Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Xr6x0CTukjxnZwEstONIWjtcrxw.roa
File: Xr6x0CTukjxnZwEstONIWjtcrxw.roa (raw, json)
Hash identifier: 3HwBYNawJEjYEYgfulbDzapaESSaL6gCrmHo3Krm8Q0=
Subject key identifier: 5E:BE:B1:D0:24:EE:92:3C:67:67:01:2C:B4:E3:48:5A:3B:5C:AF:1C
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01863B42F5C664E4F987BEC4EE129854D80F
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Xr6x0CTukjxnZwEstONIWjtcrxw.roa
Signing time: Fri 10 Feb 2023 12:18:09 +0000
ROA not before: Fri 10 Feb 2023 12:18:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39650
IP address blocks: 109.162.253.0/24 maxlen: 24
109.162.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:42:f5:c6:64:e4:f9:87:be:c4:ee:12:98:54:d8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Feb 10 12:18:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ebeb1d024ee923c6767012cb4e3485a3b5caf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:ca:9e:c7:a2:00:b0:12:4d:4b:dd:5c:71:
99:61:39:8a:2c:cf:80:d2:41:a1:d2:16:63:86:37:
e3:f0:a8:34:4d:7f:bb:60:39:51:23:d0:28:46:4b:
1c:4a:5b:8b:a4:f2:d3:63:26:2c:d6:3b:67:05:df:
3e:9a:42:4f:4e:51:19:23:17:28:97:56:7e:47:a4:
53:1f:c3:a6:97:54:6c:c4:6f:a4:bc:d8:60:b7:a1:
02:16:24:34:8b:9a:a8:8f:85:cc:07:26:9a:9a:59:
ea:52:35:99:a4:0e:73:9d:c4:27:cb:c1:b6:2b:02:
c6:54:6d:c3:f4:01:24:bf:e0:70:ea:ea:f2:ef:fb:
e4:22:bd:c2:46:2e:b1:2f:26:bb:99:9e:f7:5c:6a:
92:12:16:6e:48:fb:15:7c:61:a8:a8:0a:d2:e7:a3:
ae:2f:15:87:26:7a:c6:a5:a6:0d:79:b5:66:8a:6d:
b9:d2:d4:5e:26:2f:a0:7f:e9:14:f5:da:b6:b9:2a:
10:be:4b:98:4c:67:7b:6c:0d:47:f3:f9:10:1c:45:
4e:f0:1c:8b:20:56:dc:97:92:5f:0c:01:11:dc:76:
00:7b:40:72:5f:e8:e1:03:98:5f:59:a9:ac:fb:15:
8a:3a:e0:3d:ef:79:60:d6:6c:c4:01:07:ac:a6:a2:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BE:B1:D0:24:EE:92:3C:67:67:01:2C:B4:E3:48:5A:3B:5C:AF:1C
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Xr6x0CTukjxnZwEstONIWjtcrxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:33:09:f1:41:90:65:b4:23:68:de:8c:fe:e7:43:0c:31:65:
2b:21:8e:03:ae:11:87:36:bd:91:dc:16:e7:a6:f3:48:9c:9c:
be:d2:51:18:0f:a5:80:b2:e9:4d:b4:d2:c2:99:f4:6b:fa:9e:
9b:35:9c:11:8f:7c:e2:26:a8:ee:f6:eb:70:ea:dd:43:83:ec:
24:6e:1f:70:dc:bc:0a:b3:03:ea:c8:37:88:ba:93:72:06:1b:
9f:54:6f:c8:65:cd:24:5f:e7:22:cc:fa:0e:a9:1b:99:12:7b:
5f:e9:98:94:20:af:f0:0b:60:26:61:b7:a1:c7:05:f4:ae:88:
1e:b4:85:c8:c4:83:54:43:64:c8:74:6e:f9:4d:6e:b6:de:af:
43:73:da:13:0f:24:73:f5:09:7f:86:95:38:af:87:22:84:60:
10:6c:ce:18:c1:e3:32:a0:22:13:d2:22:d4:51:a5:dc:6a:e3:
be:82:9e:cc:5d:8e:b0:24:00:78:8c:6d:b7:bb:2b:b1:60:54:
05:b2:b5:89:dc:94:41:ed:ee:a1:12:04:b1:b7:7c:4d:bf:67:
53:13:e2:c6:c1:69:e8:7c:58:07:7b:24:ee:05:d4:c2:b7:b8:
78:d7:71:98:b1:0f:e9:4c:be:33:7e:74:b7:22:fb:38:78:68:
c1:2b:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:16 2025 by rpki-client