Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/9iaovCsiVuPRAdFzgj-fSQgZTbs.roa
File: 9iaovCsiVuPRAdFzgj-fSQgZTbs.roa (raw, json)
Hash identifier: +QpJ2u0zY4mcpkRxYSjOuL53QDXS5PUsqNC62OlbR4Y=
Subject key identifier: F6:26:A8:BC:2B:22:56:E3:D1:01:D1:73:82:3F:9F:49:08:19:4D:BB
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01845D0C88BD36998DF4FA74D0C71BD814DE
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/9iaovCsiVuPRAdFzgj-fSQgZTbs.roa
Signing time: Wed 09 Nov 2022 15:40:13 +0000
ROA not before: Wed 09 Nov 2022 15:40:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39396
IP address blocks: 109.121.139.0/24 maxlen: 24
109.121.136.0/24 maxlen: 24
109.121.142.0/24 maxlen: 24
109.121.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:0c:88:bd:36:99:8d:f4:fa:74:d0:c7:1b:d8:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Nov 9 15:40:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f626a8bc2b2256e3d101d173823f9f4908194dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:f3:76:93:5f:97:7e:9d:18:21:2f:6a:59:
ac:62:d2:23:d3:93:40:c9:09:4e:a8:74:9f:bf:29:
df:d1:49:63:30:2a:12:3d:e3:e8:0b:7e:71:fa:34:
cf:4e:81:b6:ce:e4:c2:ff:9c:50:5e:cf:dc:67:27:
cf:54:b3:fe:99:4a:e6:3c:a3:eb:8e:5d:59:b2:f3:
b4:1f:e5:e3:62:df:e3:13:53:59:f1:bb:c3:59:02:
56:4b:2c:d7:17:db:62:1f:55:8d:eb:95:dc:93:e6:
b6:5b:18:26:07:43:43:69:40:5c:b6:5d:c4:31:6a:
47:eb:1a:ac:5c:e1:2f:0e:08:76:4f:a3:e7:f0:c2:
c5:1d:32:05:a8:31:2a:80:c4:aa:75:2e:c7:17:5e:
45:72:c7:d2:af:1c:51:f0:81:7e:f3:28:28:e3:be:
a1:d1:12:7e:40:34:93:28:23:30:3f:20:d1:bb:7d:
5d:81:59:97:27:4d:e1:7d:c3:fc:e2:25:d2:ad:b4:
da:b7:d0:30:bd:a1:2b:27:03:a4:96:07:c4:be:a9:
4a:ef:1d:69:92:1f:37:5c:6e:0f:dd:45:32:dd:92:
48:ea:60:09:fc:4b:27:e2:5b:46:14:38:ec:57:d9:
a8:b7:09:d4:57:2f:04:ac:88:ae:df:7b:95:4e:cc:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:A8:BC:2B:22:56:E3:D1:01:D1:73:82:3F:9F:49:08:19:4D:BB
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/9iaovCsiVuPRAdFzgj-fSQgZTbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.136.0/24
109.121.139.0/24
109.121.142.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:b2:8b:56:16:c0:82:a1:6d:23:3a:39:6f:ba:12:e3:ef:58:
b1:41:72:2c:c8:b4:54:b9:60:5c:2e:77:69:d6:f8:94:24:49:
19:62:40:83:be:bc:4e:70:d8:98:64:67:92:75:98:77:f0:48:
d2:1f:c1:cc:cc:45:98:4e:bb:6f:6c:38:e9:1c:38:0f:48:b2:
99:34:ac:e7:66:db:86:7a:13:d5:28:4b:87:61:7d:4d:fb:40:
00:75:9c:a0:5f:32:00:25:55:10:c9:c8:3e:d6:95:5c:50:94:
10:be:a5:b3:81:bb:8d:50:fb:88:f8:e6:97:8d:06:94:24:51:
f8:45:ca:03:c8:33:3d:72:2a:15:01:f8:cf:a0:83:31:61:f9:
aa:fe:dc:4b:3f:49:77:bc:05:01:05:80:2f:f5:fb:41:e6:67:
0b:fc:2f:54:e4:8d:7f:66:c1:5f:d4:d5:8c:4e:43:bf:c8:9c:
e1:be:8b:a3:8e:2c:10:e9:b1:34:7b:d3:b1:e7:e0:15:50:a4:
3c:02:81:2e:d5:b8:cf:50:b7:da:0e:00:12:09:0f:87:59:e8:
b8:64:d0:9b:5d:36:38:8b:bd:78:9a:79:77:1e:6b:fe:b4:5f:
86:2d:7b:ac:19:54:b4:73:0d:16:0e:fd:a5:3c:a6:ab:b9:12:
bc:96:42:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:51 2025 by rpki-client