Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/8E7-sLo6vbiFtp08h3u61w6yJlw.roa
File: 8E7-sLo6vbiFtp08h3u61w6yJlw.roa (raw, json)
Hash identifier: FXrEECd6tCAVz5srbe2wzarzJPaMlUtuepMZcYLKbDc=
Subject key identifier: F0:4E:FE:B0:BA:3A:BD:B8:85:B6:9D:3C:87:7B:BA:D7:0E:B2:26:5C
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 15913832
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/8E7-sLo6vbiFtp08h3u61w6yJlw.roa
Signing time: Sat 01 Jan 2022 06:54:47 +0000
ROA not before: Sat 01 Jan 2022 06:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212249
IP address blocks: 109.235.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361838642 (0x15913832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 06:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f04efeb0ba3abdb885b69d3c877bbad70eb2265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:79:60:1d:c9:7f:19:bf:28:c5:cb:6c:c0:
ff:96:16:c2:37:af:99:66:7b:a6:91:2c:59:8b:84:
d0:b1:cc:df:52:e6:17:b4:75:79:02:1b:a3:c6:2a:
3a:17:65:f8:64:db:c0:27:7d:77:c7:a0:ac:27:ba:
e6:92:36:39:bc:a9:d8:59:f2:35:76:42:a2:7c:27:
29:b5:a2:ec:04:4f:29:34:c1:02:6e:1b:65:3c:93:
58:05:db:35:7d:4f:71:4f:26:79:1e:11:d7:26:a0:
79:f8:f0:29:bd:37:c7:36:5e:4f:5d:37:fc:0a:e9:
47:74:e3:84:8d:ca:69:d4:24:db:26:4c:7c:33:33:
39:6b:16:14:41:c0:46:48:3d:41:fd:4d:05:dc:63:
ca:6c:b6:2d:3e:e1:e7:6e:50:52:35:24:37:e9:23:
ba:c5:c0:79:91:10:88:f1:fc:f3:59:8e:f0:a2:37:
3b:84:c3:d2:11:b5:a9:45:0e:36:f2:fa:71:ae:14:
fd:10:9e:f1:ba:5e:0c:01:6e:64:ea:c6:17:59:fc:
94:6a:5e:ef:fd:45:19:b7:c9:ba:0c:2d:b3:fc:20:
b8:01:b2:b8:53:06:a1:73:b7:08:65:27:50:2e:ba:
4d:f2:d3:29:e8:ce:ab:20:f5:0a:fc:0d:67:72:66:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4E:FE:B0:BA:3A:BD:B8:85:B6:9D:3C:87:7B:BA:D7:0E:B2:26:5C
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/8E7-sLo6vbiFtp08h3u61w6yJlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.253.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9b:88:77:a8:fd:31:d0:62:79:8c:85:bc:f8:d4:ac:75:7f:
aa:ee:8a:3f:12:f1:35:b7:2f:d2:d7:a0:98:12:c3:6a:0c:d5:
1c:22:b9:3d:70:16:e9:37:8e:b4:49:e9:f4:05:73:d9:e2:84:
c6:8c:96:22:36:05:11:b9:9d:0a:27:f1:51:7f:d3:57:bb:f8:
db:d9:82:32:ae:f7:a9:00:96:75:35:d2:08:a2:c8:f3:56:4a:
c5:92:a7:2a:16:ff:79:83:27:0a:7b:00:f3:b1:18:cc:36:eb:
a7:62:01:35:8b:13:6a:58:0e:38:6b:04:a8:fb:3d:41:7e:be:
e7:79:de:e2:2c:ac:32:89:a4:0c:d8:5b:f8:06:af:31:d1:86:
54:1e:a3:dc:a4:c5:2c:fe:ed:ca:e1:61:18:b8:f4:22:13:17:
25:6c:c9:7a:c5:c5:ba:f3:62:96:c7:a3:d6:38:50:4e:cb:05:
72:21:7f:08:35:0d:0a:e8:27:14:97:44:bd:fd:b8:1f:e2:72:
77:32:ee:41:3c:eb:c0:ff:ae:62:1d:fc:33:f8:b8:b3:07:91:
08:db:ac:fa:cc:f6:04:73:a7:d5:f1:cd:7d:23:f3:1d:11:ba:
b6:2e:22:32:1f:a0:9c:e5:8b:de:07:99:be:18:19:a2:66:bf:
c5:15:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:55 2025 by rpki-client