Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JBaVSZ0VgEG4eQVsi2HlU3a1B-w.roa
File: JBaVSZ0VgEG4eQVsi2HlU3a1B-w.roa (raw, json)
Hash identifier: Bf+moN1F+vW2DsxWPEFITzqqRto0nLfS4A+I12OEjPU=
Subject key identifier: 24:16:95:49:9D:15:80:41:B8:79:05:6C:8B:61:E5:53:76:B5:07:EC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018746B1DD4ECBFF36D3A0D368923D0890D2
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JBaVSZ0VgEG4eQVsi2HlU3a1B-w.roa
Signing time: Mon 03 Apr 2023 10:37:54 +0000
ROA not before: Mon 03 Apr 2023 10:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 79.98.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:b1:dd:4e:cb:ff:36:d3:a0:d3:68:92:3d:08:90:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 3 10:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=241695499d158041b879056c8b61e55376b507ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:2e:cd:63:d6:bf:c6:83:04:c9:2f:92:83:
8f:3d:d0:67:64:33:a7:7b:86:c6:f4:6d:2b:96:4c:
40:38:e1:02:43:87:48:57:d6:2d:1d:97:3c:58:88:
9d:fb:e3:a4:78:9d:e8:34:b6:7e:10:bb:e3:a2:c0:
7d:da:d4:20:bb:5a:7f:9d:f4:48:57:21:d1:c0:7e:
4f:41:02:5a:a1:bd:a2:55:e0:fe:4f:c5:c7:69:3e:
a3:8a:1c:68:22:55:3c:43:43:76:da:68:c5:27:b0:
ae:94:16:4d:68:87:f6:03:46:16:ed:8b:46:fa:02:
20:ec:d6:e8:83:68:f3:cb:ee:1c:e6:8e:0f:56:38:
88:c8:1e:51:da:74:33:37:67:8b:7f:ef:4b:51:f1:
52:ed:50:66:6b:2e:05:96:42:6c:7f:cd:3f:55:39:
2b:0b:94:43:c9:3e:40:11:2c:2b:dd:be:07:b3:96:
bc:c9:5f:c6:d3:59:9e:a8:ba:0f:32:3c:23:02:23:
ee:bb:20:a5:64:2c:2a:2e:2d:95:58:c0:e2:7b:4b:
91:5a:e0:e7:97:8d:4c:12:8f:4f:bf:75:f1:e8:07:
14:43:7d:5c:ff:d0:a7:b9:09:82:81:3c:96:15:8c:
e8:ec:e3:10:97:66:f3:64:cd:41:51:55:c2:29:6b:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:16:95:49:9D:15:80:41:B8:79:05:6C:8B:61:E5:53:76:B5:07:EC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JBaVSZ0VgEG4eQVsi2HlU3a1B-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f8:f1:7e:bb:42:0e:8a:8e:2d:4e:21:71:6e:b7:e1:8b:ad:
e8:de:db:9b:c7:15:b6:df:46:9e:dc:f4:e8:3d:6a:01:8b:e3:
ed:c0:27:cd:77:e9:3a:95:3a:c3:d0:cf:cb:84:0f:21:c7:25:
2d:1a:17:1b:76:1f:9e:15:ff:8b:b2:27:8e:00:eb:74:3e:3a:
13:13:a0:82:c1:cc:31:cd:4a:56:82:08:da:45:ce:f4:2e:d2:
2f:c2:18:fd:1e:47:49:d5:a6:ed:7f:8e:35:16:20:fc:92:a1:
23:e0:3a:4b:b1:97:b3:e8:6b:8a:ae:1f:68:f6:54:9c:49:b1:
47:3f:60:c2:22:d1:db:b8:b0:42:81:ff:3d:ca:98:66:31:0c:
70:82:74:af:90:35:b1:50:40:13:43:88:98:f9:1b:4a:99:8d:
6b:ed:2d:09:3e:d6:24:5f:10:8d:5a:5a:1a:d3:3f:72:d4:86:
24:b0:d3:74:51:1b:bc:07:65:ce:a5:d0:41:00:cf:18:d6:ec:
6a:1b:cf:9e:56:ee:f2:a4:4a:50:0e:d0:a2:c3:bc:97:8d:4c:
94:02:73:72:5f:90:0d:05:d9:63:ed:2c:34:40:af:36:b9:f1:
b4:1c:67:0c:c1:1c:0b:2b:eb:e5:67:54:7a:d7:92:1f:cb:0d:
49:01:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:44:24 2025 by rpki-client