:1e:84:17:a6:1c:
43:ab:c5:55:ad:d9:15:ce:4d:73:db:ca:06:fd:fd:3f:ad:c7:
23:d8:ac:38:2e:b7:68:43:05:b4:6d:a7:4a:61:30:ac:f9:e3:
06:74:09:33:48:96:a6:00:bd:98:78:02:92:1a:8c:ee:ad:33:
d5:18:9c:a7:a5:b6:8a:03:c9:ab:22:0b:89:7c:49:e5:e3:98:
9a:29:3e:a7:60:77:0b:3c:1a:e1:48:d7:ff:6a:76:d8:b4:b2:
a1:bf:3d:39:ca:3c:34:6a:c9:cb:24:1f:d2:9c:09:2f:77:bd:
22:af:9c:1d:64:87:9a:1c:a3:77:4f:5a:53:f9:21:c0:68:93:
b5:19:71:cf:71:75:ec:a3:d1:08:a2:5b:51:a1:bd:3e:81:e7:
1e:00:7a:82:b8:ab:6b:e2:67:8d:30:c2:a2:3f:d7:9f:13:f8:
e8:ab:ef:78:5f:c2:be:b8:47:e0:41:91:a6:db:45:fc:2b:c4:
c2:94:e2:53:d9:12:a7:ae:ad:da:2d:cc:32:87:ea:0f:67:d6:
8d:14:b8:33:09:0c:41:0f:8e:7b:2c:a7:89:04:eb:62:93:79:
21:10:25:3a:fb:92:71:85:f8:15:68:43:a1:4a:62:2a:33:8d:
f1:d9:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:00:47 2025 by rpki-client