Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JcKU7vBOJC37NfJi4SbT-EX0bq0.roa
File: JcKU7vBOJC37NfJi4SbT-EX0bq0.roa (raw, json)
Hash identifier: mU3XhsJilwhqMwSkTvU+6EXxg3+JcZstFOvTPUkZGNM=
Subject key identifier: 25:C2:94:EE:F0:4E:24:2D:FB:35:F2:62:E1:26:D3:F8:45:F4:6E:AD
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 018A009BBB8A25F9FCD8924362FF7B80E41B
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JcKU7vBOJC37NfJi4SbT-EX0bq0.roa
Signing time: Wed 16 Aug 2023 23:08:40 +0000
ROA not before: Wed 16 Aug 2023 23:08:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41079
IP address blocks: 185.204.216.0/22 maxlen: 24
195.114.0.0/23 maxlen: 24
91.199.22.0/24 maxlen: 24
178.250.40.0/21 maxlen: 24
91.239.66.0/23 maxlen: 24
185.208.164.0/24 maxlen: 24
194.169.227.0/24 maxlen: 24
185.123.160.0/22 maxlen: 24
185.243.52.0/22 maxlen: 24
195.242.116.0/23 maxlen: 24
195.78.66.0/23 maxlen: 24
193.218.152.0/22 maxlen: 24
91.234.146.0/24 maxlen: 24
195.2.254.0/23 maxlen: 24
91.237.52.0/24 maxlen: 24
2a02:1778::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:9b:bb:8a:25:f9:fc:d8:92:43:62:ff:7b:80:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Aug 16 23:08:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c294eef04e242dfb35f262e126d3f845f46ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:28:4f:92:95:66:67:c0:b9:ec:fb:9d:9c:
52:7d:3b:7a:e2:d9:b2:c2:d0:0c:fb:f9:9f:0f:c2:
2a:66:a8:bb:e5:e9:ee:c9:bc:6a:d0:41:95:01:4b:
df:6c:86:7a:b7:c5:31:ef:7f:ae:5c:8b:b2:3c:3e:
c8:03:06:30:23:5b:0a:3f:5a:33:09:b0:a8:81:a8:
c8:33:67:9f:9b:42:e3:e6:21:c4:bc:5f:08:e0:5c:
83:19:f1:20:fe:4b:12:71:16:46:d0:af:33:8f:d4:
10:39:64:a3:3f:66:b1:6c:71:92:7b:a8:ea:e4:29:
5c:30:b3:64:8d:47:66:4c:b4:b0:1e:0e:b2:00:05:
b3:25:80:9a:7d:15:f0:d5:4d:ce:00:7e:95:f9:2a:
97:c6:67:c0:6f:76:15:3e:99:99:9d:61:f7:68:e8:
16:d4:49:9e:12:45:5c:55:31:22:3a:5c:22:eb:52:
86:3e:e7:8e:64:0d:34:e9:35:79:3e:ea:5a:6e:28:
1a:b9:f1:06:9f:49:c5:9a:8e:f9:e1:a3:cd:50:5d:
07:9e:56:34:02:5a:a8:24:e8:d6:c7:b4:15:73:b6:
3e:aa:31:d8:a1:1c:e1:06:74:bd:9f:14:2d:9a:60:
c7:bf:19:fc:cc:ab:88:45:ce:39:7b:26:5f:a6:6a:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C2:94:EE:F0:4E:24:2D:FB:35:F2:62:E1:26:D3:F8:45:F4:6E:AD
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JcKU7vBOJC37NfJi4SbT-EX0bq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.22.0/24
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
178.250.40.0/21
185.123.160.0/22
185.204.216.0/22
185.208.164.0/24
185.243.52.0/22
193.218.152.0/22
194.169.227.0/24
195.2.254.0/23
195.78.66.0/23
195.114.0.0/23
195.242.116.0/23
IPv6:
2a02:1778::/32
Signature Algorithm: sha256WithRSAEncryption
51:2e:9d:2d:bd:87:8d:f5:c4:a9:66:4e:71:61:25:e1:1f:fc:
2a:c7:a3:98:97:8c:84:3b:a4:fe:60:51:9d:fb:06:ac:61:e6:
6e:32:1f:59:94:90:e9:e0:cc:75:4e:0c:7f:6a:0f:22:d0:08:
51:61:67:8f:47:26:77:3d:3f:a0:80:b5:8e:d2:ed:30:32:4c:
37:c8:d0:bc:c5:15:b3:3b:77:99:4c:8e:ac:d8:5e:c9:32:91:
bd:03:78:16:81:2e:c2:1e:a5:c7:ed:8e:cc:b2:e9:c8:69:a9:
2c:f4:25:7e:47:ec:89:d9:c8:e9:8f:03:2f:4d:69:b7:06:43:
85:14:18:49:c9:4e:06:3f:36:bb:8c:85:a0:9e:25:09:f2:a4:
89:58:39:09:38:52:41:c6:b1:49:dc:fc:5f:b2:a0:ad:f8:6e:
49:fe:e0:27:d4:85:c7:72:30:79:93:9c:e2:49:d3:d4:7c:62:
57:85:43:c3:aa:c0:bb:cd:3f:b0:3c:3d:e8:28:9b:96:28:2d:
80:5d:f5:e2:1d:d9:f4:fb:5d:e6:b9:e9:47:87:f0:cb:a2:18:
1d:73:4b:0e:b5:74:b9:19:39:38:36:06:ef:fe:30:c6:d7:e2:
58:75:2e:0d:50:68:f9:53:ab:ab:38:47:36:b1:0c:58:b2:63:
34:12:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:05:44 2025 by rpki-client