Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/_VupjSw7lxOvGykgZIAT6Kz8fX0.roa
File: _VupjSw7lxOvGykgZIAT6Kz8fX0.roa (raw, json)
Hash identifier: CE3tP9A9Iy1KzGGE06DRd60PWcMLO34GR+ks010Dg/A=
Subject key identifier: FD:5B:A9:8D:2C:3B:97:13:AF:1B:29:20:64:80:13:E8:AC:FC:7D:7D
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 0185723A2B6034C7EA145C605F39B01CE745
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/_VupjSw7lxOvGykgZIAT6Kz8fX0.roa
Signing time: Mon 02 Jan 2023 11:24:52 +0000
ROA not before: Mon 02 Jan 2023 11:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210511
IP address blocks: 109.107.154.0/24 maxlen: 24
195.60.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:2b:60:34:c7:ea:14:5c:60:5f:39:b0:1c:e7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Jan 2 11:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd5ba98d2c3b9713af1b2920648013e8acfc7d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:5f:a4:0d:41:75:6f:fb:0c:4d:f3:71:e2:
60:cd:4b:88:c4:8e:e3:38:41:fb:1b:62:be:ec:60:
29:04:73:81:d5:b4:ba:eb:ab:2d:72:43:48:ae:68:
17:ab:6f:9e:27:70:f4:ad:81:c9:ba:3d:e3:c3:d5:
3d:25:a1:be:23:c2:88:9d:6a:5b:6d:b2:84:d9:4c:
0e:dd:2c:15:0f:60:a8:05:17:b7:ac:6c:f6:ad:ec:
42:83:29:a1:f8:b2:e7:ac:f5:9a:6b:b1:cb:50:fb:
23:64:03:0c:56:0e:c1:2f:f1:45:39:c7:e7:01:88:
a0:d4:c2:70:df:fa:d6:05:0f:1a:dd:5c:f1:ea:e2:
e1:ca:4b:91:49:22:87:3b:0f:ee:d8:ba:ce:b2:e2:
4c:77:82:21:5e:cf:19:f5:1f:d5:d9:1e:7f:53:3d:
7d:a1:d8:61:07:8a:ee:f8:55:4e:a0:15:16:58:1b:
e0:0a:0f:e8:07:82:3c:3e:25:36:95:dd:76:cd:5a:
a8:6e:bd:51:c7:00:7c:c4:07:32:da:a3:52:a4:5f:
19:e3:2c:3a:d7:4b:cd:88:c5:48:58:c0:e1:8c:fa:
4a:c0:c7:65:08:9b:9a:4e:ca:54:f7:2a:7b:ca:7c:
61:f7:26:9c:f8:b7:58:11:e5:c9:e8:83:3e:c7:4a:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:A9:8D:2C:3B:97:13:AF:1B:29:20:64:80:13:E8:AC:FC:7D:7D
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/_VupjSw7lxOvGykgZIAT6Kz8fX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.154.0/24
195.60.172.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5f:82:d5:85:9b:c4:5f:9c:f7:d1:36:cb:6c:ae:da:db:21:
d9:e1:69:79:2e:67:b0:3c:c8:1a:dd:7e:e4:10:28:15:92:98:
ed:1f:10:12:27:6e:ca:da:42:03:ee:08:5c:f8:aa:1a:b4:c2:
1d:66:d7:17:2e:32:11:3f:f5:9f:8a:05:84:b5:f6:87:91:27:
07:0b:c9:a7:c1:0e:c0:4b:74:f1:30:f5:b2:9b:af:5b:fc:7b:
46:27:0d:db:ec:0e:41:a9:e8:49:34:7b:9f:c7:38:f9:5e:d7:
3f:0e:2f:23:84:0e:f3:9d:11:d3:d8:76:4e:0c:08:64:0d:86:
cc:c2:60:38:29:fd:1e:a3:89:0c:ce:94:00:d9:90:c3:2c:7f:
cf:7b:9b:e7:a1:56:86:6a:86:5d:48:3f:a4:f3:e0:1e:7d:76:
6d:60:4f:35:fc:2f:0d:dc:ce:f5:68:8b:d9:4a:dd:4f:5e:1b:
1e:d7:f1:00:7f:fb:81:aa:57:9d:c5:ce:41:6c:42:15:82:44:
72:5f:ad:3f:ce:35:cb:e6:22:dd:42:6b:4e:e6:23:ec:a4:a5:
ea:d5:de:70:a7:5a:8c:74:fe:e6:36:d1:e9:6a:8a:1d:59:15:
38:c2:c5:be:f3:41:5d:d6:b0:11:01:fb:e2:a7:bb:b9:c2:7f:
9b:6e:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:00 2025 by rpki-client