Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/DnaYL9vPM5dK0cCXT6UhE-oZHbU.roa
File: DnaYL9vPM5dK0cCXT6UhE-oZHbU.roa (raw, json)
Hash identifier: onYma4pKMzjOHMC0/ZkyqC9WMrV8LEiYpimx8cEoeV0=
Subject key identifier: 0E:76:98:2F:DB:CF:33:97:4A:D1:C0:97:4F:A5:21:13:EA:19:1D:B5
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 01FB6C4A
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/DnaYL9vPM5dK0cCXT6UhE-oZHbU.roa
Signing time: Sun 20 Feb 2022 10:12:40 +0000
ROA not before: Sun 20 Feb 2022 10:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196883
IP address blocks: 109.196.112.0/24 maxlen: 24
109.196.113.0/24 maxlen: 24
109.196.112.0/21 maxlen: 21
109.196.114.0/24 maxlen: 24
109.196.115.0/24 maxlen: 24
109.196.116.0/24 maxlen: 24
109.196.117.0/24 maxlen: 24
109.196.118.0/24 maxlen: 24
109.196.120.0/24 maxlen: 24
109.196.120.0/23 maxlen: 23
109.196.121.0/24 maxlen: 24
109.196.122.0/23 maxlen: 23
109.196.122.0/24 maxlen: 24
109.196.123.0/24 maxlen: 24
109.196.124.0/22 maxlen: 22
109.196.124.0/24 maxlen: 24
109.196.125.0/24 maxlen: 24
109.196.119.0/24 maxlen: 24
109.196.127.0/24 maxlen: 24
109.196.126.0/24 maxlen: 24
2001:67c:11c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33254474 (0x1fb6c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Feb 20 10:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e76982fdbcf33974ad1c0974fa52113ea191db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:b4:bd:43:b2:98:64:83:15:15:16:70:08:
fe:84:70:31:3e:4e:7d:50:0e:bf:0d:1f:dc:84:c2:
bf:4b:66:8a:17:1b:2e:d1:70:61:c9:ef:65:c4:6d:
ab:78:9f:66:3d:17:d3:aa:a6:cd:3b:18:49:47:52:
01:0e:d0:cb:2f:b2:dc:3b:59:0b:72:5e:6f:2e:5e:
11:76:f4:26:d7:55:b2:22:d4:4e:38:3c:3e:ad:7c:
62:e0:31:5e:4f:af:7d:7d:05:94:8e:84:59:85:99:
d0:6f:9b:5e:a0:d2:ba:d9:b5:90:af:18:2b:23:90:
ef:1d:bf:b8:2a:1e:12:a3:eb:e4:2c:97:3d:a5:fd:
95:2a:e9:57:14:b1:56:3a:ad:58:52:45:0d:ee:8f:
16:c6:85:e4:fd:92:85:fc:9f:fc:cc:32:80:b3:ae:
77:7f:3c:42:5a:13:8f:dc:d0:5e:c5:fe:5e:bd:9d:
87:52:66:a3:1b:16:38:52:fa:9f:a5:17:d8:5d:7b:
02:3a:f4:9a:86:02:ff:c1:3d:83:ba:f3:b5:76:25:
96:aa:8e:56:d8:c0:69:6d:47:dd:73:81:19:6d:5b:
dc:9b:29:b5:68:84:11:a7:73:b3:e8:68:b8:0a:e2:
ba:b1:3a:b9:54:9b:21:27:13:e6:43:e6:10:0a:59:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:98:2F:DB:CF:33:97:4A:D1:C0:97:4F:A5:21:13:EA:19:1D:B5
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/DnaYL9vPM5dK0cCXT6UhE-oZHbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.112.0/20
IPv6:
2001:67c:11c::/48
Signature Algorithm: sha256WithRSAEncryption
00:4b:0d:b3:9d:67:1a:ee:d5:f1:4c:fc:31:05:35:b2:46:5a:
eb:ef:1e:e5:aa:b1:ee:25:37:4a:04:4a:bc:2a:cb:ba:c7:81:
58:18:d2:1b:6f:46:91:20:a3:20:78:66:64:a6:bf:99:56:62:
05:37:a4:29:d8:c8:43:2f:df:42:c7:b3:fd:ec:5c:0a:eb:0a:
09:03:ba:27:68:d5:1e:16:43:e9:3a:3a:0c:9f:74:4b:e2:d4:
79:34:93:75:a1:1a:5f:30:28:f1:b2:2e:e0:40:33:1c:bf:bf:
43:e1:44:28:ea:da:cc:69:a4:fb:49:56:a0:37:e6:a8:83:aa:
18:85:18:b2:40:4b:0b:83:57:81:48:56:2e:3b:60:ed:59:07:
92:01:b9:ce:a5:69:40:46:53:2c:23:20:38:e3:94:0a:6f:4c:
40:de:2c:d6:67:dd:0c:36:cb:1e:27:fd:2e:68:a6:09:3a:b1:
1b:81:0e:22:2b:4c:a4:d9:5c:16:f9:1c:47:ac:cb:54:43:0c:
59:d1:37:cf:db:d2:d3:a3:67:f3:64:07:0b:6d:02:58:7f:3d:
3c:25:e9:2e:76:dd:65:5c:4c:5d:f2:2b:d9:96:c9:78:89:f4:
1b:79:14:ee:26:26:45:f9:7d:3d:81:71:74:36:aa:1f:ef:77:
58:d9:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:36 2025 by rpki-client