Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/E0R3Ahu838ou4DMaXZ8Wv0fbtL0.roa
File: E0R3Ahu838ou4DMaXZ8Wv0fbtL0.roa (raw, json)
Hash identifier: WubrOCxFIcw8US3xv9/4rErtgYtR1u9A1oka2c+F2DI=
Subject key identifier: 13:44:77:02:1B:BC:DF:CA:2E:E0:33:1A:5D:9F:16:BF:47:DB:B4:BD
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018BD333EC59FB259E02B28794CC553D4C3A
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/E0R3Ahu838ou4DMaXZ8Wv0fbtL0.roa
Signing time: Wed 15 Nov 2023 13:37:57 +0000
ROA not before: Wed 15 Nov 2023 13:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56789
IP address blocks: 109.107.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:33:ec:59:fb:25:9e:02:b2:87:94:cc:55:3d:4c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Nov 15 13:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=134477021bbcdfca2ee0331a5d9f16bf47dbb4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:4c:3a:fa:0c:ac:8e:52:e6:9b:e0:ef:d7:
1f:42:ab:b6:67:54:7a:e2:1e:90:f5:0d:b5:8e:19:
32:b9:39:8e:c0:3e:3e:f3:6e:bc:2c:05:42:77:32:
d5:7c:af:cd:0b:f3:93:bb:b0:79:a7:82:ed:28:40:
37:f2:01:77:ff:5b:bc:47:11:a2:ab:70:8a:93:6d:
43:90:64:65:ee:31:ad:71:84:c9:16:30:f7:e9:2a:
e7:11:1c:06:7e:96:ca:40:60:d2:03:b5:9f:ed:4d:
af:b6:bc:01:f5:22:d5:47:17:86:28:7d:82:82:cc:
d6:91:70:24:c2:77:16:9a:43:72:ae:c7:13:de:88:
48:f3:40:a2:9c:15:80:23:f9:9c:e5:95:f8:92:a0:
4a:95:ce:9f:f5:c9:50:56:10:4f:8d:ab:b0:be:01:
52:c9:d9:cd:00:5c:38:86:c1:e1:79:0e:48:2a:cd:
d8:54:da:2b:67:14:42:6b:57:23:51:66:92:1b:a0:
6f:99:11:51:6b:25:ab:3d:25:43:8e:1e:8e:45:15:
35:2d:d5:2b:ef:fe:49:fa:05:78:8c:db:2d:fb:92:
68:65:16:57:b9:a1:22:59:78:86:f8:54:55:86:d3:
73:07:7d:06:aa:bd:7d:1e:12:24:4d:6e:69:fa:eb:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:77:02:1B:BC:DF:CA:2E:E0:33:1A:5D:9F:16:BF:47:DB:B4:BD
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/E0R3Ahu838ou4DMaXZ8Wv0fbtL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.153.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:da:5a:4d:28:76:51:7c:a9:ba:7d:cc:43:51:61:10:af:c0:
f2:5b:14:5c:c4:d1:1d:53:2b:48:00:f4:4e:56:dc:55:fa:8f:
6c:ae:7b:0c:8d:fc:c5:20:95:ce:5c:99:5a:11:25:58:e7:39:
d5:80:a5:37:01:5b:51:15:8b:67:13:2b:48:0e:0e:77:18:5d:
1d:34:7b:5d:3a:51:1e:d9:6b:94:de:e3:d7:c3:1b:74:4c:1a:
6d:f8:b2:1a:10:b5:5e:19:84:18:7f:54:d5:a5:40:c0:8c:30:
8f:6e:2d:75:83:0a:65:0a:52:11:ef:f2:94:c5:91:de:0a:dc:
62:7d:77:61:72:4b:2a:93:e9:7e:31:b8:59:77:b0:32:b6:01:
d5:e0:14:e9:0f:85:c7:70:8a:51:8b:d5:83:2a:e1:d4:b6:a9:
19:08:80:a4:37:09:19:3b:9d:4f:2d:4b:cf:1e:ea:97:ca:7a:
36:9e:e7:2c:7b:ba:d8:da:9c:1b:f8:3c:ab:9c:3a:a9:e7:49:
18:48:8a:61:02:b7:07:93:4a:4d:ee:eb:6a:2d:25:91:20:a5:
c6:38:97:09:b2:81:e5:82:af:cc:3c:73:42:5c:f3:47:fc:55:
2e:7f:2c:b3:57:e7:41:25:31:4b:c3:2d:5d:a0:55:c6:de:bb:
f3:c5:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:32 2025 by rpki-client