Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/SDLHE0O3KcIYb2Kqp7Aek2v_jeg.roa
File: SDLHE0O3KcIYb2Kqp7Aek2v_jeg.roa (raw, json)
Hash identifier: JotnVSWOVt9XkedILwAd6e9sbzVgaVjB7YhFQtS6LPI=
Subject key identifier: 48:32:C7:13:43:B7:29:C2:18:6F:62:AA:A7:B0:1E:93:6B:FF:8D:E8
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 018609252DF4DDE4232D74BBC0FA8C0EA500
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/SDLHE0O3KcIYb2Kqp7Aek2v_jeg.roa
Signing time: Tue 31 Jan 2023 18:44:36 +0000
ROA not before: Tue 31 Jan 2023 18:44:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58082
IP address blocks: 109.233.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:09:25:2d:f4:dd:e4:23:2d:74:bb:c0:fa:8c:0e:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Jan 31 18:44:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4832c71343b729c2186f62aaa7b01e936bff8de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:ba:50:10:04:7a:7e:1d:a0:e0:09:70:83:
c2:bf:61:81:b4:07:fe:ba:2f:23:be:fd:48:c6:b9:
91:9c:4a:86:d6:9d:98:d5:a9:fc:9e:69:9b:75:80:
bf:d0:30:2b:59:fa:25:dd:cb:c0:4e:a7:2c:36:cf:
9c:00:e7:6f:86:dd:61:81:59:3b:c5:91:36:12:0b:
0e:af:bd:05:e0:6c:b5:57:85:8d:d5:23:34:0c:44:
cd:6b:69:f4:e8:ea:b4:7f:3c:8a:d0:35:56:ad:a5:
fc:d0:b3:b0:b8:a5:58:a5:8f:2d:e8:99:71:a6:4e:
7f:bf:64:d2:af:ba:1c:a6:ad:b6:e9:25:70:8c:0d:
35:90:f7:d8:db:79:b5:53:ed:d9:93:7d:7f:d1:dc:
04:7a:e7:53:f5:e9:c4:91:4d:6f:c0:70:bf:5f:73:
aa:c2:30:4a:39:33:ac:e9:ae:52:17:c9:ce:1b:37:
66:87:03:eb:a0:d3:fc:a5:50:3e:98:4b:32:ea:07:
55:d6:62:19:c2:1a:89:aa:cf:20:24:c3:5e:a2:99:
95:b6:d0:a7:32:bc:a7:59:a1:14:d8:63:ab:0a:c3:
4a:19:fd:03:eb:eb:57:03:60:59:ca:2e:a5:52:16:
b0:e7:f1:53:2a:97:cc:0d:62:32:66:ae:cf:8a:b7:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:C7:13:43:B7:29:C2:18:6F:62:AA:A7:B0:1E:93:6B:FF:8D:E8
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/SDLHE0O3KcIYb2Kqp7Aek2v_jeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.132.0/22
Signature Algorithm: sha256WithRSAEncryption
40:c7:ec:1d:21:69:a6:23:31:7a:df:a9:d7:86:b3:4a:01:9e:
c3:d5:b3:f4:95:be:6f:1b:c1:b6:aa:80:34:1c:0d:98:fb:db:
e1:61:42:c4:da:4d:00:b3:a9:d3:60:7a:b9:92:4d:c7:a7:92:
d8:69:34:dc:83:86:3b:c9:a0:d0:8e:d4:ea:c8:34:fe:cc:d7:
0c:8b:b6:a6:c3:15:f2:e7:86:bb:8e:3c:bd:37:13:7b:a9:c7:
e3:48:aa:6f:25:b0:e5:24:21:69:50:fa:f2:43:4a:da:3c:80:
0a:f4:56:b5:96:6b:59:c2:d9:09:d1:f3:57:ff:c0:dd:8c:51:
a7:de:50:1f:7c:3d:60:3a:82:ab:27:03:b0:d0:0e:89:79:f3:
be:be:4e:2a:ca:95:c6:37:20:16:69:c2:51:8b:d3:23:b9:c0:
0d:ba:d5:bf:a0:db:27:90:2a:b6:14:9a:b1:00:63:b6:9f:1c:
c4:b4:6c:0c:4a:e9:80:4e:48:ec:49:fc:63:a2:38:16:d2:e2:
70:11:07:e5:90:08:6f:77:3c:33:67:64:75:e3:70:2d:89:b5:
df:13:43:c2:b6:d5:4d:16:7a:0d:83:d4:f7:30:f1:c4:97:d9:
9a:ca:c6:75:98:ed:3a:ed:73:a4:99:31:6f:78:21:90:38:cf:
aa:e9:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:50 2025 by rpki-client