Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/09CewI72gI7dI0-fVfrGxP7Nvu4.roa
File: 09CewI72gI7dI0-fVfrGxP7Nvu4.roa (raw, json)
Hash identifier: JBP7Z2C59iC7FbiW3xbDPTvNKBXxiwN0FWSDNazEobQ=
Subject key identifier: D3:D0:9E:C0:8E:F6:80:8E:DD:23:4F:9F:55:FA:C6:C4:FE:CD:BE:EE
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50E81F5A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/09CewI72gI7dI0-fVfrGxP7Nvu4.roa
Signing time: Sat 01 Jan 2022 16:01:59 +0000
ROA not before: Sat 01 Jan 2022 16:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205815
IP address blocks: 194.209.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357389658 (0x50e81f5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3d09ec08ef6808edd234f9f55fac6c4fecdbeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:08:54:bf:2b:62:83:f5:cb:a6:a9:7f:c7:
c3:d8:c8:cc:f0:ab:f1:d9:8a:89:33:ee:a4:7d:b5:
82:05:3c:c7:59:d3:d5:1c:e0:fb:15:41:8b:56:0e:
6e:7e:74:36:c3:a1:b8:89:15:19:b9:d9:fa:ff:a3:
81:6f:f5:27:78:9b:62:e8:d0:a1:c8:dd:8e:56:ab:
a7:65:86:f1:7d:f7:d6:48:75:47:f8:ba:7c:78:ee:
6f:f8:1f:35:4a:fc:9d:04:d6:c8:a9:3b:33:dd:e9:
e6:39:68:1f:3e:5b:39:09:cd:b5:2d:a6:70:26:27:
af:dc:71:e7:f7:07:f5:35:bc:1d:9e:30:a1:72:e1:
c8:42:1e:17:8b:36:c3:e0:7b:c4:f6:2a:35:4d:2c:
9d:14:2a:60:39:87:6d:54:d7:9b:90:34:aa:29:08:
27:aa:fe:eb:53:13:7f:44:98:bf:46:bb:8e:af:68:
20:2d:61:e7:21:aa:c2:01:e3:12:f2:55:26:ed:96:
ef:43:b4:d5:48:27:e3:61:06:fc:cb:af:18:b9:ee:
6c:12:06:b4:f2:bc:dc:65:c9:b5:79:f5:af:af:73:
6f:d0:11:5c:21:cf:aa:c0:76:7a:59:53:04:b8:b5:
b5:d5:5f:76:7f:7d:56:11:f1:fa:ba:c5:89:ce:7d:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D0:9E:C0:8E:F6:80:8E:DD:23:4F:9F:55:FA:C6:C4:FE:CD:BE:EE
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/09CewI72gI7dI0-fVfrGxP7Nvu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.121.0/24
Signature Algorithm: sha256WithRSAEncryption
71:03:1d:0d:ec:05:13:f1:5c:3e:62:81:97:89:4d:45:5e:46:
99:03:9d:3c:9b:7a:d1:94:a4:cf:76:25:3e:72:bb:be:3a:25:
21:ea:7e:f9:97:3e:c3:6a:19:4c:78:92:13:ec:49:a0:ba:6f:
ea:63:97:1c:26:3b:c0:cf:f8:98:a6:8e:ce:54:5a:c7:a1:ad:
0e:96:7a:6b:8c:0c:06:e9:79:4f:0a:93:aa:e4:5c:45:4d:c1:
a5:a2:02:96:63:bb:bc:7e:74:77:e2:a8:8d:21:f2:d5:d5:61:
eb:90:75:a4:63:82:05:e7:6d:ed:c2:80:a5:09:b3:62:3c:ce:
15:18:8f:41:44:d7:e8:29:80:44:44:35:46:4e:ca:a7:8f:49:
95:50:f5:8f:b2:f0:d9:84:4d:49:95:c8:9f:65:d2:39:0f:7e:
d4:c6:66:df:f5:51:45:df:2f:4b:61:c5:49:33:ac:41:3b:63:
aa:3d:47:98:ff:1b:a2:dc:6c:6a:17:cb:64:9c:5d:34:38:57:
d1:58:50:7e:dc:af:c8:99:a0:a1:fe:d5:99:68:3c:76:96:a7:
67:52:7a:85:db:06:9b:e0:70:75:18:cd:96:84:87:0e:77:03:
1b:7d:fc:ba:bd:77:01:c2:00:cc:ce:47:20:82:28:f6:1b:d2:
2a:c1:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:46 2025 by rpki-client