Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/JFs9bqba5urmW0iEbXVtPWYWd3o.roa
File: JFs9bqba5urmW0iEbXVtPWYWd3o.roa (raw, json)
Hash identifier: xV94k6dogv0ZJ6nfmAT8/opud0Z7kyL55BLyALjF7iY=
Subject key identifier: 24:5B:3D:6E:A6:DA:E6:EA:E6:5B:48:84:6D:75:6D:3D:66:16:77:7A
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 014157
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/JFs9bqba5urmW0iEbXVtPWYWd3o.roa
Signing time: Wed 05 Jan 2022 07:04:14 +0000
ROA not before: Wed 05 Jan 2022 07:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41249
IP address blocks: 91.227.128.0/24 maxlen: 24
91.227.129.0/24 maxlen: 24
2001:67c:2260::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82263 (0x14157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Jan 5 07:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=245b3d6ea6dae6eae65b48846d756d3d6616777a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:d4:a0:83:00:ce:17:25:87:eb:bc:64:d2:
12:02:60:a7:10:69:8b:d4:83:e7:7c:69:ac:5f:1e:
2c:40:6b:fa:ad:00:bf:d0:e3:23:0d:05:67:81:c7:
8e:15:75:25:dc:b3:af:60:d8:54:34:6f:09:d0:ac:
3e:21:6e:bc:85:cc:00:70:b7:ae:d5:fa:0c:e0:4c:
1c:c9:bf:51:5f:18:bc:1a:89:69:6f:2e:25:06:5c:
73:a5:fe:fc:6a:2d:45:9b:06:6e:44:56:2f:53:96:
ac:c8:97:7e:d9:f0:cf:bc:50:e5:c9:c1:c6:23:11:
64:29:90:3e:b1:39:ac:6b:55:0b:6a:52:50:4c:7a:
1a:60:7a:07:a4:e4:ae:08:2d:d5:93:58:a7:51:35:
b1:83:47:fa:86:0b:c2:be:a8:43:b5:89:2c:46:74:
24:b0:02:43:74:64:44:bc:7f:ab:27:d7:95:2d:ed:
f0:32:9d:4d:bd:ca:c1:80:58:b7:2a:6e:a1:b5:a3:
0e:a0:16:9c:5c:10:5c:7a:4c:26:48:e4:f8:2b:64:
3a:8b:48:a3:08:d3:3f:e9:a6:32:97:e0:26:f2:66:
dd:ad:96:a4:33:b7:93:25:0a:bb:e5:f2:13:ef:e5:
02:d9:e5:b4:a0:8d:f3:c2:ff:90:70:3a:e4:dd:26:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:3D:6E:A6:DA:E6:EA:E6:5B:48:84:6D:75:6D:3D:66:16:77:7A
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/JFs9bqba5urmW0iEbXVtPWYWd3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.128.0/23
IPv6:
2001:67c:2260::/48
Signature Algorithm: sha256WithRSAEncryption
58:36:3b:6c:fc:0e:00:50:51:6f:50:0b:d7:6b:17:24:d5:fa:
2e:20:04:97:00:26:f0:3b:52:28:7c:ff:06:8a:39:d3:14:9f:
3f:94:2e:9c:ef:1a:0a:fd:7f:cc:fc:b7:3b:73:08:84:68:50:
4a:58:3d:c3:51:7b:15:0a:ee:40:26:f0:12:c1:3d:54:ce:12:
01:75:24:0a:31:c9:4a:d5:51:a4:7c:e9:61:43:67:60:5d:91:
db:e1:76:ec:82:80:be:53:57:ba:8c:2b:9d:3c:82:67:80:f3:
54:b7:8f:fb:ec:4f:86:42:b9:86:e5:f9:26:aa:34:0c:e4:5f:
e1:f8:2e:33:af:3e:71:ed:02:13:a0:d5:a7:09:31:e7:85:49:
1f:f3:aa:70:7d:e1:fc:86:5c:2a:47:e1:da:20:ff:f4:a6:ea:
a2:d8:4d:a0:d6:f5:b2:9a:cb:f2:07:11:dd:3e:8a:63:41:10:
c9:cc:0d:cd:77:16:69:7b:f2:0c:7c:48:0f:00:06:e6:ce:58:
cd:bb:c4:bb:a0:ed:59:7c:92:99:90:8a:00:4d:44:aa:6a:c3:
fb:dc:65:fb:9b:09:a9:72:6d:95:5f:4d:72:10:a3:69:a7:48:
f9:3e:96:2a:a5:69:07:5b:19:55:6b:ae:93:12:79:88:31:ad:
4a:5a:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:00:14 2025 by rpki-client