Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/ym7ZC74pXDpJ3z54FemwHwk9P7k.roa
File: ym7ZC74pXDpJ3z54FemwHwk9P7k.roa (raw, json)
Hash identifier: J+ui/di0cUgPsuCSy5HExiSKKMGRARpL/IlnNoJbomk=
Subject key identifier: CA:6E:D9:0B:BE:29:5C:3A:49:DF:3E:78:15:E9:B0:1F:09:3D:3F:B9
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 21B3C4
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/ym7ZC74pXDpJ3z54FemwHwk9P7k.roa
Signing time: Wed 09 Feb 2022 15:55:14 +0000
ROA not before: Wed 09 Feb 2022 15:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5089
IP address blocks: 109.107.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208708 (0x21b3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Feb 9 15:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca6ed90bbe295c3a49df3e7815e9b01f093d3fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:89:72:c6:7f:3c:87:4c:f7:e7:56:14:e7:
da:52:1b:21:75:5a:65:eb:b4:2a:06:ae:96:83:96:
45:1f:45:74:35:e5:9c:19:bb:ae:99:4a:e6:30:17:
fa:42:a4:61:20:7e:94:c7:41:44:5d:01:77:d5:d4:
ac:f9:7d:24:ca:88:06:37:7d:38:a7:f3:d4:34:b3:
c8:e9:5a:82:c1:a7:ab:23:5a:c5:84:d1:7e:84:e3:
35:bc:cd:1c:82:12:fc:cc:b0:2f:94:d0:75:c4:5a:
09:a1:39:92:b2:ab:2f:f4:db:23:72:d3:cf:08:e5:
ee:17:98:33:f2:80:d9:63:cd:d5:30:2b:9c:0c:8a:
f9:57:d2:91:b4:45:a5:3f:8c:2b:8a:8c:2f:6b:42:
cf:3b:6b:a4:79:4e:9e:42:54:1b:81:48:1e:a5:28:
64:da:b3:10:36:be:e1:98:ec:d1:49:ca:61:e7:3b:
45:9a:e9:1f:56:a1:d0:18:27:8d:b2:65:6a:83:14:
68:77:df:ac:bd:49:b9:7d:b5:1a:f6:03:6e:3d:0b:
ea:ba:d1:a4:d1:32:1d:ab:51:dc:db:25:96:94:31:
6d:06:c2:27:68:39:f3:4b:fc:ec:79:53:db:75:04:
de:a7:af:c1:2c:21:00:73:ce:27:e5:0c:f0:68:ef:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6E:D9:0B:BE:29:5C:3A:49:DF:3E:78:15:E9:B0:1F:09:3D:3F:B9
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/ym7ZC74pXDpJ3z54FemwHwk9P7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.154.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c8:7e:e4:86:79:89:5d:31:aa:34:26:d2:26:7e:55:62:7b:
47:1a:dd:74:3e:a0:d6:36:f7:6f:79:a2:bb:2f:e0:c2:9f:a4:
d9:69:37:24:25:d5:42:5f:9f:e0:3e:7b:b4:97:05:42:06:77:
8f:15:bd:ab:c4:6c:ee:b6:a8:5a:19:ed:91:47:b5:61:1c:58:
86:b7:e5:70:b5:51:d0:60:70:ac:55:04:e6:e8:6f:44:c1:22:
4c:f2:4e:d6:5c:9b:ad:0f:57:28:1f:62:bc:27:c8:0d:b0:6e:
89:26:3b:c1:ab:26:b6:b7:de:42:5a:48:b4:da:40:97:41:d6:
3a:e9:91:f7:17:6c:ea:0a:48:8b:ee:92:c6:66:58:0e:16:c6:
f1:e3:3b:4c:53:31:be:eb:84:eb:f4:22:b5:69:28:0e:b8:65:
83:8b:55:f7:68:95:17:fd:c9:f7:99:2c:44:64:6f:56:e1:0a:
c4:10:f2:06:be:75:40:50:c1:27:96:f0:79:26:90:9f:47:fd:
80:d4:70:d0:49:7e:d5:49:b6:cc:de:10:ee:b7:06:ca:8a:8f:
98:8a:d4:f7:ac:ee:df:8e:91:3c:07:a1:8b:9b:5b:89:f4:d9:
c1:62:27:2a:4f:06:b3:84:9d:4a:ec:c5:27:4f:a4:cf:7d:df:
36:3d:fe:be
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDIbPEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI2
NDI1ODYzYzMwOWYyNjU1Yjg4NGMxNjAwMzk0YzQzMzhlN2ZiNDEwHhcNMjIwMjA5
MTU1NTE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjYTZlZDkwYmJlMjk1
YzNhNDlkZjNlNzgxNWU5YjAxZjA5M2QzZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqcuJcsZ/PIdM9+dWFOfaUhshdVpl67QqBq6Wg5ZFH0V0NeWc
GbuumUrmMBf6QqRhIH6Ux0FEXQF31dSs+X0kyogGN304p/PUNLPI6VqCwaerI1rF
hNF+hOM1vM0cghL8zLAvlNB1xFoJoTmSsqsv9NsjctPPCOXuF5gz8oDZY83VMCuc
DIr5V9KRtEWlP4wriowva0LPO2ukeU6eQlQbgUgepShk2rMQNr7hmOzRScph5ztF
mukfVqHQGCeNsmVqgxRod9+svUm5fbUa9gNuPQvqutGk0TIdq1Hc2yWWlDFtBsIn
aDnzS/zseVPbdQTep6/BLCEAc84n5QzwaO89YQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMpu2Qu+KVw6Sd8+eBXpsB8JPT+5MB8GA1UdIwQYMBaAFCZCWGPDCfJlW4hM
FgA5TEM45/tBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMtYzE0ZjZiYTI1Y2IwLzEv
eW03WkM3NHBYRHBKM3o1NEZlbXdId2s5UDdrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9m
MTBlMGUtMTZjYS00OGIwLWFiZGMtYzE0ZjZiYTI1Y2IwLzEvSmtKWVk4TUo4bVZi
aUV3V0FEbE1RempuLTBFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuaMA0GCSqGSIb3DQEBCwUAA4IB
AQBnyH7khnmJXTGqNCbSJn5VYntHGt10PqDWNvdveaK7L+DCn6TZaTckJdVCX5/g
Pnu0lwVCBnePFb2rxGzutqhaGe2RR7VhHFiGt+VwtVHQYHCsVQTm6G9EwSJM8k7W
XJutD1coH2K8J8gNsG6JJjvBqya2t95CWki02kCXQdY66ZH3F2zqCkiL7pLGZlgO
Fsbx4ztMUzG+64Tr9CK1aSgOuGWDi1X3aJUX/cn3mSxEZG9W4QrEEPIGvnVAUMEn
lvB5JpCfR/2A1HDQSX7VSbbM3hDutwbKio+YitT3rO7fjpE8B6GLm1uJ9NnBYicq
TwazhJ1K7MUnT6TPfd82Pf6+
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:38 2025 by rpki-client