Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DBhaeRDq2vCXftWuXU375OnD0cU.roa
File: DBhaeRDq2vCXftWuXU375OnD0cU.roa (raw, json)
Hash identifier: kFBO1I2R//+gCXWaTKp/3un46/hk+13/nGyxMORKQQ8=
Subject key identifier: 0C:18:5A:79:10:EA:DA:F0:97:7E:D5:AE:5D:4D:FB:E4:E9:C3:D1:C5
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E40B317
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DBhaeRDq2vCXftWuXU375OnD0cU.roa
Signing time: Wed 20 Apr 2022 06:37:55 +0000
ROA not before: Wed 20 Apr 2022 06:37:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198350
IP address blocks: 109.236.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239121175 (0xe40b317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c185a7910eadaf0977ed5ae5d4dfbe4e9c3d1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:d0:7c:b1:c9:af:92:89:ed:b5:d0:c8:93:
81:2b:b2:87:d8:dc:e3:4e:bd:93:eb:10:a1:37:c8:
7b:45:f9:ed:b7:25:25:05:72:8a:2a:4d:d0:35:1f:
ce:24:29:fe:00:d5:0c:81:05:08:40:7b:91:1b:1a:
d0:69:66:8a:e1:7d:ec:6d:c8:35:1d:b2:23:3e:6e:
6f:4d:a1:fa:5c:de:aa:88:ce:b9:a4:ea:1c:3f:83:
60:d4:3b:30:03:a7:e1:98:4d:c0:e6:57:72:19:2b:
d9:40:20:24:92:06:71:1c:f3:1c:ba:8a:7d:14:ca:
4b:30:1e:b1:f3:59:c6:d0:fe:0d:3d:59:35:17:a0:
f9:bf:33:97:9e:4d:62:96:71:b6:3d:13:a8:64:5c:
b1:89:75:52:41:14:39:de:f1:08:b7:da:17:87:61:
14:3f:6f:88:47:e0:49:4f:d2:a0:cb:7a:64:13:db:
2f:11:b5:6b:b0:bf:a7:39:c8:85:1b:74:e6:c5:c9:
78:42:10:cc:74:e0:58:95:b1:e5:77:af:43:d6:fa:
68:05:5f:88:3f:c2:1c:4b:fe:a1:d5:4c:9f:e1:63:
0c:e3:51:f4:91:a1:f0:ba:cb:70:44:ac:b8:b0:9b:
5c:50:91:54:d9:35:fa:03:bb:75:b8:75:2a:57:d8:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:5A:79:10:EA:DA:F0:97:7E:D5:AE:5D:4D:FB:E4:E9:C3:D1:C5
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DBhaeRDq2vCXftWuXU375OnD0cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.247.0/24
Signature Algorithm: sha256WithRSAEncryption
38:87:d3:27:99:60:6f:0c:0e:a2:61:47:d6:ab:40:40:81:e2:
2d:9f:ea:08:05:d8:5a:50:8d:41:fd:f6:46:36:2f:44:11:92:
7e:51:78:1f:87:96:7f:29:e3:a7:57:7a:a3:b0:8f:88:d3:79:
33:2b:b0:e9:ba:47:48:a3:cf:29:c1:b8:1e:44:ee:a9:39:30:
29:1b:f0:7d:7c:49:a6:87:09:7e:62:4d:5e:04:4e:68:7d:4c:
cf:7e:1f:69:ea:f1:85:3b:67:25:8a:3e:5c:f8:e1:55:93:81:
13:72:0c:86:75:6b:09:f8:56:35:14:94:74:ba:77:1b:ee:6d:
07:29:9c:cf:51:9e:0b:0c:52:f6:de:a6:b8:f2:1a:1e:17:dd:
0b:af:c8:55:15:3c:be:ad:c0:3d:14:25:1d:ed:81:cb:84:52:
b1:52:33:d9:46:d2:f3:d7:16:e2:63:8b:6e:81:7c:a7:36:f7:
03:f7:0a:25:8f:46:f1:b9:ff:b9:25:b4:b1:67:e2:41:37:6c:
3d:85:d3:b8:5c:d2:af:16:65:e2:84:8e:04:b7:71:2e:0f:07:
9d:13:95:13:f5:1d:b0:6a:e2:75:c4:10:a8:b6:8c:f4:a8:3f:
00:26:7a:44:4d:64:00:75:9d:84:07:c2:0f:b2:96:94:a5:a4:
7b:a7:95:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:38 2025 by rpki-client